Function at 0x1000a6a0
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Log keystrokes via application hook
Spawn thread to rwx shellcode

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x108
mov eax, dword [0x1001c018]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov ebx, 0x100a6958
call fcn.10010bc0
test al, al
je 0x1000b866
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0xe61144
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0xe61144], 0xa0
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0xe61144
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4d1e69
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4d1e69], 0xeb
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x4d1e69
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4d228d
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4d228d], 0xe9
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x4d228d
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4d228e
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4d228e], 0x8b
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x4d228e
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4d228f
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4d228f], 0
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x4d228f
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4d2290
call edi
lea ecx, [ebp - 0x108]
mov byte [0x4d2290], 0
mov edx, dword [ebp - 0x108]
push ecx
push edx
push 1
push 0x4d2290
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4d2291
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4d2291], 0
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x4d2291
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4d559c
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4d559c], 0xeb
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x4d559c
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x633f7a
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x633f7a], 0xeb
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x633f7a
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x634403
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x634403], 0xeb
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x634403
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x63e6c4
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x63e6c4], 0xeb
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x63e6c4
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4d2246
call edi
mov byte [0x4d2246], 0xeb
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 1
push 0x4d2246
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x501163
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x501163], 0xeb
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x501163
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x40af0a
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x40af0a], 0
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x40af0a
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x40b4bc
call edi
mov bl, 0x50
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x40b4bc], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x40b4bc
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x40b4c5
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x40b4c5], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x40b4c5
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x40b4cf
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x40b4cf], 0x18
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x40b4cf
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x40af0a
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x40af0a], 0
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x40af0a
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x40afd5
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x40afd5], 0xeb
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x40afd5
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x5c8f86
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x5c8f86], 0
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x5c8f86
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x5c8dac
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x5c8dac], 0
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x5c8dac
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x777fd6
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x777fd6], 0x70
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x777fd6
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x777fd7
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x777fd7], 0x17
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x777fd7
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4ebec7
call edi
mov bl, 0x3c
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4ebec7], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x4ebec7
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x5c4004
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x5c4004], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x5c4004
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x7e40bb
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x7e40bb], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x7e40bb
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x81b546
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x81b546], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x81b546
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x81b58d
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x81b58d], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x81b58d
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x86e284
call edi
lea ecx, [ebp - 0x108]
mov byte [0x86e284], bl
mov edx, dword [ebp - 0x108]
push ecx
push edx
push 1
push 0x86e284
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x86e44c
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x86e44c], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x86e44c
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x86e573
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x86e573], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x86e573
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x86f8fc
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x86f8fc], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x86f8fc
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x7da373
call edi
mov bl, 0xb7
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x7da373], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x7da373
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x7e1c44
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x7e1c44], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x7e1c44
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x52100d
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x52100d], 0xeb
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x52100d
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x52101b
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x52101b], 2
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x52101b
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x9543c4
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x9543c4], 0
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x9543c4
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x95dedb
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x95dedb], 0xf4
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x95dedb
call edi
mov bl, byte [0x100a6b04]
lea eax, [ebp - 0x108]
push eax
neg bl
push 0x40
sbb bl, bl
push 1
and bl, 0x8a
push 0x64cbd1
add bl, 0xeb
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x64cbd1], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x64cbd1
call edi
mov bl, byte [0x100a6b05]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x64cbd0
call edi
lea ecx, [ebp - 0x108]
mov byte [0x64cbd0], bl
mov edx, dword [ebp - 0x108]
push ecx
push edx
push 1
push 0x64cbd0
call edi
mov bl, byte [0x100a6b05]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x95ceef
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x95ceef], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x95ceef
call edi
mov bl, byte [0x100a6b05]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x95cf14
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x95cf14], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x95cf14
call edi
mov bl, byte [0x100a69c0]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0xe61f68
inc bl
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0xe61f68], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0xe61f68
call edi
mov bl, byte [0x100a69c2]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0xe61f69
add bl, 2
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0xe61f69], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0xe61f69
call edi
mov bl, byte [0x100a69c3]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0xe61f6a
add bl, 3
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0xe61f6a], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0xe61f6a
call edi
mov bl, byte [0x100a69c5]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0xe61f6b
add bl, 4
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0xe61f6b], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0xe61f6b
call edi
mov bl, byte [0x100a69c6]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0xe61f6c
add bl, 5
call edi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0xe61f6c], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0xe61f6c
call edi
mov si, word [0x100a69be]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 2
push 0xe609e4
call edi
lea ecx, [ebp - 0x108]
push ecx
mov word [0xe609e4], si
mov edx, dword [ebp - 0x108]
push edx
push 2
push 0xe609e4
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0x4d0e09
call edi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0x4d0e09], 0x100a69d9
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0x4d0e09
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0x4d9f55
call edi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0x4d9f55], 0x100a69f9
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0x4d9f55
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0xd226c8
call edi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0xd226c8], 0x1000a550
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0xd226c8
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0xd2265c
call edi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0xd2265c], 0x1000a570
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0xd2265c
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0x4d0e17
call edi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0x4d0e17], 0x1000a600
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0x4d0e17
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0x57f9fd
call edi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0x57f9fd], 0x130
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0x57f9fd
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0x57fa40
call edi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0x57fa40], 0x154
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0x57fa40
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0x57fa82
call edi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0x57fa82], 0x178
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0x57fa82
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0x57fac4
call edi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0x57fac4], 0x19c
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0x57fac4
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0x597694
call edi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0x597694], 0x200
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0x597694
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 0x1b
push 0xd20170
call edi
mov eax, 0x90909090
mov ecx, 0xd20170
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
mov word [ecx + 0x18], ax
mov byte [ecx + 0x1a], al
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 0x1b
push 0xd20170
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 0x3f
push 0x5528b6
call edi
push 0x3f
push 0x90
push 0x5528b6
call sub.MSVCR100.dll_memset
mov edx, dword [ebp - 0x108]
add esp, 0xc
lea ecx, [ebp - 0x108]
push ecx
push edx
push 0x3f
push 0x5528b6
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 0xe6
push 0x5db322
call edi
push 0xe6
push 0x90
push 0x5db322
call sub.MSVCR100.dll_memset
mov edx, dword [ebp - 0x108]
add esp, 0xc
lea ecx, [ebp - 0x108]
push ecx
push edx
push 0xe6
push 0x5db322
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 0x14
push 0x63e908
call edi
mov eax, 0x90909090
mov ecx, 0x63e908
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 0x14
push 0x63e908
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 0xd
push 0x64452a
call edi
mov eax, 0x90909090
mov ecx, 0x64452a
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov byte [ecx + 0xc], al
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 0xd
push 0x64452a
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 5
push 0x792b7f
call edi
mov eax, 0x90909090
mov ecx, 0x792b7f
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 5
push 0x792b7f
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 0x20
push 0xe611b2
call edi
push 0x20
push 0x100a699d
push 0xe611b2
call sub.MSVCR100.dll_memcpy
mov edx, dword [ebp - 0x108]
add esp, 0xc
lea ecx, [ebp - 0x108]
push ecx
push edx
push 0x20
push 0xe611b2
call edi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 0x11
push 0xe61f70
call edi
mov ecx, dword [0x100a69c8]
mov eax, 0xe61f70
mov dword [eax], ecx
mov edx, dword [0x100a69cc]
mov dword [eax + 4], edx
mov ecx, dword [0x100a69d0]
mov dword [eax + 8], ecx
mov edx, dword [0x100a69d4]
mov dword [eax + 0xc], edx
mov cl, byte [0x100a69d8]
lea edx, [ebp - 0x108]
push edx
mov byte [eax + 0x10], cl
mov eax, dword [ebp - 0x108]
push eax
push 0x11
push 0xe61f70
call edi
push 0x10007a30
push 0x5b96e8
mov bl, 0xe8
call fcn.10016440
push fcn.10011010
push 0x65fd79
or bl, 0xff
call fcn.10016440
push 0x1013d9b8
mov eax, 0x6b
call fcn.10016510
push 0x1013d8c8
mov eax, 0x6c
call fcn.10016510
push 0x1013c158
mov eax, 0x6d
call fcn.10016510
add esp, 0x1c
mov eax, 0x100a6ce8
call fcn.10002c60
mov eax, 0x100cdde8
call fcn.10002ce0
mov eax, 0x100ce428
call fcn.10002d60
mov edx, 0x100e7a68
call fcn.10002e30
mov eax, 0x100ea948
call fcn.10003020
mov edx, 0x100eae20
call fcn.100032a0
mov eax, 0x100eb910
call fcn.100034b0
call fcn.10003590
mov eax, 0x100f2990
call fcn.100036b0
mov eax, 0x100f4880
call fcn.10003710
mov eax, 0x100f6770
call fcn.10003770
mov eax, 0x100f8660
call fcn.100038c0
mov edx, 0x101337b0
call fcn.10003980
mov ecx, 0x10136690
call fcn.100161c0
push 0
push str.DataEnc1.dat
call fcn.1000f0f0
push 1
push str.DataDec2.dat
call fcn.1000f0f0
cmp byte [0x100a6b18], 0
je 0x1000b56b
push 0x1000c670
push 0x7729b3
mov bl, 0xe8
call fcn.10016440
push 0x1000c640
push 0x772960
call fcn.10016440
push 0x1000c570
push 0x849180
mov bl, 0xe9
call fcn.10016440
push 0x1000c5a0
push 0x848e00
call fcn.10016440
add esp, 0x20
push 0x1013b840
call dword [sym.imp.USER32.dll_GetCursorPos]
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x100011e0
push 0
push 0
call esi
mov dword [0x1013b848], eax
call fcn.10001dc0
push 0x10002160
push 0x78b0bc
mov bl, 0xe9
call fcn.10016440
push 0x10002230
push 0x789765
call fcn.10016440
push 0x10002260
push 0x789a61
call fcn.10016440
push 0x10002290
push 0x789daa
call fcn.10016440
add esp, 0x20
call fcn.100022c0
call fcn.10003d40
call fcn.10006270
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 4
push 0xd22578
call edi
lea edx, [ebp - 0x108]
push edx
mov dword [0xd22578], 0x100065e0
mov eax, dword [ebp - 0x108]
push eax
push 4
push 0xd22578
call edi
call fcn.100067f0
cmp byte [0x100a6b19], 0
je 0x1000b649
push 0x10006b10
push 0x7c8270
call fcn.10016440
push 0x10007120
push 0x7c7860
call fcn.10016440
add esp, 0x10
call fcn.100077c0
call fcn.10007d00
call fcn.10007de0
push 0x10008b70
push 0x50d905
mov bl, 0xe8
call fcn.10016440
push 0x10008ce0
push 0x5cd10f
mov bl, 0xe9
call fcn.10016440
push 0x10008d40
push 0x5cefe7
call fcn.10016440
add esp, 0x18
cmp byte [0x100a6b1a], 0
je 0x1000b6b8
push 0x10009a30
push 0x834682
mov bl, 0xe8
call fcn.10016440
push 0x10009a50
push 0x860ae8
call fcn.10016440
add esp, 0x10
call fcn.10007ea0
call fcn.1000b8a0
call fcn.1000bc20
call fcn.1000bdd0
call fcn.1000f680
call fcn.10012cd0
call fcn.100138e0
push 0x10013c80
push 0x954071
mov bl, 0xe9
call fcn.10016440
push 0x10013c90
push 0x40b738
mov bl, 0xe8
call fcn.10016440
push 0x10013c90
push 0x77f98b
call fcn.10016440
push 0x10013cf0
push 0x41c136
call fcn.10016440
push fcn.10014160
push 0x5c2170
mov bl, 0xe9
call fcn.10016440
push 0x100142d0
push 0x5c17b0
call fcn.10016440
push 0x100145b0
push 0x58e3b0
call fcn.10016440
push 0x10015180
push 0x7e44d3
or bl, 0xff
call fcn.10016440
add esp, 0x40
cmp byte [0x100a6b1c], 0
je 0x1000b77c
push 0x10016980
push 0x5c7329
mov bl, 0xe9
call fcn.10016440
add esp, 8
call fcn.10007f20
test byte [0x100a697c], 1
mov edi, dword [sym.imp.KERNEL32.dll_OpenMutexA]
je 0x1000b7a7
push 0x100a697d
push 0
push 0x1f0001
call edi
test eax, eax
jne 0x1000b7a7
call fcn.10010ff0
test byte [0x100a697c], 2
je 0x1000b7ef
push 0x100a699d
lea ecx, [ebp - 0x104]
push str.SSEMU_MAIN_S6ENG__s
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x104]
push edx
push 0
push 0x1f0001
call edi
test eax, eax
jne 0x1000b7a2
lea eax, [ebp - 0x104]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov edi, 0x100a6958
call fcn.10010d60
push edi
call fcn.10010e70
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
call edi
mov ecx, dword [0x1013c088]
mov ebx, dword [sym.imp.USER32.dll_SetWindowsHookExA]
push eax
push ecx
push 0x1000a300
push 2
call ebx
mov dword [0x1013c090], eax
call edi
mov edx, dword [0x1013c088]
push eax
push edx
push 0x1000a460
push 7
call ebx
cmp byte [0x100a6b1e], 0
mov dword [0x1013c08c], eax
je 0x1000b855
push 0
push 0
push 0
push 0x1000a660
push 0
push 0
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1001775d
mov esp, ebp
pop ebp
ret
push str.Could_not_load_ServerInfo.sse_
call fcn.10016670
add esp, 4
call fcn.10010ff0
int3