Function at 0x10004910
Capabilities:
Access peb ldr_data
Get ntdll base address
Get number of processors
Get process heap flags
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1000c408
push 0x1000b700
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x310
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 4], 0
mov byte [ebp - 0x218], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x217]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x320], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x31f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x320]
push eax
call fcn.100086b0
add esp, 4
lea edx, [ebp - 0x320]
mov edi, dword [ebp + 8]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x320]
push ecx
push 0x200
lea edx, [ebp - 0x218]
push edx
push str.35853586358735888384858687888990
push 0x1000d81c
push 0x1000d810
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
call esi
lea eax, [ebp - 0x218]
push eax
call fcn.100086b0
push 0x1000d80c
lea ecx, [ebp - 0x218]
push ecx
mov ebx, dword [ebp + 0xc]
lea edx, [ebx + 0x64]
push edx
lea eax, [ebx + 0x14]
push eax
call fcn.10007030
add esp, 0x14
lea ecx, [ebp - 0x320]
push ecx
push 0x200
lea edx, [ebp - 0x218]
push edx
push 0x1000d808
push 0x1000d7fc
push 0x1000d810
call esi
lea eax, [ebp - 0x218]
push eax
call fcn.100086a0
lea ecx, [ebp - 0x218]
push ecx
mov edi, dword [sym.imp.MSVCRT.dll_atoi]
call edi
add esp, 8
mov dword [ebx], eax
lea edx, [ebp - 0x320]
push edx
push 0x200
lea eax, [ebp - 0x218]
push eax
push 0x1000d7f8
push 0x1000d7ec
push 0x1000d810
call esi
lea ecx, [ebp - 0x218]
push ecx
call fcn.100086a0
lea edx, [ebp - 0x218]
push edx
call edi
add esp, 8
mov dword [ebx + 0x4c], eax
lea eax, [ebp - 0x320]
push eax
push 0x200
lea ecx, [ebp - 0x218]
push ecx
push str.1000
push 0x1000d7d8
push 0x1000d810
call esi
lea edx, [ebp - 0x218]
push edx
call fcn.100086a0
lea eax, [ebp - 0x218]
push eax
call edi
add esp, 8
mov dword [ebx + 0x3c], eax
lea ecx, [ebp - 0x320]
push ecx
push 0x200
lea edx, [ebp - 0x218]
push edx
push 0x1000d7f8
push 0x1000d7cc
push 0x1000d810
call esi
lea eax, [ebp - 0x218]
push eax
call fcn.100086a0
lea ecx, [ebp - 0x218]
push ecx
call edi
add esp, 8
mov dword [ebx + 0xa64], eax
lea edx, [ebp - 0x320]
push edx
push 0x200
lea eax, [ebp - 0x218]
push eax
push 0x1000d7c8
push 0x1000d7b8
push 0x1000d810
call esi
lea ecx, [ebp - 0x218]
push ecx
call fcn.100086a0
lea edx, [ebp - 0x218]
push edx
call edi
add esp, 8
mov dword [ebx + 0x28], eax
lea eax, [ebp - 0x320]
push eax
push 0x200
lea ecx, [ebp - 0x218]
push ecx
push 0x1000d7f8
push 0x1000d7cc
push 0x1000d810
call esi
lea edx, [ebp - 0x218]
push edx
call fcn.100086a0
lea eax, [ebp - 0x218]
push eax
call edi
add esp, 8
mov dword [ebx + 0x5c], eax
lea ecx, [ebp - 0x320]
push ecx
push 0x200
lea edx, [ebp - 0x218]
push edx
push str.35853586358735888384858687888990
push 0x1000d7ac
push 0x1000d810
call esi
lea eax, [ebp - 0x218]
push eax
call fcn.100086a0
push 0x1000d80c
lea ecx, [ebp - 0x218]
push ecx
lea edx, [ebx + 0x264]
push edx
lea eax, [ebx + 0x18]
push eax
call fcn.10007030
add esp, 0x14
lea ecx, [ebp - 0x320]
push ecx
push 0x200
lea edx, [ebp - 0x218]
push edx
push 0x1000d808
push 0x1000d7a0
push 0x1000d810
call esi
lea eax, [ebp - 0x218]
push eax
call fcn.100086a0
lea ecx, [ebp - 0x218]
push ecx
call edi
add esp, 8
mov dword [ebx + 4], eax
lea edx, [ebp - 0x320]
push edx
push 0x200
lea eax, [ebp - 0x218]
push eax
push 0x1000d7c8
push 0x1000d794
push 0x1000d810
call esi
lea ecx, [ebp - 0x218]
push ecx
call fcn.100086a0
lea edx, [ebp - 0x218]
push edx
call edi
add esp, 8
mov dword [ebx + 0x50], eax
lea eax, [ebp - 0x320]
push eax
push 0x200
lea ecx, [ebp - 0x218]
push ecx
push str.1000
push 0x1000d788
push 0x1000d810
call esi
lea edx, [ebp - 0x218]
push edx
call fcn.100086a0
lea eax, [ebp - 0x218]
push eax
call edi
add esp, 8
mov dword [ebx + 0x40], eax
lea ecx, [ebp - 0x320]
push ecx
push 0x200
lea edx, [ebp - 0x218]
push edx
push 0x1000d7f8
push 0x1000d77c
push 0x1000d810
call esi
lea eax, [ebp - 0x218]
push eax
call fcn.100086a0
lea ecx, [ebp - 0x218]
push ecx
call edi
add esp, 8
mov dword [ebx + 0xa68], eax
lea edx, [ebp - 0x320]
push edx
push 0x200
lea eax, [ebp - 0x218]
push eax
push 0x1000d7c8
push 0x1000d76c
push 0x1000d810
call esi
lea ecx, [ebp - 0x218]
push ecx
call fcn.100086a0
lea edx, [ebp - 0x218]
push edx
call edi
add esp, 8
mov dword [ebx + 0x2c], eax
lea eax, [ebp - 0x320]
push eax
push 0x200
lea ecx, [ebp - 0x218]
push ecx
push 0x1000d7f8
push 0x1000d77c
push 0x1000d810
call esi
lea edx, [ebp - 0x218]
push edx
call fcn.100086a0
lea eax, [ebp - 0x218]
push eax
call edi
add esp, 8
mov dword [ebx + 0x60], eax
lea ecx, [ebp - 0x320]
push ecx
push 0x200
lea edx, [ebp - 0x218]
push edx
push str.358935903591359235939192939495
push 0x1000d734
push 0x1000d810
call esi
lea eax, [ebp - 0x218]
push eax
call fcn.100086a0
push 0x1000d80c
lea ecx, [ebp - 0x218]
push ecx
lea edx, [ebx + 0x664]
push edx
lea eax, [ebx + 0x1c]
push eax
call fcn.10007030
add esp, 0x14
lea ecx, [ebp - 0x320]
push ecx
push 0x200
lea edx, [ebp - 0x218]
push edx
push 0x1000d730
push 0x1000d724
push 0x1000d810
call esi
lea eax, [ebp - 0x218]
push eax
call fcn.100086a0
lea ecx, [ebp - 0x218]
push ecx
call edi
add esp, 8
mov dword [ebx + 0x58], eax
lea edx, [ebp - 0x320]
push edx
push 0x200
lea eax, [ebp - 0x218]
push eax
push 0x1000d808
push 0x1000d71c
push 0x1000d810
call esi
lea ecx, [ebp - 0x218]
push ecx
call fcn.100086a0
lea edx, [ebp - 0x218]
push edx
call edi
add esp, 8
mov dword [ebx + 8], eax
lea eax, [ebp - 0x320]
push eax
push 0x200
lea ecx, [ebp - 0x218]
push ecx
push str.1000
push 0x1000d710
push 0x1000d810
call esi
lea edx, [ebp - 0x218]
push edx
call fcn.100086a0
lea eax, [ebp - 0x218]
push eax
call edi
add esp, 8
mov dword [ebx + 0x44], eax
lea ecx, [ebp - 0x320]
push ecx
push 0x200
lea edx, [ebp - 0x218]
push edx
push 0x1000d7c8
push 0x1000d700
push 0x1000d810
call esi
lea eax, [ebp - 0x218]
push eax
call fcn.100086a0
lea ecx, [ebp - 0x218]
push ecx
call edi
add esp, 8
mov dword [ebx + 0x30], eax
lea edx, [ebp - 0x320]
push edx
push 0x200
lea eax, [ebp - 0x218]
push eax
push str.359435953596969798
push 0x1000d6d8
push 0x1000d810
call esi
lea ecx, [ebp - 0x218]
push ecx
call fcn.100086a0
push 0x1000d80c
lea edx, [ebp - 0x218]
push edx
lea eax, [ebx + 0x464]
push eax
lea ecx, [ebx + 0x20]
push ecx
call fcn.10007030
add esp, 0x14
lea edx, [ebp - 0x320]
push edx
push 0x200
lea eax, [ebp - 0x218]
push eax
push 0x1000d6d4
push 0x1000d6c8
push 0x1000d810
call esi
lea ecx, [ebp - 0x218]
push ecx
call fcn.100086a0
lea edx, [ebp - 0x218]
push edx
call edi
add esp, 8
mov dword [ebx + 0x54], eax
lea eax, [ebp - 0x320]
push eax
push 0x200
lea ecx, [ebp - 0x218]
push ecx
push 0x1000d808
push 0x1000d6c0
push 0x1000d810
call esi
lea edx, [ebp - 0x218]
push edx
call fcn.100086a0
lea eax, [ebp - 0x218]
push eax
call edi
add esp, 8
mov dword [ebx + 0xc], eax
lea ecx, [ebp - 0x320]
push ecx
push 0x200
lea edx, [ebp - 0x218]
push edx
push str.1000
push 0x1000d6b4
push 0x1000d810
call esi
lea eax, [ebp - 0x218]
push eax
call fcn.100086a0
lea ecx, [ebp - 0x218]
push ecx
call edi
add esp, 8
mov dword [ebx + 0x48], eax
lea edx, [ebp - 0x320]
push edx
push 0x200
lea eax, [ebp - 0x218]
push eax
push 0x1000d7c8
push 0x1000d6a4
push 0x1000d810
call esi
lea ecx, [ebp - 0x218]
push ecx
call fcn.100086a0
lea edx, [ebp - 0x218]
push edx
call edi
add esp, 8
mov dword [ebx + 0x34], eax
lea eax, [ebp - 0x320]
push eax
push 0x200
lea ecx, [ebp - 0x218]
push ecx
push str.2188
push 0x1000d690
push 0x1000d810
call esi
lea edx, [ebp - 0x218]
push edx
call fcn.100086a0
push 0x1000d80c
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebx + 0x864]
push ecx
lea edx, [ebx + 0x24]
push edx
call fcn.10007030
add esp, 0x14
lea eax, [ebp - 0x320]
push eax
push 0x200
lea ecx, [ebp - 0x218]
push ecx
push 0x1000d808
push 0x1000d688
push 0x1000d810
call esi
lea edx, [ebp - 0x218]
push edx
call fcn.100086a0
lea eax, [ebp - 0x218]
push eax
call edi
add esp, 8
mov dword [ebx + 0x10], eax
lea ecx, [ebp - 0x320]
push ecx
push 0x200
lea edx, [ebp - 0x218]
push edx
push 0x1000d7c8
push 0x1000d678
push 0x1000d810
call esi
lea eax, [ebp - 0x218]
push eax
call fcn.100086a0
lea ecx, [ebp - 0x218]
push ecx
call edi
add esp, 8
mov dword [ebx + 0x38], eax
lea edx, [ebp - 0x320]
push edx
push 0x200
lea eax, [ebp - 0x218]
push eax
push 0x1000d808
push 0x1000d66c
push 0x1000d660
call esi
lea ecx, [ebp - 0x218]
push ecx
call edi
mov dword [ebx + 0x1270], eax
lea edx, [ebp - 0x218]
push edx
call fcn.100086a0
add esp, 8
lea eax, [ebp - 0x320]
push eax
push 0x200
lea ecx, [ebp - 0x218]
push ecx
push 0x1000d7c8
push 0x1000d654
push 0x1000d660
call esi
lea edx, [ebp - 0x218]
push edx
call edi
add esp, 4
mov dword [ebx + 0x126c], eax
lea eax, [ebp - 0x320]
push eax
push 0x200
lea ecx, [ebp - 0x218]
push ecx
push 0x1000d7c8
push 0x1000d648
push 0x1000d660
call esi
lea edx, [ebp - 0x218]
push edx
call edi
mov dword [ebx + 0x1274], eax
lea eax, [ebp - 0x218]
push eax
call fcn.100086a0
add esp, 8
lea ecx, [ebp - 0x320]
push ecx
push 0x200
lea edx, [ebp - 0x218]
push edx
push 0x1000f5f8
push 0x1000d63c
push 0x1000d660
call esi
lea edi, [ebp - 0x218]
lea edx, [ebx + 0xa6c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x218]
push ecx
call fcn.100086a0
add esp, 4
lea edx, [ebp - 0x320]
push edx
push 0x200
lea eax, [ebp - 0x218]
push eax
push 0x1000f5f8
push 0x1000d62c
push 0x1000d660
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea edi, [ebp - 0x218]
lea edx, [ebx + 0xe6c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x218]
push ecx
call fcn.100086a0
add esp, 4
lea edx, [ebp - 0x320]
push edx
push 0x200
lea eax, [ebp - 0x218]
push eax
push 0x1000d628
push 0x1000d618
push 0x1000d60c
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
call esi
lea ecx, [ebp - 0x218]
push ecx
mov edi, dword [sym.imp.MSVCRT.dll_atoi]
call edi
mov dword [ebx + 0x1278], eax
lea edx, [ebp - 0x218]
push edx
call fcn.100086a0
add esp, 8
lea eax, [ebp - 0x320]
push eax
push 0x200
lea ecx, [ebp - 0x218]
push ecx
push 0x1000d7c8
push 0x1000d5fc
push 0x1000d60c
call esi
lea edx, [ebp - 0x218]
push edx
call edi
mov dword [ebx + 0x127c], eax
lea eax, [ebp - 0x218]
push eax
call fcn.100086a0
add esp, 8
lea ecx, [ebp - 0x320]
push ecx
push 0x200
lea edx, [ebp - 0x218]
push edx
push 0x1000d7c8
push 0x1000d5ec
push 0x1000d60c
call esi
lea eax, [ebp - 0x218]
push eax
call edi
add esp, 4
mov dword [ebx + 0x1280], eax
lea ecx, [ebp - 0x320]
push ecx
push 0x200
lea edx, [ebp - 0x218]
push edx
push 0x1000d7c8
push 0x1000d5dc
push 0x1000d60c
call esi
lea eax, [ebp - 0x218]
push eax
call edi
mov dword [ebx + 0x1284], eax
lea ecx, [ebp - 0x218]
push ecx
call fcn.100086a0
push 0x1000d5c8
call fcn.100086a0
add esp, 0xc
lea edx, [ebp - 0x320]
push edx
push 0x200
lea eax, [ebp - 0x218]
push eax
push 0x1000d7f8
push 0x1000d5bc
push 0x1000d5b0
call esi
lea ecx, [ebp - 0x218]
push ecx
call edi
mov dword [ebx + 0x1288], eax
lea edx, [ebp - 0x218]
push edx
call fcn.100086a0
add esp, 8
lea eax, [ebp - 0x320]
push eax
push 0x200
lea ecx, [ebp - 0x218]
push ecx
push 0x1000d7f8
push 0x1000d5a4
push 0x1000d5b0
call esi
lea edx, [ebp - 0x218]
push edx
call edi
mov dword [ebx + 0x128c], eax
lea eax, [ebp - 0x218]
push eax
call fcn.100086a0
add esp, 8
lea ecx, [ebp - 0x320]
push ecx
push 0x200
lea edx, [ebp - 0x218]
push edx
push 0x1000d7f8
push 0x1000d598
push 0x1000d5b0
call esi
lea eax, [ebp - 0x218]
push eax
call edi
mov dword [ebx + 0x1290], eax
lea ecx, [ebp - 0x218]
push ecx
call fcn.100086a0
add esp, 8
lea edx, [ebp - 0x320]
push edx
push 0x200
lea eax, [ebp - 0x218]
push eax
push 0x1000d7f8
push 0x1000d58c
push 0x1000d580
call esi
lea ecx, [ebp - 0x218]
push ecx
call edi
mov dword [ebx + 0x1aac], eax
lea edx, [ebp - 0x218]
push edx
call fcn.100086a0
add esp, 8
xor eax, eax
mov dword [ebp - 0x21c], eax
cmp eax, dword [ebx + 0x1aac]
jae 0x100054ad
push eax
push 0x1000d574
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea ecx, [ebp - 0x320]
push ecx
push 0x200
lea edx, [ebp - 0x218]
push edx
push 0x1000d7f8
lea eax, [ebp - 0x218]
push eax
push 0x1000d580
call esi
lea ecx, [ebp - 0x218]
push ecx
call edi
add esp, 4
mov ecx, dword [ebp - 0x21c]
mov dword [ebx + ecx*4 + 0x1ab0], eax
inc ecx
mov dword [ebp - 0x21c], ecx
mov eax, ecx
jmp 0x10005445
lea edx, [ebp - 0x320]
push edx
push 0x200
lea eax, [ebp - 0x218]
push eax
push 0x1000d7f8
push 0x1000d564
push 0x1000d558
call esi
lea ecx, [ebp - 0x218]
push ecx
call edi
add esp, 4
mov dword [ebx + 0x1a9c], eax
lea edx, [ebp - 0x320]
push edx
push 0x200
lea eax, [ebp - 0x218]
push eax
push 0x1000d7f8
push 0x1000d548
push 0x1000d558
call esi
lea ecx, [ebp - 0x218]
push ecx
call edi
add esp, 4
mov dword [ebx + 0x1a94], eax
lea edx, [ebp - 0x320]
push edx
push 0x200
lea eax, [ebx + 0x1294]
push eax
push 0x1000d7f8
push 0x1000d538
push 0x1000d558
call esi
lea ecx, [ebp - 0x320]
push ecx
push 0x200
lea edx, [ebp - 0x218]
push edx
push 0x1000d7f8
push 0x1000d528
push 0x1000d558
call esi
lea eax, [ebp - 0x218]
push eax
call edi
add esp, 4
mov dword [ebx + 0x1aa0], eax
lea ecx, [ebp - 0x320]
push ecx
push 0x200
lea edx, [ebp - 0x218]
push edx
push 0x1000d7f8
push 0x1000d518
push 0x1000d558
call esi
lea eax, [ebp - 0x218]
push eax
call edi
add esp, 4
mov dword [ebx + 0x1a98], eax
lea ecx, [ebp - 0x320]
push ecx
push 0x200
add ebx, 0x1694
push ebx
push 0x1000d7f8
push 0x1000d508
push 0x1000d558
call esi
jmp 0x100055e5
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret