Function at 0x100097f0
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Log keystrokes via application hook
Spawn thread to rwx shellcode

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x108
mov eax, dword [0x1001a018]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov ebx, 0x100a4380
call fcn.1000fa50
test al, al
je 0x1000a901
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0xe61144
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0xe61144], 0xa0
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0xe61144
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4d1e69
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4d1e69], 0xeb
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x4d1e69
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4d228d
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4d228d], 0xe9
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x4d228d
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4d228e
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4d228e], 0x8b
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x4d228e
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4d228f
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4d228f], 0
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x4d228f
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4d2290
call esi
lea ecx, [ebp - 0x108]
mov byte [0x4d2290], 0
mov edx, dword [ebp - 0x108]
push ecx
push edx
push 1
push 0x4d2290
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4d2291
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4d2291], 0
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x4d2291
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4d559c
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4d559c], 0xeb
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x4d559c
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x633f7a
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x633f7a], 0xeb
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x633f7a
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x634403
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x634403], 0xeb
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x634403
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x63e6c4
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x63e6c4], 0xeb
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x63e6c4
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4d2246
call esi
mov byte [0x4d2246], 0xeb
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 1
push 0x4d2246
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x501163
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x501163], 0xeb
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x501163
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x40af0a
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x40af0a], 0
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x40af0a
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x40b4bc
call esi
mov bl, 0x50
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x40b4bc], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x40b4bc
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x40b4c5
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x40b4c5], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x40b4c5
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x40b4cf
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x40b4cf], 0x18
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x40b4cf
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x40af0a
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x40af0a], 0
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x40af0a
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x40afd5
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x40afd5], 0xeb
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x40afd5
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x5c8f86
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x5c8f86], 0
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x5c8f86
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x5c8dac
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x5c8dac], 0
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x5c8dac
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x777fd6
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x777fd6], 0x70
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x777fd6
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x777fd7
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x777fd7], 0x17
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x777fd7
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4ebec7
call esi
mov bl, 0x3c
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4ebec7], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x4ebec7
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x5c4004
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x5c4004], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x5c4004
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x7e40bb
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x7e40bb], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x7e40bb
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x81b546
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x81b546], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x81b546
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x81b58d
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x81b58d], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x81b58d
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x86e284
call esi
lea ecx, [ebp - 0x108]
mov byte [0x86e284], bl
mov edx, dword [ebp - 0x108]
push ecx
push edx
push 1
push 0x86e284
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x86e44c
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x86e44c], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x86e44c
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x86e573
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x86e573], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x86e573
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x86f8fc
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x86f8fc], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x86f8fc
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x7da373
call esi
mov bl, 0xb7
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x7da373], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x7da373
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x7e1c44
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x7e1c44], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x7e1c44
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x52100d
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x52100d], 0xeb
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x52100d
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x52101b
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x52101b], 2
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x52101b
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x9543c4
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x9543c4], 0
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x9543c4
call esi
mov bl, byte [0x100a452c]
lea eax, [ebp - 0x108]
push eax
neg bl
push 0x40
sbb bl, bl
push 1
and bl, 0x8a
push 0x64cbd1
add bl, 0xeb
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x64cbd1], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x64cbd1
call esi
mov bl, byte [0x100a452d]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x64cbd0
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x64cbd0], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x64cbd0
call esi
mov bl, byte [0x100a452d]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x95ceef
call esi
lea ecx, [ebp - 0x108]
mov byte [0x95ceef], bl
mov edx, dword [ebp - 0x108]
push ecx
push edx
push 1
push 0x95ceef
call esi
mov bl, byte [0x100a452d]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x95cf14
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x95cf14], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x95cf14
call esi
mov bl, byte [0x100a43e8]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0xe61f68
inc bl
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0xe61f68], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0xe61f68
call esi
mov bl, byte [0x100a43ea]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0xe61f69
add bl, 2
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0xe61f69], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0xe61f69
call esi
mov bl, byte [0x100a43eb]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0xe61f6a
add bl, 3
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0xe61f6a], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0xe61f6a
call esi
mov bl, byte [0x100a43ed]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0xe61f6b
add bl, 4
call esi
lea ecx, [ebp - 0x108]
mov byte [0xe61f6b], bl
mov edx, dword [ebp - 0x108]
push ecx
push edx
push 1
push 0xe61f6b
call esi
mov bl, byte [0x100a43ee]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0xe61f6c
add bl, 5
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0xe61f6c], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0xe61f6c
call esi
mov di, word [0x100a43e6]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 2
push 0xe609e4
call esi
lea ecx, [ebp - 0x108]
push ecx
mov word [0xe609e4], di
mov edx, dword [ebp - 0x108]
push edx
push 2
push 0xe609e4
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0x4d0e09
call esi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0x4d0e09], 0x100a4401
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0x4d0e09
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0x4d9f55
call esi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0x4d9f55], 0x100a4421
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0x4d9f55
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0xd226c8
call esi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0xd226c8], 0x100096a0
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0xd226c8
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0xd2265c
call esi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0xd2265c], 0x100096c0
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0xd2265c
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0x4d0e17
call esi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0x4d0e17], 0x10009750
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0x4d0e17
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0x57f9fd
call esi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0x57f9fd], 0x130
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0x57f9fd
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0x57fa40
call esi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0x57fa40], 0x154
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0x57fa40
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0x57fa82
call esi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0x57fa82], 0x178
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0x57fa82
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0x57fac4
call esi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0x57fac4], 0x19c
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0x57fac4
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0x597694
call esi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0x597694], 0x200
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0x597694
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4289ef
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4289ef], 0xeb
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x4289ef
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 0x1b
push 0xd20170
call esi
mov eax, 0x90909090
mov ecx, 0xd20170
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
mov word [ecx + 0x18], ax
mov byte [ecx + 0x1a], al
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 0x1b
push 0xd20170
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 0x3f
push 0x5528b6
call esi
push 0x3f
push 0x90
push 0x5528b6
call sub.MSVCR100.dll_memset
mov edx, dword [ebp - 0x108]
add esp, 0xc
lea ecx, [ebp - 0x108]
push ecx
push edx
push 0x3f
push 0x5528b6
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 0xe6
push 0x5db322
call esi
push 0xe6
push 0x90
push 0x5db322
call sub.MSVCR100.dll_memset
mov edx, dword [ebp - 0x108]
add esp, 0xc
lea ecx, [ebp - 0x108]
push ecx
push edx
push 0xe6
push 0x5db322
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 0x14
push 0x63e908
call esi
mov eax, 0x90909090
mov ecx, 0x63e908
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 0x14
push 0x63e908
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 0xd
push 0x64452a
call esi
mov eax, 0x90909090
mov ecx, 0x64452a
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov byte [ecx + 0xc], al
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 0xd
push 0x64452a
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 5
push 0x792b7f
call esi
mov eax, 0x90909090
mov ecx, 0x792b7f
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 5
push 0x792b7f
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 0x20
push 0xe611b2
call esi
push 0x20
push 0x100a43c5
push 0xe611b2
call sub.MSVCR100.dll_memcpy
mov edx, dword [ebp - 0x108]
add esp, 0xc
lea ecx, [ebp - 0x108]
push ecx
push edx
push 0x20
push 0xe611b2
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 0x11
push 0xe61f70
call esi
mov ecx, dword [0x100a43f0]
mov eax, 0xe61f70
mov dword [eax], ecx
mov edx, dword [0x100a43f4]
mov dword [eax + 4], edx
mov ecx, dword [0x100a43f8]
mov dword [eax + 8], ecx
mov edx, dword [0x100a43fc]
mov dword [eax + 0xc], edx
mov cl, byte [0x100a4400]
lea edx, [ebp - 0x108]
push edx
mov byte [eax + 0x10], cl
mov eax, dword [ebp - 0x108]
push eax
push 0x11
push 0xe61f70
call esi
push 0x10007490
push 0x5b96e8
mov bl, 0xe8
call fcn.10014010
push fcn.1000fea0
push 0x65fd79
or bl, 0xff
call fcn.10014010
push 0x10135138
mov eax, 0x6b
call fcn.100140e0
push 0x10135048
mov eax, 0x6c
call fcn.100140e0
push 0x101338d8
mov eax, 0x6d
call fcn.100140e0
add esp, 0x1c
mov eax, 0x100a4710
call fcn.10002ac0
mov eax, 0x100cb810
call fcn.10002b40
mov eax, 0x100cbe50
call fcn.10002bc0
mov edx, 0x100e5490
call fcn.10002c90
mov eax, 0x100e5f80
call fcn.10002ea0
mov eax, 0x100ea120
call fcn.10002f80
mov eax, 0x100ec010
call fcn.10002fe0
mov eax, 0x100edf00
call fcn.10003040
mov eax, 0x100efdf0
call fcn.10003200
mov edx, 0x1012af40
call fcn.100032c0
mov ecx, 0x1012de20
call fcn.10013da0
push 0
push str.DataEnc1.dat
call fcn.1000df90
push 1
push str.DataDec2.dat
call fcn.1000df90
cmp byte [0x100a4540], 0
je 0x1000a6a2
push 0x1000b620
push 0x7729b3
mov bl, 0xe8
call fcn.10014010
push 0x1000b5f0
push 0x772960
call fcn.10014010
push 0x1000b520
push 0x849180
mov bl, 0xe9
call fcn.10014010
push 0x1000b550
push 0x848e00
call fcn.10014010
add esp, 0x20
call fcn.10001c20
push 0x10001fc0
push 0x78b0bc
mov bl, 0xe9
call fcn.10014010
push 0x10002090
push 0x789765
call fcn.10014010
push 0x100020c0
push 0x789a61
call fcn.10014010
push 0x100020f0
push 0x789daa
call fcn.10014010
add esp, 0x20
call fcn.10002120
call fcn.10003680
call fcn.10005bb0
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 4
push 0xd22578
call esi
lea edx, [ebp - 0x108]
push edx
mov dword [0xd22578], 0x10005f20
mov eax, dword [ebp - 0x108]
push eax
push 4
push 0xd22578
call esi
call fcn.10006130
cmp byte [0x100a4541], 0
je 0x1000a759
push 0x10006450
push 0x7c8270
call fcn.10014010
push 0x10006ba0
push 0x7c7860
call fcn.10014010
add esp, 0x10
call fcn.10007240
call fcn.10007760
cmp byte [0x100a4542], 0
je 0x1000a78f
push 0x10008c90
push 0x834682
mov bl, 0xe8
call fcn.10014010
push 0x10008cb0
push 0x860ae8
call fcn.10014010
add esp, 0x10
call fcn.10007840
call fcn.1000a940
call fcn.1000abe0
call fcn.1000ad80
call fcn.1000e520
call fcn.10010db0
call fcn.100119c0
push fcn.10011d00
push 0x5c2170
mov bl, 0xe9
call fcn.10014010
push 0x10011e70
push 0x5c17b0
call fcn.10014010
push 0x10012150
push 0x58e3b0
call fcn.10014010
push 0x10012d20
push 0x7e44d3
or bl, 0xff
call fcn.10014010
add esp, 0x20
cmp byte [0x100a4543], 0
je 0x1000a813
push 0x100144c0
push 0x5c7329
mov bl, 0xe9
call fcn.10014010
add esp, 8
call fcn.100078c0
test byte [0x100a43a4], 1
mov esi, dword [sym.imp.KERNEL32.dll_OpenMutexA]
je 0x1000a83e
push 0x100a43a5
push 0
push 0x1f0001
call esi
test eax, eax
jne 0x1000a83e
call fcn.1000fe80
test byte [0x100a43a4], 2
je 0x1000a886
push 0x100a43c5
lea ecx, [ebp - 0x104]
push str.SSEMU_MAIN_S6ENG__s
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x104]
push edx
push 0
push 0x1f0001
call esi
test eax, eax
jne 0x1000a839
lea eax, [ebp - 0x104]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov edi, 0x100a4380
call fcn.1000fbf0
push edi
call fcn.1000fd00
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
call esi
mov ecx, dword [0x101331cc]
mov edi, dword [sym.imp.USER32.dll_SetWindowsHookExA]
push eax
push ecx
push 0x100094c0
push 2
call edi
mov dword [0x10133814], eax
call esi
mov edx, dword [0x101331cc]
push eax
push edx
push 0x100095b0
push 7
call edi
cmp byte [0x100a4545], 0
pop edi
pop esi
mov dword [0x10133810], eax
pop ebx
je 0x1000a8f3
push 0
push 0
push 0
push 0x100097b0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1001520d
mov esp, ebp
pop ebp
ret
push str.Could_not_load_ServerInfo.sse_
call fcn.10014240
add esp, 4
call fcn.1000fe80
int3