Function at 0x10013160
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
call fcn.10052c40
push 0x10014480
push 0x43e1f8
push 0xe9
call fcn.10085ba0
push 0x10014500
push 0x4e1385
push 0xe9
call fcn.10085ba0
push 0x10085b30
push 0x643c5e
push 0xff
call fcn.10085ba0
push 0x10085b30
push 0x643d1e
push 0xff
call fcn.10085ba0
push 0x10085b30
push 0x653c6f
push 0xff
call fcn.10085ba0
push 0x10085b30
push 0x643fe4
push 0xff
call fcn.10085ba0
add esp, 0x48
push 0x10085b30
push 0x6440a4
push 0xff
call fcn.10085ba0
push 0x10085b30
push 0x6367d7
push 0xff
call fcn.10085ba0
push 0x10085b30
push 0x636960
push 0xff
call fcn.10085ba0
push 0x10085b30
push 0x63765a
push 0xff
call fcn.10085ba0
push 0x10085b30
push 0x6466ee
push 0xff
call fcn.10085ba0
push 0x10085b30
push 0x96fc3f
push 0xff
call fcn.10085ba0
add esp, 0x48
push 0x10085b30
push 0x9948dc
push 0xff
call fcn.10085ba0
push 0x10085b30
push 0x994971
push 0xff
call fcn.10085ba0
push 0x10014400
push 0x4a6e0b
push 0xff
call fcn.10085ba0
push 0x10014400
push 0x59dfc7
push 0xff
call fcn.10085ba0
push 0x10014400
push 0x59f9d3
push 0xff
call fcn.10085ba0
push 0x10014400
push 0x5a005c
push 0xff
call fcn.10085ba0
add esp, 0x48
push 0x10014400
push 0x5a50b9
push 0xff
call fcn.10085ba0
push 0x10014400
push 0x5a54a1
push 0xff
call fcn.10085ba0
push 0x10014400
push 0x5aa18c
push 0xff
call fcn.10085ba0
push 0x10014400
push 0x658e2f
push 0xff
call fcn.10085ba0
push 0x10014400
push 0x736bbc
push 0xff
call fcn.10085ba0
push 0x10014400
push 0x792b22
push 0xff
call fcn.10085ba0
add esp, 0x48
push 0x10014400
push 0x7c3a67
push 0xff
call fcn.10085ba0
push 0x10014400
push 0x7c44db
push 0xff
call fcn.10085ba0
push 0x10014400
push 0x97700d
push 0xff
call fcn.10085ba0
push 0x10014400
push 0x987d19
push 0xff
call fcn.10085ba0
push 0x10014400
push 0x998a4a
push 0xff
call fcn.10085ba0
push 0x10014530
push 0x99bd08
push 0xe9
call fcn.10085ba0
add esp, 0x48
push 0x10014560
push 0x7f70a9
push 0xe9
call fcn.10085ba0
push 0x10014590
push 0x7bfe47
push 0xe9
call fcn.10085ba0
push 0x5c3f50
push 0x5c3f3b
push 0xe9
call fcn.10085ba0
push 0x7fba55
push 0x7fba4d
push 0xe9
call fcn.10085ba0
push 0x7fbbcf
push 0x7fba68
push 0xe9
call fcn.10085ba0
push 0x7fbbcf
push 0x7fbaa0
push 0xe9
call fcn.10085ba0
add esp, 0x48
push 0x7c00d5
push 0x7c00a8
push 0xe9
call fcn.10085ba0
push 0x7f727e
push 0x7f7252
push 0xe9
call fcn.10085ba0
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 4]
add esp, 0x18
push eax
push 0x40
push 1
push 0x7f75e6
call ebx
lea eax, [ebp - 4]
mov byte [0x7f75e6], 0xdd
push eax
push dword [ebp - 4]
push 1
push 0x7f75e6
call ebx
push 0x100145d0
push 0x4e1d7c
push 0xe8
call fcn.10085ba0
push 0x10014640
push 0x63ce69
push 0xe8
call fcn.10085ba0
push 0x10014640
push 0x63d27a
push 0xe8
call fcn.10085ba0
push 0x10014a10
push 0x63d102
push 0xe8
call fcn.10085ba0
push 0x10014a10
push 0x63d58c
push 0xe8
call fcn.10085ba0
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
add esp, 0x3c
push str.._Settings.ini
push 0
push str.DisableStaticEffect
push str.AntiLag
call edi
push str.._Settings.ini
push 0
push str.DisableDynamicEffect
push str.AntiLag
mov dword [0x1049b164], eax
call edi
push str.._Settings.ini
push 0
push str.DisableSkillEffect
push str.AntiLag
mov dword [0x1049b160], eax
call edi
push str.._Settings.ini
push 0
push str.DisableGlowEffect
push str.AntiLag
mov dword [0x1049b15c], eax
call edi
push str.._Settings.ini
push 0
push str.DisableWings
push str.AntiLag
mov dword [0x1049b158], eax
call edi
push str.._Settings.ini
push 0
push str.ReduceMemory
push str.AntiLag
mov dword [0x1049b154], eax
call edi
push str.._Settings.ini
push 1
push str.Anisotropy
push str.Graphics
mov dword [0x1049b150], eax
call edi
push str.._Settings.ini
mov dword [0x1049b14c], eax
push 1
push str.MaxAnisotropy
push str.Graphics
call edi
push str.._Settings.ini
push 1
push str.Linear
push str.Graphics
mov dword [0x1049b148], eax
call edi
push str.._Settings.ini
push 0
push str.TronEffects
push str.Graphics
mov dword [0x1049b144], eax
call edi
push str.._Settings.ini
push 1
push 0x100b9cc0
push str.Graphics
call edi
push str.._Settings.ini
push 0
push str.DisablePing
push str.Other
mov dword [0x1049b13c], eax
call edi
push str.._Settings.ini
push 0
push str.CloseMessageBox
push str.Other
mov dword [0x1049b138], eax
call edi
push str.._Settings.ini
push 0
push str.DisableAutoCtrl
push str.Other
call edi
push str.._Settings.ini
push 1
push str.HealthBarPlayer
push str.Options
mov dword [0x1049b0b0], eax
call edi
push str.._Settings.ini
push 1
push str.HealthBarMonster
push str.Options
mov dword [0x1049b0b4], eax
call edi
push str.._Settings.ini
push 0
push str.ServerTime
push str.Other
call edi
push str.._Settings.ini
push 0x4e4
push str.Charset
push str.Other
mov dword [0x1049b140], eax
call edi
push 0x64
push 0
push 0x1049b0d0
mov dword [0x1049b0b8], eax
call fcn.1008e1e0
add esp, 0xc
push str.._Settings.ini
push 0
push str.FontEnable
push str.Font
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
push str.._Settings.ini
push 0x14
push 0x1049b0d0
push str.Gulim
push str.FontName1
push str.Font
setne byte [0x1049b134]
call esi
push str.._Settings.ini
push 0x14
push 0x1049b0e4
push 0x100b9bec
push str.FontName2
push str.Font
call esi
push str.._Settings.ini
push 0x14
push 0x1049b0f8
push 0x100b9bec
push str.FontName3
push str.Font
call esi
push str.._Settings.ini
push 0x14
push 0x1049b10c
push 0x100b9bec
push str.FontName4
push str.Font
call esi
push str.._Settings.ini
push 0xd
push str.FontSize1
push str.Font
call edi
push str.._Settings.ini
push 0xd
push str.FontSize2
push str.Font
mov dword [0x1049b0bc], eax
call edi
push str.._Settings.ini
push 0xd
push str.FontSize3
push str.Font
mov dword [0x1049b0c0], eax
call edi
push str.._Settings.ini
push 0xd
push str.FontSize4
inc eax
push str.Font
mov dword [0x1049b0c4], eax
call edi
push str.._Settings.ini
push 0xd
push str.FontSize5
push str.Font
mov dword [0x1049b0c8], eax
call edi
cmp byte [0x1049b134], 0
mov dword [0x1049b0cc], eax
mov eax, dword [0x1049b0bc]
mov dword [0x8531688], eax
je 0x10013800
push 0x10014e40
push 0x629687
push 0xe9
call fcn.10085ba0
add esp, 0xc
mov esi, dword [0x1049b0b8]
lea eax, [ebp - 4]
push eax
push 0x40
push 4
push 0x9d0057
call ebx
lea eax, [ebp - 4]
mov dword [0x9d0057], esi
push eax
push dword [ebp - 4]
push 4
push 0x9d0057
call ebx
push 0x5dadd0
push 0x5d9397
push 0xe9
call fcn.10085ba0
push 0x59213d
push 0x592110
push 0xe9
call fcn.10085ba0
push 0x100130e0
push 0x592566
push 0xe8
call fcn.10085ba0
push 0x10013140
push 0x627f5f
push 0xe9
call fcn.10085ba0
add esp, 0x30
cmp dword [0x1028ade8], 0
jbe 0x10013956
push 0x10015110
push 0x5ad316
push 0xe8
call fcn.10085ba0
push 0x10015110
push 0x79354b
push 0xe8
call fcn.10085ba0
push 0x10015110
push 0x988eb9
push 0xe8
call fcn.10085ba0
mov eax, dword [0x1028ade8]
add esp, 0x24
cmp eax, 2
je 0x100138d9
cmp eax, 4
jne 0x100138e8
push 0x1c0f
call fcn.1003d300
mov eax, dword [0x1028ade8]
cmp eax, 3
je 0x100138f2
cmp eax, 4
jne 0x10013956
push 0x180f
call fcn.1003d300
push 0x1c0d
call fcn.1003d300
push 0x1c0e
call fcn.1003d300
push 0x1c10
call fcn.1003d300
push 0x1c16
call fcn.1003d300
push 0x1c1f
call fcn.1003d300
push 0x1c29
call fcn.1003d300
push 0x1c2a
call fcn.1003d300
push 0x1c2b
call fcn.1003d300
push 0x1c2c
call fcn.1003d300
push 0x10015130
push 0x9881f4
push 0xe8
call fcn.10085ba0
add esp, 0xc
lea eax, [ebp - 4]
push eax
push 0x40
push 1
push 0x4c01e8
call ebx
lea eax, [ebp - 4]
mov byte [0x4c01e8], 0x64
push eax
push dword [ebp - 4]
push 1
push 0x4c01e8
call ebx
cmp dword [0x1028ad40], 0
jne 0x100139b3
push 0x96fc5b
push 0x96fc51
push 0xe9
call fcn.10085ba0
add esp, 0xc
cmp dword [0x1028ae1c], 1
jne 0x100139e7
push 0x7f3686
push 0x7f366a
push 0xe9
call fcn.10085ba0
push 0x99bede
push 0x99bec2
push 0xe9
call fcn.10085ba0
add esp, 0x18
cmp dword [0x1028ae48], 1
jne 0x10013a1b
push 0x10015170
push 0x7f3580
push 0xe9
call fcn.10085ba0
push 0x100151a0
push 0x99be49
push 0xe9
call fcn.10085ba0
add esp, 0x18
lea eax, [ebp - 4]
push eax
push 0x40
push 0x205
push 0x9baba0
call ebx
push 0x205
push 0x90
push 0x9baba0
call fcn.1008e1e0
add esp, 0xc
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 0x205
push 0x9baba0
call ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret