Function at 0x1000cb03
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x108
mov eax, dword [0x1002d4a0]
push ebx
push esi
mov esi, ecx
mov dword [ebp - 4], eax
lea eax, [esi + 0x304]
xor ebx, ebx
mov dword [esi + 0x2fc], ebx
push edi
lea ecx, [esi + 0x310]
mov dword [eax], ebx
mov dword [eax + 4], eax
mov dword [eax + 8], eax
call fcn.10008fc4
push str.KERNEL32.DLL
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
cmp eax, ebx
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esi + 8], eax
je 0x1000cb5c
push str.OpenThread
push eax
call edi
jmp 0x1000cb5e
xor eax, eax
mov dword [esi + 0x714], eax
push 0x104
lea eax, [ebp - 0x108]
push eax
push dword [0x1002ecc0]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
push str.DBGHELP.DLL
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendA]
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
cmp eax, ebx
mov dword [esi + 4], eax
jne 0x1000cbbd
push str.DBGHELP.DLL
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esi + 4], eax
mov eax, dword [esi + 4]
cmp eax, ebx
mov dword [esi], ebx
je 0x1000cd1c
push str.SymGetOptions
push eax
call edi
push str.SymSetOptions
push dword [esi + 4]
mov dword [esi + 0x6ec], eax
call edi
push str.SymInitialize
push dword [esi + 4]
mov dword [esi + 0x6f0], eax
call edi
push str.SymCleanup
push dword [esi + 4]
mov dword [esi + 0x6f4], eax
call edi
push str.SymGetModuleBase64
push dword [esi + 4]
mov dword [esi + 0x6f8], eax
call edi
push str.SymFromAddr
push dword [esi + 4]
mov dword [esi + 0x6fc], eax
call edi
push str.SymGetLineFromAddr64
push dword [esi + 4]
mov dword [esi + 0x700], eax
call edi
push str.StackWalk64
push dword [esi + 4]
mov dword [esi + 0x704], eax
call edi
push str.SymFunctionTableAccess64
push dword [esi + 4]
mov dword [esi + 0x708], eax
call edi
push str.MiniDumpWriteDump
push dword [esi + 4]
mov dword [esi + 0x70c], eax
call edi
mov ecx, dword [esi + 0x6ec]
cmp ecx, ebx
mov dword [esi + 0x710], eax
je 0x1000cd58
cmp dword [esi + 0x6f0], ebx
je 0x1000cd58
cmp dword [esi + 0x6f4], ebx
je 0x1000cd58
cmp dword [esi + 0x6f8], ebx
je 0x1000cd58
cmp dword [esi + 0x6fc], ebx
je 0x1000cd58
cmp dword [esi + 0x700], ebx
je 0x1000cd58
cmp dword [esi + 0x704], ebx
je 0x1000cd58
cmp dword [esi + 0x708], ebx
je 0x1000cd58
cmp dword [esi + 0x70c], ebx
je 0x1000cd58
cmp eax, ebx
je 0x1000cd58
call ecx
or eax, 0x16
push eax
call dword [esi + 0x6f0]
cmp dword [0x1002f844], ebx
je 0x1000ccf6
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
jmp 0x1000ccfc
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push 1
push ebx
push eax
mov dword [esi], eax
call dword [esi + 0x6f4]
test eax, eax
je 0x1000cd18
push dword [ebp + 8]
mov ecx, esi
call fcn.1000c977
jmp 0x1000cd58
mov dword [esi], ebx
jmp 0x1000cd58
mov dword [esi + 0x6ec], ebx
mov dword [esi + 0x6f0], ebx
mov dword [esi + 0x6f4], ebx
mov dword [esi + 0x6f8], ebx
mov dword [esi + 0x6fc], ebx
mov dword [esi + 0x700], ebx
mov dword [esi + 0x704], ebx
mov dword [esi + 0x708], ebx
mov dword [esi + 0x70c], ebx
mov dword [esi + 0x710], ebx
cmp dword [esi], ebx
jne 0x1000cd63
mov ecx, esi
call fcn.1000c9e6
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
pop esi
pop ebx
call fcn.1001b57a
leave
ret 4