Function at 0x10009f30
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Read .ini file

Disassembly:
push ebx
push esi
push 0x1000a310
push 0x40b154
mov bl, 0xe9
call fcn.10053c00
push 0x1000a390
push 0x64a79a
or bl, 0xff
call fcn.10053c00
push 0x1000a390
push 0x64a85f
or bl, 0xff
call fcn.10053c00
push 0x1000a390
push 0x656e03
or bl, 0xff
call fcn.10053c00
push 0x1000a390
push 0x64ab3d
or bl, 0xff
call fcn.10053c00
push 0x1000a390
push 0x64ac02
or bl, 0xff
call fcn.10053c00
push 0x1000a390
push 0x63ddf2
or bl, 0xff
call fcn.10053c00
push 0x1000a390
push 0x63df89
or bl, 0xff
call fcn.10053c00
add esp, 0x40
push 0x1000a390
push 0x63ea4c
or bl, 0xff
call fcn.10053c00
push 0x1000a390
push 0x64ca0c
or bl, 0xff
call fcn.10053c00
push 0x1000a390
push 0x77faf9
or bl, 0xff
call fcn.10053c00
push 0x1000a390
push 0x81071b
or bl, 0xff
call fcn.10053c00
push 0x1000a390
push 0x81079b
or bl, 0xff
call fcn.10053c00
push 0x1000a290
push 0x47fe31
or bl, 0xff
call fcn.10053c00
push 0x1000a290
push 0x59890d
or bl, 0xff
call fcn.10053c00
push 0x1000a290
push 0x59a399
or bl, 0xff
call fcn.10053c00
add esp, 0x40
push 0x1000a290
push 0x59a93c
or bl, 0xff
call fcn.10053c00
push 0x1000a290
push 0x59b13b
or bl, 0xff
call fcn.10053c00
push 0x1000a290
push 0x5a4261
or bl, 0xff
call fcn.10053c00
push 0x1000a290
push 0x5a4d52
or bl, 0xff
call fcn.10053c00
push 0x1000a290
push 0x5b6117
or bl, 0xff
call fcn.10053c00
push 0x1000a290
push 0x65a6ce
or bl, 0xff
call fcn.10053c00
push 0x1000a290
push 0x727987
or bl, 0xff
call fcn.10053c00
push 0x1000a290
push 0x7861f1
or bl, 0xff
call fcn.10053c00
add esp, 0x40
push 0x1000a290
push 0x7d32fa
or bl, 0xff
call fcn.10053c00
push 0x1000a290
push 0x7d3b0d
or bl, 0xff
call fcn.10053c00
push 0x1000a3c0
push 0x8317bd
mov bl, 0xe9
call fcn.10053c00
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
add esp, 0x18
push str.._ExgConfigs.ini
push 0
push str.SeparateChat
push str.Setting
call esi
push str.._ExgConfigs.ini
push 0
push str.HpMonsterBar
push str.Setting
mov dword [0x100b9058], eax
call esi
push str.._ExgConfigs.ini
push 0
push str.HPMonsterName
push str.Setting
mov dword [0x100b9054], eax
call esi
push str.._ExgConfigs.ini
push 0
push str.DisableStaticEffect
push str.AntiLag
mov dword [0x100b9050], eax
call esi
push str.._ExgConfigs.ini
push 0
push str.DisableDynamicEffect
push str.AntiLag
mov dword [0x100b9080], eax
call esi
push str.._ExgConfigs.ini
push 0
push str.DisableSkillEffect
push str.AntiLag
mov dword [0x100b907c], eax
call esi
push str.._ExgConfigs.ini
push 0
push str.DisableGlowEffect
push str.AntiLag
mov dword [0x100b9078], eax
call esi
push str.._ExgConfigs.ini
push 1
push str.Anisotropy
push str.Graphics
mov dword [0x100b9074], eax
call esi
push str.._ExgConfigs.ini
push 1
push str.MaxAnisotropy
push str.Graphics
mov dword [0x100b9070], eax
call esi
push str.._ExgConfigs.ini
push 1
push str.Linear
push str.Graphics
mov dword [0x100b906c], eax
call esi
push str.._ExgConfigs.ini
push 0
push str.TronEffects
push str.Graphics
mov dword [0x100b9068], eax
call esi
push str.._ExgConfigs.ini
push 0
push str.MiniMap
push str.Graphics
mov dword [0x100b9060], eax
call esi
push str.._ExgConfigs.ini
push 1
push 0x1005a98c
push str.Graphics
mov dword [0x100b905c], eax
call esi
push str.._ExgConfigs.ini
push 0
push str.SellPostColor
push str.Game
mov dword [0x100b9064], eax
call esi
mov dword [0x100b904c], eax
mov eax, dword [0x100b9058]
pop esi
mov dword [0x100b9048], eax
pop ebx
cmp eax, 1
jne 0x1000a28e
jmp fcn.100099c0
ret