Function at 0x10001130
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10007c96
mov eax, dword fs:[0]
push eax
sub esp, 0x150
mov eax, dword [0x1000b018]
xor eax, esp
mov dword [esp + 0x148], eax
push ebx
push esi
push edi
mov eax, dword [0x1000b018]
xor eax, esp
push eax
lea eax, [esp + 0x160]
mov dword fs:[0], eax
mov eax, 7
xor edi, edi
xor ecx, ecx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x48], edi
mov word [esp + 0x38], cx
mov dword [esp + 0x168], edi
xor edx, edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], edi
mov word [esp + 0x1c], dx
lea ebx, [esp + 0x1c]
lea ecx, [esp + 0x38]
mov byte [esp + 0x168], 1
call fcn.10001060
lea ebx, [edi + 8]
lea eax, [esp + 0x38]
call fcn.100016c0
lea ecx, [edi + 0x18]
lea esi, [esp + 0x54]
call fcn.10001b40
mov esi, dword [esp + 0x38]
cmp dword [esp + 0x4c], ebx
jae 0x100011d7
lea esi, [esp + 0x38]
mov eax, dword [0x1000d73c]
cmp eax, edi
jne 0x1000120a
mov eax, dword [0x1000d730]
cmp eax, edi
jne 0x100011f9
push str.kernel32
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x1000d730], eax
push str.CreateFileW
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1000d73c], eax
push edi
push 0x80
push 3
push edi
push 1
push 0x80000000
push esi
call eax
mov esi, eax
mov dword [esp + 0x18], esi
cmp esi, 0xffffffff
jne 0x10001268
cmp dword [esp + 0x30], ebx
jb 0x1000123b
mov eax, dword [esp + 0x1c]
push eax
call fcn.100021ea
add esp, 4
xor ecx, ecx
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], edi
mov word [esp + 0x1c], cx
cmp dword [esp + 0x4c], ebx
jb 0x10001261
mov edx, dword [esp + 0x38]
push edx
call fcn.100021ea
add esp, 4
xor eax, eax
jmp 0x1000147c
mov eax, dword [0x1000d740]
cmp eax, edi
jne 0x1000129b
mov eax, dword [0x1000d730]
cmp eax, edi
jne 0x1000128a
push str.kernel32
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x1000d730], eax
push str.GetFileSize
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1000d740], eax
push edi
push esi
call eax
mov ebx, eax
push ebx
call fcn.10002111
mov edi, eax
add esp, 4
test edi, edi
jne 0x10001337
mov eax, dword [0x1000d738]
test eax, eax
jne 0x100012e7
mov eax, dword [0x1000d730]
test eax, eax
jne 0x100012d6
push str.kernel32
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x1000d730], eax
push str.CloseHandle
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1000d738], eax
push esi
call eax
mov esi, 8
cmp dword [esp + 0x30], esi
jb 0x10001302
mov eax, dword [esp + 0x1c]
push eax
call fcn.100021ea
add esp, 4
xor ecx, ecx
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], 0
mov word [esp + 0x1c], cx
cmp dword [esp + 0x4c], esi
jb 0x10001261
mov edx, dword [esp + 0x38]
push edx
call fcn.100021ea
add esp, 4
xor eax, eax
jmp 0x1000147c
push ebx
push 0
push edi
call fcn.10005980
add esp, 0xc
xor esi, esi
mov dword [esp + 0x14], esi
lea esp, [esp]
mov eax, dword [0x1000d744]
test eax, eax
jne 0x10001383
mov eax, dword [0x1000d730]
test eax, eax
jne 0x10001372
push str.kernel32
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x1000d730], eax
push str.ReadFile
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1000d744], eax
push 0
lea ecx, [esp + 0x18]
push ecx
mov edx, ebx
sub edx, esi
push edx
mov edx, dword [esp + 0x24]
lea ecx, [esi + edi]
push ecx
push edx
call eax
add esi, dword [esp + 0x14]
cmp esi, ebx
jb 0x10001350
mov eax, dword [0x1000d738]
test eax, eax
jne 0x100013d5
mov eax, dword [0x1000d730]
test eax, eax
jne 0x100013c4
push str.kernel32
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x1000d730], eax
push str.CloseHandle
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1000d738], eax
mov ecx, dword [esp + 0x18]
push ecx
call eax
push ebx
push edi
lea eax, [esp + 0x5c]
call fcn.10001bf0
mov eax, dword [0x1000d734]
test eax, eax
jne 0x1000141a
mov eax, dword [0x1000d730]
test eax, eax
jne 0x10001409
push str.kernel32
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x1000d730], eax
push str.VirtualAlloc
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x1000d734], eax
push 0x40
push 0x1000
push ebx
push 0
call eax
push ebx
mov esi, eax
push edi
push esi
call fcn.10005a30
add esp, 0xc
call esi
mov esi, 8
cmp dword [esp + 0x30], esi
jb 0x1000144d
mov edx, dword [esp + 0x1c]
push edx
call fcn.100021ea
add esp, 4
xor eax, eax
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], 0
mov word [esp + 0x1c], ax
cmp dword [esp + 0x4c], esi
jb 0x10001477
mov ecx, dword [esp + 0x38]
push ecx
call fcn.100021ea
add esp, 4
mov eax, 1
mov ecx, dword [esp + 0x160]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x148]
xor ecx, esp
call fcn.10001c64
mov esp, ebp
pop ebp
ret