Function at 0x100aa940
Capabilities:
Read .ini file
Terminate process

Disassembly:
push ebp
lea ebp, [esp - 0x6c]
sub esp, 0x6c
push 0xffffffffffffffff
push 0x100eaa6d
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x1011b140]
xor eax, ebp
mov dword [ebp + 0x68], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x74]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x78]
mov dword [ebp - 0x10], 1
sub eax, 0
je 0x100aac58
sub eax, 1
jne 0x100aac6e
call dword [sym.imp.KERNEL32.dll_AllocConsole]
push 1
call fcn.100c59f5
push eax
push 0x10112c3c
push str.CONOUT_
call fcn.100cd696
add esp, 0x10
mov ecx, 0x1015336c
call fcn.1004be20
push dword [ebp - 0x14]
mov edi, eax
push ecx
lea ecx, [ebp + 4]
call fcn.100b5c00
mov ecx, eax
call fcn.10045d60
push dword [ebp + 4]
mov esi, eax
push ecx
lea ecx, [ebp - 0x38]
call fcn.100b5bb0
mov ecx, eax
call fcn.10092740
push eax
lea ecx, [ebp - 0x30]
call fcn.1004c050
mov ecx, eax
call fcn.1004be20
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea ecx, [ebp + 0x50]
push edi
push 0x15
push ecx
push 0x1010acff
push esi
push eax
call ebx
lea ecx, [ebp - 0x30]
call fcn.1004bfa0
mov ecx, 0x1015336c
call fcn.1004be20
push dword [ebp + 4]
mov edi, eax
push ecx
lea ecx, [ebp]
call fcn.100b5c70
mov ecx, eax
call fcn.10045ca0
push dword [ebp + 4]
mov esi, eax
push ecx
lea ecx, [ebp - 0x40]
call fcn.100b5c20
mov ecx, eax
call fcn.10092740
push eax
lea ecx, [ebp - 0x30]
call fcn.1004c050
mov ecx, eax
call fcn.1004be20
push edi
push 0x15
lea ecx, [ebp + 0x38]
push ecx
push 0x1010acff
push esi
push eax
call ebx
lea ecx, [ebp - 0x30]
call fcn.1004bfa0
lea eax, [ebp + 0x50]
push eax
lea ecx, [ebp + 8]
call fcn.1004c050
lea eax, [ebp + 0x38]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp + 0x20]
call fcn.1004c050
lea ecx, [ebp + 8]
mov byte [ebp - 4], 1
call fcn.1004bda0
test al, al
jne 0x100aac41
lea ecx, [ebp + 0x20]
call fcn.1004bda0
test al, al
jne 0x100aac41
push 0
mov ecx, 0x101570d0
call fcn.100ac830
push 0
mov ecx, 0x10151f50
call fcn.100ac830
sub esp, 0x18
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.1004c0b0
mov ecx, 0x101548b0
call fcn.100ac900
sub esp, 0x18
lea eax, [ebp + 0x20]
mov ecx, esp
push eax
call fcn.1004c0b0
mov ecx, 0x10153420
call fcn.100ac900
sub esp, 0x18
mov esi, esp
push dword [ebp + 4]
push ecx
lea ecx, [ebp - 0x30]
call fcn.100b5cb0
mov ecx, eax
call fcn.10092800
push eax
mov ecx, esi
call fcn.1004c050
mov ecx, 0x10155cb0
call fcn.100ac900
push 0x300c
mov ecx, 0x1014f730
call fcn.100ac830
call fcn.100aa7a0
push 0x100a2650
push 0xde7ed0
call fcn.100010f0
mov ebx, dword [ebp - 0x14]
mov ecx, ebx
mov dword [0x10142678], eax
call fcn.1005cdc0
mov ecx, ebx
call fcn.1005cee0
mov ecx, ebx
call fcn.1005ce60
push ecx
lea ecx, [ebp]
call fcn.100b5d90
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.1009fcd0
lea ecx, [ebp]
mov byte [ebp - 4], 1
call fcn.1009fcb0
push ecx
lea ecx, [ebp]
call fcn.100b5da0
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.1009fcd0
lea ecx, [ebp]
mov byte [ebp - 4], 1
call fcn.1009fcb0
push ecx
lea ecx, [ebp - 0x18]
call fcn.100b5db0
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.1009fcd0
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
call fcn.1009fcb0
mov eax, dword [0x10112c48]
mov ecx, 0xde7b79
mov dword [ecx], eax
mov ax, word [0x10112c4c]
push 0x100aa920
push 0x757000
mov word [ecx + 4], ax
call fcn.100010f0
mov esi, 0x10142798
nop
mov ecx, dword [esi]
test ecx, ecx
je 0x100aac02
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [esi], 0
add esi, 4
cmp esi, 0x101427a0
jl 0x100aabf0
mov esi, 0x10142670
mov ecx, dword [esi]
test ecx, ecx
je 0x100aac24
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [esi], 0
add esi, 4
cmp esi, 0x10142678
jl 0x100aac12
lea ecx, [ebp + 0x20]
call fcn.1004bfa0
lea ecx, [ebp + 8]
call fcn.1004bfa0
jmp 0x100aac6e
lea ecx, [ebp + 0x20]
call fcn.1004bfa0
lea ecx, [ebp + 8]
call fcn.1004bfa0
mov eax, 1
jmp 0x100aac71
push 1
mov dword [ebp - 0x10], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x68]
xor ecx, ebp
call fcn.100bd374
lea esp, [ebp + 0x6c]
pop ebp
ret 0xc