Function at 0x1008eec0
Capabilities:
Check for time delay via gettickcount
Create thread
Encode data using xor
Log keystrokes via application hook
Read .ini file
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x10c
mov eax, dword [0x100d9018]
xor eax, esp
mov dword [esp + 0x108], eax
push ebx
push esi
push edi
push str..Config.ini
push 0
push str.ReduceMemory
push str.AntiLag
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
cmp eax, 1
jne 0x1008ef0e
push 0
push 0
push 0
push 0x1008ee80
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.10090420
call fcn.100b3650
mov ebx, 0x1027fd48
call fcn.100a6f50
test al, al
jne 0x1008ef73
push 0x100
push 0
push 0x103e4c78
call sub.MSVCR100.dll_memset
add esp, 0xc
xor eax, eax
lea esp, [esp]
mov cl, byte [eax + 0x100c6d30]
sub cl, 0x1b
xor cl, 0xc
mov byte [eax + 0x103e4c78], cl
inc eax
cmp eax, 0x100
jb 0x1008ef40
push 0x103e4c78
push 0
mov ecx, 0x1027c400
call fcn.10090540
add esp, 8
call fcn.100b6650
call fcn.100b3920
call fcn.10011ec0
test al, al
jne 0x1008efb5
mov ecx, 4
push 0x1388
call fcn.10090f50
push eax
push 2
mov esi, 0x10367948
call fcn.100b6b50
add esp, 0xc
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x108]
xor ecx, esp
call fcn.100c06a6
mov esp, ebp
pop ebp
ret
push 0x102808b2
mov ecx, 5
call fcn.10090f50
push eax
lea edx, [esp + 0x18]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0
lea eax, [esp + 0x14]
push eax
push 0
mov esi, 0x103676f8
call fcn.100b6b50
movzx ecx, word [0x102808b0]
add esp, 0xc
push ecx
mov ecx, 0x10280890
call fcn.10011f40
test al, al
jne 0x1008f006
mov ecx, 6
jmp 0x1008ef86
call fcn.10042150
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov dword [esp + 0xc], eax
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ecx]
call esi
mov edi, eax
call esi
sub eax, edi
cmp eax, 0x1f4
jae 0x1008f03f
nop
push 1
call ebx
call esi
sub eax, edi
cmp eax, 0x1f4
jb 0x1008f030
call esi
sub eax, dword [esp + 0xc]
cmp eax, 0x7530
ja 0x1008fca1
cmp dword [0x100d966c], 0xffffffff
je 0x1008f062
cmp byte [0x101d96a0], 0
jne 0x1008f088
call fcn.10011ec0
test al, al
je 0x1008f088
movzx edx, word [0x102808b0]
push edx
mov ecx, 0x10280890
call fcn.10011f40
test al, al
je 0x1008f088
call fcn.10042150
jmp 0x1008f020
cmp dword [0x103abe8c], 0
je 0x1008f020
cmp dword [0x103abe90], 0
je 0x1008f020
cmp dword [0x103abe94], 0
je 0x1008f020
cmp dword [0x103abe98], 0
je 0x1008f020
cmp dword [0x103abe9c], 0
je 0x1008f020
mov ecx, dword [0x1027c3d8]
sub ecx, dword [0x1027c3d4]
mov eax, 0x7d8c42b3
imul ecx
mov ecx, dword [0x1027c3c8]
sub ecx, dword [0x1027c3c4]
sar edx, 7
mov edi, edx
shr edi, 0x1f
add edi, edx
mov eax, 0x3e0f83e1
imul ecx
mov ecx, dword [0x1027c3e8]
sub ecx, dword [0x1027c3e4]
sar edx, 6
add edi, edx
mov ebx, edx
mov eax, 0x7e07e07f
imul ecx
mov ecx, dword [0x1027c3b8]
sub ecx, dword [0x1027c3b4]
shr ebx, 0x1f
add ebx, edi
sar edx, 5
add ebx, edx
mov edi, edx
mov eax, 0x38e38e39
imul ecx
mov eax, dword [0x103abeac]
mov ecx, dword [0x103abea8]
shr edi, 0x1f
add edi, ebx
sar edx, 4
add edi, edx
mov ebx, edx
mov edx, dword [0x103abea4]
shr ebx, 0x1f
add ebx, edi
lea edi, [eax + ecx]
add edi, edx
add edi, dword [0x103abea0]
cmp ebx, edi
jne 0x1008f017
push eax
mov eax, dword [0x103abea0]
push ecx
push edx
push eax
mov eax, 0x18
call fcn.100b6dc0
push eax
push 0
mov ecx, 0x1027c400
call fcn.10090540
add esp, 0x18
mov edi, 0x1027fd48
call fcn.100a7050
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x103e4848
push 0
push 0
push 0x1008eb70
push 0
push 0
call ebx
push 0x103e484c
push 0
push 0
push 0x1008ea80
push 0
push 0
mov dword [0x103a65c8], eax
call ebx
push 0x103e4850
push 0
push 0
push 0x1008e980
push 0
push 0
mov dword [0x103a65cc], eax
call ebx
push 0x103e4858
push 0
push 0
push 0x1008e940
push 0
push 0
mov dword [0x103a65d0], eax
call ebx
mov ecx, dword [0x103a65c8]
push 2
push ecx
mov dword [0x103a65d4], eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
push 0x7d0
push 1
push 0x103a65c8
push 3
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov byte [0x103e482c], 1
call esi
mov dword [0x103e4830], eax
call fcn.10041230
mov esi, 0x103676f8
call fcn.100b5350
call fcn.100a7140
mov eax, 0x2c
call fcn.100b6dc0
push eax
push 0
mov ecx, 0x1027c400
call fcn.10090540
add esp, 8
cmp dword [0x10310534], 0
jne 0x1008f653
push 0xa0
mov esi, 0xe61144
call fcn.100b6670
add esp, 4
push 0xeb
mov esi, 0x4d1e69
call fcn.100b6670
add esp, 4
push 0xe9
mov esi, 0x4d228d
call fcn.100b6670
add esp, 4
push 0x8b
mov esi, 0x4d228e
call fcn.100b6670
add esp, 4
push 0
mov esi, 0x4d228f
call fcn.100b6670
add esp, 4
push 0
mov esi, 0x4d2290
call fcn.100b6670
add esp, 4
push 0
mov esi, 0x4d2291
call fcn.100b6670
add esp, 4
push 0xeb
mov esi, 0x4d559c
call fcn.100b6670
add esp, 4
push 0xeb
mov esi, 0x633f7a
call fcn.100b6670
add esp, 4
push 0xeb
mov esi, 0x634403
call fcn.100b6670
add esp, 4
push 0xeb
mov esi, 0x63e6c4
call fcn.100b6670
add esp, 4
push 0xeb
mov esi, 0x4d2246
call fcn.100b6670
add esp, 4
push 0xeb
mov esi, 0x501163
call fcn.100b6670
add esp, 4
push 0
mov esi, 0x40af0a
call fcn.100b6670
add esp, 4
push 0x50
mov esi, 0x40b4bc
call fcn.100b6670
add esp, 4
push 0x50
mov esi, 0x40b4c5
call fcn.100b6670
add esp, 4
push 0x18
mov esi, 0x40b4cf
call fcn.100b6670
add esp, 4
push 0
mov esi, 0x40af0a
call fcn.100b6670
add esp, 4
push 0xeb
mov esi, 0x40afd5
call fcn.100b6670
add esp, 4
push 0x70
mov esi, 0x777fd6
call fcn.100b6670
add esp, 4
push 0x17
mov esi, 0x777fd7
call fcn.100b6670
add esp, 4
push 0x3c
mov esi, 0x4ebec7
call fcn.100b6670
add esp, 4
push 0x3c
mov esi, 0x5c4004
call fcn.100b6670
add esp, 4
push 0x3c
mov esi, 0x7e40bb
call fcn.100b6670
add esp, 4
push 0x3c
mov esi, 0x81b546
call fcn.100b6670
add esp, 4
push 0x3c
mov esi, 0x81b58d
call fcn.100b6670
add esp, 4
push 0x3c
mov esi, 0x86e284
call fcn.100b6670
add esp, 4
push 0x3c
mov esi, 0x86e44c
call fcn.100b6670
add esp, 4
push 0x3c
mov esi, 0x86e573
call fcn.100b6670
add esp, 4
push 0x3c
mov esi, 0x86f8fc
call fcn.100b6670
add esp, 4
push 0xb7
mov esi, 0x7da373
call fcn.100b6670
add esp, 4
push 0xb7
mov esi, 0x7e1c44
call fcn.100b6670
add esp, 4
push 0xeb
mov esi, 0x52100d
call fcn.100b6670
add esp, 4
push 0
mov esi, 0x9543c4
call fcn.100b6670
mov edx, dword [0x1027fdbc]
add esp, 4
neg edx
sbb dl, dl
and dl, 0x8a
add dl, 0xeb
movzx eax, dl
push eax
mov esi, 0x64cbd1
call fcn.100b6670
movzx ecx, byte [0x1027fdc0]
add esp, 4
push ecx
mov esi, 0x64cbd0
call fcn.100b6670
movzx edx, byte [0x1027fdc0]
add esp, 4
push edx
mov esi, 0x95ceef
call fcn.100b6670
movzx eax, byte [0x1027fdc0]
add esp, 4
push eax
mov esi, 0x95cf14
call fcn.100b6670
movzx ecx, byte [0x1027fd50]
add esp, 4
inc cl
movzx edx, cl
push edx
mov esi, 0xe61f68
call fcn.100b6670
movzx eax, byte [0x1027fd52]
add al, 2
movzx ecx, al
add esp, 4
push ecx
mov esi, 0xe61f69
call fcn.100b6670
mov dl, byte [0x1027fd53]
add dl, 3
movzx eax, dl
add esp, 4
push eax
mov esi, 0xe61f6a
call fcn.100b6670
movzx ecx, byte [0x1027fd55]
add cl, 4
movzx edx, cl
add esp, 4
push edx
mov esi, 0xe61f6b
call fcn.100b6670
movzx eax, byte [0x1027fd56]
add al, 5
movzx ecx, al
add esp, 4
push ecx
mov esi, 0xe61f6c
call fcn.100b6670
movzx edx, word [0x1027fd4e]
add esp, 4
push edx
mov esi, 0xe609e4
call fcn.100b66a0
add esp, 4
push 0x1027fd69
mov esi, 0x4d0e09
call fcn.100b66d0
add esp, 4
push 0x1027fd89
mov esi, 0x4d9f55
call fcn.100b66d0
add esp, 4
mov esi, 0x14
mov edi, 0x63e908
call fcn.100b6780
push 0x20
push 0x10280890
push 0xe611b2
call fcn.100b6740
add esp, 0xc
push 0x11
push 0x1027fd58
push 0xe61f70
call fcn.100b6740
add esp, 0xc
push fcn.100a71f0
push 0x65fd79
or bl, 0xff
call fcn.100b6700
push 0x10043010
push 0x5b96e8
mov bl, 0xe8
call fcn.100b6700
mov esi, 1
add esp, 0x10
cmp dword [0x1028306c], esi
jne 0x1008f61a
mov eax, 0x1027fde4
call fcn.1002bb20
push 0
push str.DataEnc1.dat
call fcn.10097430
push esi
push str.DataDec2.dat
call fcn.10097430
cmp dword [0x1028306c], esi
jne 0x1008f63e
call fcn.10083260
call fcn.100a0d90
call fcn.100a8750
call fcn.10090b20
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.100bb060
push 0
push 0
push 0
push 0x1008e780
push 0
push 0
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
call esi
mov edi, dword [sym.imp.USER32.dll_SetWindowsHookExA]
push eax
mov eax, dword [0x103a65d8]
push eax
push 0x1008e5e0
push 2
call edi
mov dword [0x103a65c4], eax
call esi
mov ecx, dword [0x103a65d8]
push eax
push ecx
push 0x1008e820
push 7
call edi
mov dword [0x103a65c0], eax
push 0x103abd08
mov eax, 0x6a
call fcn.100b6e60
add esp, 4
push 0x103abc18
mov eax, 0x6b
call fcn.100b6e60
add esp, 4
push 0x103aa4a8
mov eax, 0x6c
call fcn.100b6e60
add esp, 4
mov eax, 0x10310d0c
call fcn.10030930
mov eax, 0x1031409c
call fcn.10030990
mov eax, 0x1031742c
call fcn.100309f0
mov eax, 0x1031a7bc
call fcn.10032320
mov eax, 0x1031ace4
call fcn.10032560
mov eax, 0x1031b20c
call fcn.100327a0
mov eax, 0x1031b734
call fcn.10035040
mov eax, 0x10334a6c
call fcn.100350a0
mov eax, 0x1034dda4
call fcn.10035100
mov edx, 0x10283088
call fcn.10034170
mov eax, 0x10285f68
call fcn.1002a1f0
mov eax, 0x1029f5a8
call fcn.100b5520
mov eax, 0x102d5108
call fcn.100347b0
mov eax, 0x102da6f8
call fcn.10088500
mov eax, 0x102dd998
call fcn.10029030
mov edx, 0x102dc228
call fcn.10027b90
mov eax, 0x102df680
call fcn.100913b0
mov edx, 0x102e0c60
call fcn.1002a350
mov eax, 0x102e4310
call fcn.10089ba0
mov eax, 0x102ee2c8
call fcn.10032d30
mov eax, 0x102f0078
call fcn.10030ca0
mov edx, 0x102f9fd8
call fcn.10032180
mov eax, 0x102fa398
call fcn.100ab060
mov eax, 0x102fb338
call fcn.1002a6b0
mov eax, 0x10303678
call fcn.1002a720
mov eax, 0x102daec8
call fcn.10029d90
mov eax, 0x102e8190
call fcn.10030de0
mov eax, 0x102e8708
call fcn.10030eb0
mov eax, 0x102e8a28
call fcn.10092940
mov eax, 0x1031053c
call fcn.10029450
mov eax, 0x10367480
call fcn.10029220
mov eax, 0x103670fc
call fcn.100ad420
mov eax, 0x103671d4
call fcn.100ad4f0
call fcn.1000ef90
cmp dword [0x103a0310], 0
jne 0x1008f837
call fcn.100abc90
mov esi, 1
cmp dword [0x103a0310], esi
jne 0x1008f849
call fcn.100ac070
call fcn.10029b90
cmp dword [0x10310528], esi
jne 0x1008f85b
call fcn.10009230
cmp dword [0x103104f8], esi
jne 0x1008f868
call fcn.100b6100
call fcn.10012740
or eax, 0xffffffff
push 0x10011bb0
push 0x4d7d13
mov bl, 0xe9
mov dword [0x103aa458], eax
mov dword [0x103aa460], eax
mov dword [0x103aa454], eax
call fcn.100b6700
add esp, 8
call fcn.10063eb0
mov eax, dword [0x102ee018]
cmp eax, 6
jne 0x1008f8ac
call fcn.10096530
mov eax, dword [0x102ee018]
mov ebx, esi
cmp eax, ebx
je 0x1008f8bc
cmp eax, 2
je 0x1008f8bc
cmp eax, 3
jne 0x1008f8d0
call fcn.1000ce40
call fcn.10046840
call fcn.100096a0
mov eax, dword [0x102ee018]
cmp eax, 4
je 0x1008f8da
cmp eax, 5
jne 0x1008f8e4
call fcn.1005c1d0
mov eax, dword [0x102ee018]
cmp eax, 7
jne 0x1008f8ee
call fcn.100259d0
cmp dword [0x103104b8], 2
jne 0x1008f8fc
call fcn.10023480
call fcn.10093ef0
call fcn.10083110
cmp dword [0x10283068], ebx
jne 0x1008f920
call fcn.100832f0
cmp dword [0x10283068], ebx
jne 0x1008f920
call fcn.1002a140
cmp dword [0x10283074], ebx
jne 0x1008f92d
call fcn.100858d0
cmp dword [0x10283078], ebx
jne 0x1008f93a
call fcn.10028d10
call fcn.1009f5c7
call fcn.1009fb20
cmp dword [0x1028307c], ebx
jne 0x1008f951
call fcn.100866f0
call fcn.10092430
push str..Config.ini
push 0
push str.FontEnable
push str.Font
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
cmp eax, ebx
jne 0x1008f976
call fcn.100940f0
call fcn.100ab1f0
cmp dword [0x10283038], 0
jne 0x1008f989
call fcn.10091020
cmp dword [0x10283038], ebx
jne 0x1008fa04
mov esi, 5
mov edi, 0x82ac07
call fcn.100b6780
mov edi, 0x82b03d
call fcn.100b6780
mov edi, 0x82b0a7
call fcn.100b6780
mov edi, 0x82b18b
call fcn.100b6780
mov edi, 0x82b1fa
call fcn.100b6780
mov edi, 0x82b21b
call fcn.100b6780
mov edi, 0x82b2cb
call fcn.100b6780
mov edi, 0x82b339
call fcn.100b6780
mov edi, 0x82b3b7
call fcn.100b6780
mov edi, 0x82b3ca
call fcn.100b6780
mov edi, 0x82b772
call fcn.100b6780
cmp dword [0x1031052c], ebx
jne 0x1008fa11
call fcn.100086f0
cmp dword [0x1028302c], 0
je 0x1008fad6
push 0x103abf10
mov esi, 0x4d597b
call fcn.100b66d0
add esp, 4
push 0x103abf10
mov esi, 0x4da289
call fcn.100b66d0
add esp, 4
push 0x103abf10
mov esi, 0x4da297
call fcn.100b66d0
add esp, 4
push 0x103abf10
mov esi, 0x4da3a2
call fcn.100b66d0
add esp, 4
push 0x103abf10
mov esi, 0x4da3ce
call fcn.100b66d0
add esp, 4
push 0x103abf10
mov esi, 0x4da3d9
call fcn.100b66d0
add esp, 4
push 0x103abf10
mov esi, 0x63d326
call fcn.100b66d0
add esp, 4
push 0x103abf10
mov esi, 0x642112
call fcn.100b66d0
add esp, 4
push 0x1008e380
push 0x4da280
mov bl, 0xe9
call fcn.100b6700
push 0x1008e3b0
push 0x4da3a1
call fcn.100b6700
add esp, 0x10
mov ebx, 1
cmp dword [0x10283034], 0
jne 0x1008faee
mov esi, 5
mov edi, 0x85b6ac
call fcn.100b6780
call fcn.1001a8a0
cmp dword [0x102ee01c], ebx
jne 0x1008fb50
push 0x1008e5b0
push 0x414086
mov bl, 0xe8
call fcn.100b6700
push 0x1008e5b0
push 0x4140d9
call fcn.100b6700
push 0x1008e5b0
push 0x41412e
call fcn.100b6700
push 0x1008e5b0
push 0x4141ba
call fcn.100b6700
push 0x1008e5b0
push 0x4141eb
call fcn.100b6700
add esp, 0x28
mov ebx, 1
cmp dword [0x102ee01c], 2
jne 0x1008fb63
call fcn.100b2550
call fcn.100ae700
cmp dword [0x102ee01c], 3
jne 0x1008fb71
call fcn.100af9c0
cmp dword [0x102ee01c], 4
jne 0x1008fb84
call fcn.10013c30
call fcn.100b0430
cmp dword [0x1031050c], ebx
jne 0x1008fbba
push 0
call dword [sym.imp.MSVCR100.dll__time64]
add esp, 4
push eax
call dword [sym.imp.MSVCR100.dll_srand]
add esp, 4
push 0x100b07e0
push 0x4d70d4
mov bl, 0xe8
call fcn.100b6700
add esp, 8
mov ebx, 1
cmp dword [0x10283048], ebx
jne 0x1008fbc7
call fcn.10006910
cmp dword [0x103a0310], ebx
jne 0x1008fbe2
call fcn.100ba770
cmp dword [0x102ee018], 0
jne 0x1008fbe2
call fcn.10082bb0
cmp dword [0x10283034], 3
jne 0x1008fbf0
call fcn.1000dda0
cmp dword [0x1028303c], ebx
jne 0x1008fbfd
call fcn.10027af0
call fcn.1009fdb0
call fcn.100880e0
cmp dword [0x102ee020], 2
jne 0x1008fc32
fldz
push ecx
mov esi, 0xd43220
fstp dword [esp]
call fcn.100b6430
fldz
mov esi, 0xd43224
fstp dword [esp]
call fcn.100b6430
add esp, 4
call fcn.100303b0
cmp dword [0x102ee2c4], ebx
jne 0x1008fc44
call fcn.100313a0
cmp dword [0x10283080], ebx
jne 0x1008fc65
push 0x10089c10
push 0x5d0b94
mov bl, 0xe8
call fcn.100b6700
add esp, 8
mov ebx, 1
mov edi, dword [sym.imp.MSVCR100.dll_fopen]
cmp dword [0x10310524], ebx
jne 0x1008fcb6
push 0x100ca564
push str.DataCustomScriptScript.AutoPotion
call edi
add esp, 8
test eax, eax
jne 0x1008fcab
push 0x10
push str.Error
push str.Failed_to_load_AutoPotion_Script_
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, 7
jmp 0x1008ef86
push str.DataCustomScriptScript.AutoPotion
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
cmp dword [0x103670f0], ebx
jne 0x1008fcd7
push 0x100b3610
push 0x842ac7
mov bl, 0xe8
call fcn.100b6700
add esp, 8
mov ebx, 1
cmp dword [0x103670f4], ebx
jne 0x1008fce4
call fcn.100b5470
call fcn.10097fa0
cmp dword [0x1036747c], ebx
jne 0x1008fcf6
call fcn.100ad810
push 0
mov esi, 0x5c914e
call fcn.100b6670
add esp, 4
call fcn.10001380
push 0x100ca564
push str.DataCustomScriptScript.ServerNames
call edi
add esp, 8
test eax, eax
jne 0x1008fd38
push 0x10
push str.Error
push str.Failed_to_load_ServerNames_Script_
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.100339d0
push 0x100ca564
push str.DataCustomScriptScript.TitleColor
call edi
add esp, 8
test eax, eax
jne 0x1008fd6b
push 0x10
push str.Error
push str.Failed_to_load_ItemTitleColor_Script_
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.10089920
call fcn.10085c10
push 0x100ca564
push str.DataCustomScriptScript.ServerNews
call edi
add esp, 8
test eax, eax
jne 0x1008fda3
push 0x10
push str.Error
push str.Failed_to_load_ServerNews_Script_
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.100b2630
push 0x100ca564
push str.DataCustomScriptScript.ChatColor
call edi
add esp, 8
test eax, eax
jne 0x1008fdd6
push 0x10
push str.Error
push str.Failed_to_load_ChatColor_Script_
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.10008bd0
push 0x100ca564
push str.DataCustomScriptScript.EventInfo
call edi
add esp, 8
test eax, eax
jne 0x1008fe09
push 0x10
push str.Error
push str.Failed_to_load_EventInfo_Script_
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.100349d0
call fcn.10083000
cmp dword [0x10367688], ebx
jne 0x1008fef1
push 0
mov esi, 0x5b89c6
call fcn.100b6670
add esp, 4
push 0
mov esi, 0x5b89cc
call fcn.100b6670
add esp, 4
push 0
mov esi, 0x5b89d2
call fcn.100b6670
add esp, 4
push 0
mov esi, 0x5b89d8
call fcn.100b6670
add esp, 4
push 0
mov esi, 0x5b89de
call fcn.100b6670
add esp, 4
push 0
mov esi, 0x5b89e4
call fcn.100b6670
add esp, 4
push 0
mov esi, 0x5b89ea
call fcn.100b66a0
add esp, 4
push 0
mov esi, 0x5c6316
call fcn.100b6670
add esp, 4
push 0
mov esi, 0x5c6329
call fcn.100b6670
add esp, 4
push 0
mov esi, 0x5c633c
call fcn.100b6670
add esp, 4
push 0
mov esi, 0x5c634f
call fcn.100b6670
add esp, 4
push 0
mov esi, 0x5c6362
call fcn.100b6670
add esp, 4
push 0
mov esi, 0x5c6375
call fcn.100b6670
add esp, 4
push 0
mov esi, 0x5c6388
call fcn.100b66a0
add esp, 4
cmp dword [0x10367694], 0
je 0x1008feff
call fcn.100bc010
mov ecx, dword [esp + 0x114]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.100c06a6
mov esp, ebp
pop ebp
ret