Function at 0x11154390
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x9fc
mov eax, dword [0x11279148]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov ecx, dword [0x1127aa68]
push 0
push 0
mov dword [ebp - 0x9c8], eax
mov eax, dword [eax]
push 0x11214164
push str._Debug
mov dword [ebp - 0x9e8], eax
call fcn.110bbc00
mov ecx, dword [0x1127aa68]
push 0
push 2
push str.VideoHookBuffers
push str.Client
mov dword [ebp - 0x9ec], eax
call fcn.110bbc00
mov ecx, dword [0x1127aa68]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
push 0
push 0x140
mov dword [ebp - 0x9f0], eax
lea eax, [ebp - 0x144]
push eax
push str.VideoThrottle
push str.Client
call edx
cmp word [ebp - 0x144], 0
jne 0x11154447
xor eax, eax
jmp 0x11154430
movzx ecx, word [eax + str.50_5__75_10__100_20__150_30__200_50__300_100]
mov word [ebp + eax - 0x144], cx
add eax, 2
test cx, cx
jne 0x11154430
cmp word [ebp - 0x144], 0
push ebx
push esi
push edi
lea esi, [ebp - 0x144]
mov dword [ebp - 0x9dc], 0
je 0x11154551
mov ebx, dword [sym.imp.MSVCR100.dll_isdigit]
mov edi, edi
cmp dword [ebp - 0x9dc], 0x10
jge 0x11154551
movzx eax, word [esi]
test ax, ax
je 0x1115449e
movzx eax, ax
push eax
call ebx
add esp, 4
test eax, eax
jne 0x1115449e
movzx eax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x11154485
mov edi, dword [sym.imp.MSVCR100.dll__wtoi]
push esi
call edi
movzx ecx, word [esi]
push ecx
mov dword [ebp - 0x9d4], eax
call ebx
add esp, 8
test eax, eax
je 0x111544d1
lea ebx, [ebx]
movzx edx, word [esi + 2]
add esi, 2
push edx
call ebx
add esp, 4
test eax, eax
jne 0x111544c0
movzx eax, word [esi]
test ax, ax
je 0x111544f9
lea esp, [esp]
movzx eax, ax
push eax
call ebx
add esp, 4
test eax, eax
jne 0x111544f9
movzx eax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x111544e0
push esi
call edi
mov edi, eax
add esp, 4
test edi, edi
jne 0x11154508
lea edi, [eax + 1]
movzx ecx, word [esi]
push ecx
call ebx
add esp, 4
test eax, eax
je 0x11154526
movzx edx, word [esi + 2]
add esi, 2
push edx
call ebx
add esp, 4
test eax, eax
jne 0x11154515
mov eax, dword [ebp - 0x9dc]
mov ecx, dword [ebp - 0x9d4]
mov dword [ebp + eax*8 - 0x9c4], ecx
mov dword [ebp + eax*8 - 0x9c0], edi
inc eax
cmp word [esi], 0
mov dword [ebp - 0x9dc], eax
jne 0x11154470
mov edx, dword [ebp - 0x9c8]
mov eax, dword [edx + 0xc0]
xor ebx, ebx
mov dword [ebp - 0x9cc], ebx
test eax, eax
jne 0x11154905
lea ecx, [ecx]
cmp dword [ebp - 0x9f0], 1
lea esi, [ebp - 0x944]
jle 0x1115459c
test ebx, ebx
jne 0x11154599
push 0x808
call dword [sym.imp.MSVCR100.dll_malloc]
add esp, 4
mov dword [ebp - 0x9cc], eax
mov ebx, eax
lea esi, [ebx + 8]
mov edx, dword [ebp - 0x9c8]
mov eax, dword [edx + 0x98]
push 0
lea ecx, [ebp - 0x9d0]
push ecx
push 0x800
push esi
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x111548c5
movzx edi, word [esi]
and edi, 0xffff7fff
cmp edi, 0x65
jne 0x111546db
movsx eax, word [esi + 2]
movzx edi, word [esi + 4]
mov dword [ebp - 0x9d8], edi
mov dword [ebp - 0x9e0], eax
test eax, eax
jns 0x11154601
mov ecx, dword [ebp - 0x9e8]
mov edx, dword [ecx + 0x28]
mov dword [ebp - 0x9e0], edx
mov eax, edx
lea ecx, [ebp - 0x9e4]
push ecx
lea edx, [esi + 6]
push edx
push eax
call fcn.11149d70
lea ecx, [edi + edi + 8]
add esp, 0xc
mov dword [ebp - 0x9d4], eax
cmp dword [ebp - 0x9d0], ecx
jbe 0x111546af
cmp dword [ebp - 0x9d8], 0
lea ebx, [ecx + esi]
mov ecx, dword [eax + 4]
lea edi, [eax + 0xc]
lea ecx, [ecx + edi + 1]
mov dword [ebp - 0x9f4], ecx
mov esi, ecx
je 0x1115469b
lea esp, [esp]
mov dx, word [ebx]
dec dword [ebp - 0x9d8]
mov word [esi], dx
movzx eax, byte [edi]
push eax
mov eax, dword [ebp - 0x9e0]
push eax
add ebx, 2
add esi, 2
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
inc edi
test eax, eax
je 0x11154686
mov cx, word [0x1127f218]
mov word [esi], cx
add esi, 2
inc edi
cmp dword [ebp - 0x9d8], 0
jne 0x11154650
mov ecx, dword [ebp - 0x9f4]
mov eax, dword [ebp - 0x9d4]
mov ebx, dword [ebp - 0x9cc]
sub esi, ecx
lea edx, [esi + 1]
add dword [eax + 4], edx
add dword [ebp - 0x9e4], esi
mov ecx, dword [ebp - 0x9e8]
mov esi, dword [ebp - 0x9e4]
mov edx, dword [ecx]
push 0
push esi
push eax
mov eax, dword [edx + 0x54]
call eax
mov ecx, dword [ebp - 0x9d4]
push ecx
call dword [sym.imp.MSVCR100.dll_free]
add esp, 4
jmp 0x111548af
cmp edi, 0x7a
jne 0x11154717
push 0x10
call dword [sym.imp.MSVCR100.dll_malloc]
movzx edx, word [esi + 4]
mov dword [eax], edx
movzx ecx, word [esi + 2]
mov dword [eax + 4], ecx
movzx edx, word [esi + 8]
mov dword [eax + 8], edx
movzx ecx, word [esi + 6]
add esp, 4
mov dword [eax + 0xc], ecx
mov ecx, dword [0x1127ac20]
push eax
call fcn.11170f60
jmp 0x111548af
cmp edi, 0x67
jne 0x11154739
push str.NC_HOOKDATA_n
call fcn.111bd7b0
mov ecx, dword [0x1127b220]
add esp, 4
call fcn.1114f5c0
jmp 0x111548af
cmp edi, 0x66
je 0x111548cd
cmp edi, 0xa9
jne 0x11154763
mov edx, dword [ebp - 0x9c8]
mov eax, dword [edx + 0xbf8]
test eax, eax
je 0x11154775
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
jmp 0x11154775
cmp edi, 0x15
jne 0x11154775
push str.NC_FULLSCREEN_n
call fcn.111bd7b0
add esp, 4
mov eax, dword [ebp - 0x9c8]
mov ecx, dword [eax + 0xc0]
test ecx, ecx
jne 0x11154905
mov eax, 1
add dword [0x1127ab48], eax
jne 0x1115479b
mov dword [0x1127ab48], eax
cmp edi, 0x2f
je 0x111547e8
cmp edi, 0x31
je 0x111547e8
cmp edi, 0x15
je 0x111547e8
cmp edi, 0xa9
je 0x111547e8
movzx edx, byte [esi + 3]
movzx eax, byte [esi + 2]
movzx ecx, byte [esi + 1]
push edx
movzx edx, byte [esi]
push eax
mov eax, dword [ebp - 0x9d0]
push ecx
push edx
push eax
push str.Warning._Ignoring__d_bytes_starting__02x__02x__02x__02x
call fcn.111bd7b0
add esp, 0x18
mov dword [ebp - 0x9ec], 1
jmp 0x111548af
cmp dword [ebp - 0x9ec], 0
jne 0x111548af
test ebx, ebx
je 0x11154889
call dword [sym.imp.WINMM.dll_timeGetTime]
mov esi, dword [ebp - 0x9c8]
mov dword [ebx + 4], eax
mov ecx, dword [ebp - 0x9d0]
mov dword [ebx], ecx
mov ecx, dword [esi + 0xc8]
push ebx
call fcn.11170f60
cmp eax, 0xa
jbe 0x11154877
mov edi, dword [esi + 0xcc]
xor esi, esi
cmp eax, 0xfa0
jbe 0x1115483b
mov esi, 0xfa
jmp 0x11154860
mov edx, dword [ebp - 0x9dc]
xor ecx, ecx
test edx, edx
jle 0x11154877
cmp edi, dword [ebp + ecx*8 - 0x9c4]
jb 0x1115485c
mov esi, dword [ebp + ecx*8 - 0x9c0]
inc ecx
cmp ecx, edx
jl 0x11154847
test esi, esi
je 0x11154877
push edi
push eax
push esi
push str.Sleep__d__QLen_d__lag_d_n
call fcn.111bd7b0
add esp, 0x10
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x9cc], 0
mov ebx, dword [ebp - 0x9cc]
jmp 0x111548af
mov edx, dword [ebp - 0x9d0]
lea eax, [ebp - 0x9fc]
push eax
push 0x11151240
mov dword [ebp - 0x9fc], esi
mov dword [ebp - 0x9f8], edx
call fcn.11063a30
add esp, 8
mov ecx, dword [ebp - 0x9c8]
mov edx, dword [ecx + 0xc0]
test edx, edx
je 0x11154570
jmp 0x11154905
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x11154905
mov esi, dword [ebp - 0x9c8]
cmp dword [esi + 0x5bc], 0
mov edi, 1
mov dword [esi + 0x5c0], edi
jne 0x111548fa
push str.Warning._gdihook5_ReadPipe_unexpectedly_broken_n
call fcn.111bd7b0
add esp, 4
mov dword [esi + 0x5c4], edi
push edi
mov ecx, esi
call fcn.11154030
add esp, 4
push ebx
call dword [sym.imp.MSVCR100.dll_free]
mov ecx, dword [ebp - 4]
add esp, 4
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.111d9022
mov esp, ebp
pop ebp
ret