Function at 0x1008e9e0
Capabilities:
Access peb ldr_data
Get number of processors
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x103a79d3
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push esi
push edi
mov eax, dword [0x106a6100]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov dword [eax], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
mov dword [eax + 0x10], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0x14]
mov byte [eax + 0x14], dl
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0x15]
mov byte [eax + 0x15], dl
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
mov dword [eax + 0x18], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1c]
mov dword [eax + 0x1c], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x20]
mov dword [eax + 0x20], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x24]
mov dword [eax + 0x24], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x28]
mov dword [eax + 0x28], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2c]
mov dword [eax + 0x2c], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x30]
mov dword [eax + 0x30], edx
mov eax, dword [ebp + 8]
add eax, 0x34
mov ecx, dword [ebp - 0x10]
add ecx, 0x34
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov eax, dword [eax + 8]
mov dword [ecx + 8], eax
mov ecx, dword [ebp + 8]
add ecx, 0x40
mov edx, dword [ebp - 0x10]
add edx, 0x40
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov ecx, dword [ecx + 8]
mov dword [edx + 8], ecx
mov edx, dword [ebp + 8]
add edx, 0x4c
mov eax, dword [ebp - 0x10]
add eax, 0x4c
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov edx, dword [edx + 8]
mov dword [eax + 8], edx
mov eax, dword [ebp + 8]
add eax, 0x58
mov ecx, dword [ebp - 0x10]
add ecx, 0x58
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov eax, dword [eax + 8]
mov dword [ecx + 8], eax
mov ecx, dword [ebp + 8]
add ecx, 0x64
mov edx, dword [ebp - 0x10]
add edx, 0x64
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov ecx, dword [ecx + 8]
mov dword [edx + 8], ecx
mov edx, dword [ebp + 8]
add edx, 0x70
mov eax, dword [ebp - 0x10]
add eax, 0x70
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov edx, dword [edx + 8]
mov dword [eax + 8], edx
mov eax, dword [ebp + 8]
add eax, 0x7c
mov ecx, dword [ebp - 0x10]
add ecx, 0x7c
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov eax, dword [eax + 8]
mov dword [ecx + 8], eax
mov ecx, dword [ebp + 8]
add ecx, 0x88
mov edx, dword [ebp - 0x10]
add edx, 0x88
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov ecx, dword [ecx + 8]
mov dword [edx + 8], ecx
mov edx, dword [ebp + 8]
add edx, 0x94
mov eax, dword [ebp - 0x10]
add eax, 0x94
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov edx, dword [edx + 8]
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xa0]
mov dword [eax + 0xa0], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xa4]
mov dword [eax + 0xa4], edx
mov esi, dword [ebp + 8]
add esi, 0xa8
mov edi, dword [ebp - 0x10]
add edi, 0xa8
mov ecx, 0xb6
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp + 8]
add esi, 0x380
mov edi, dword [ebp - 0x10]
add edi, 0x380
mov ecx, 0x18
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3e0]
mov dword [eax + 0x3e0], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3e4]
mov dword [eax + 0x3e4], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3e8]
mov dword [eax + 0x3e8], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3ec]
mov dword [eax + 0x3ec], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3f0]
mov dword [eax + 0x3f0], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3f4]
mov dword [eax + 0x3f4], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3f8]
mov dword [eax + 0x3f8], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3fc]
mov dword [eax + 0x3fc], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x400]
mov dword [eax + 0x400], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x404]
mov dword [eax + 0x404], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x408]
mov dword [eax + 0x408], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0x40c]
mov byte [eax + 0x40c], dl
push 0x1800
mov eax, dword [ebp + 8]
add eax, 0x410
push eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x410
push ecx
call fcn.101f81c0
add esp, 0xc
push 0x1800
mov edx, dword [ebp + 8]
add edx, 0x1c10
push edx
mov eax, dword [ebp - 0x10]
add eax, 0x1c10
push eax
call fcn.101f81c0
add esp, 0xc
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov al, byte [edx + 0x3410]
mov byte [ecx + 0x3410], al
mov ecx, dword [ebp + 8]
add ecx, 0x3414
mov edx, dword [ebp - 0x10]
add edx, 0x3414
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov ecx, dword [ecx + 8]
mov dword [edx + 8], ecx
mov edx, dword [ebp + 8]
add edx, 0x3420
mov eax, dword [ebp - 0x10]
add eax, 0x3420
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov edx, dword [edx + 8]
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x342c]
mov dword [eax + 0x342c], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3430]
mov dword [eax + 0x3430], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0x3434]
mov byte [eax + 0x3434], dl
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3438]
mov dword [eax + 0x3438], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x343c]
mov dword [eax + 0x343c], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3440]
mov dword [eax + 0x3440], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0x3444]
mov byte [eax + 0x3444], dl
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3448]
mov dword [eax + 0x3448], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x344c]
mov dword [eax + 0x344c], edx
mov eax, dword [ebp - 0x10]
add eax, 0x3450
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp + 8]
add ecx, 0x3450
push ecx
mov ecx, dword [ebp - 0x14]
call fcn.10063520
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x10]
add edx, 0x346c
mov dword [ebp - 0x18], edx
mov eax, dword [ebp + 8]
add eax, 0x346c
push eax
mov ecx, dword [ebp - 0x18]
call fcn.10063520
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov al, byte [edx + 0x3488]
mov byte [ecx + 0x3488], al
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov al, byte [edx + 0x3489]
mov byte [ecx + 0x3489], al
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov al, byte [edx + 0x348a]
mov byte [ecx + 0x348a], al
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x348c]
mov dword [ecx + 0x348c], eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3490]
mov dword [ecx + 0x3490], eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov al, byte [edx + 0x3494]
mov byte [ecx + 0x3494], al
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov al, byte [edx + 0x3495]
mov byte [ecx + 0x3495], al
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov al, byte [edx + 0x3496]
mov byte [ecx + 0x3496], al
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3498]
mov dword [ecx + 0x3498], eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x349c]
mov dword [ecx + 0x349c], eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov al, byte [edx + 0x34a0]
mov byte [ecx + 0x34a0], al
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov al, byte [edx + 0x34a1]
mov byte [ecx + 0x34a1], al
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov al, byte [edx + 0x34a2]
mov byte [ecx + 0x34a2], al
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
movzx eax, byte [edx + 0x34a3]
mov byte [ecx + 0x34a3], al
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x34a4]
mov dword [ecx + 0x34a4], eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x34a8]
mov dword [ecx + 0x34a8], eax
mov esi, dword [ebp + 8]
add esi, 0x34ac
mov edi, dword [ebp - 0x10]
add edi, 0x34ac
mov ecx, 0x2f0
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 8]
mov dx, word [ecx + 0x406c]
mov eax, dword [ebp - 0x10]
mov word [eax + 0x406c], dx
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x4070]
mov dword [ecx + 0x4070], eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x4074]
mov dword [ecx + 0x4074], eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x4078]
mov dword [ecx + 0x4078], eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4