Function at 0x100ce48
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x24c
mov eax, dword [0x101001c]
xor eax, ebp
mov dword [ebp - 4], eax
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
xor eax, eax
push ebx
push esi
mov esi, dword [ebp + 0x10]
push edi
mov dword [ebp - 0x214], ecx
mov dword [ebp - 0x220], edx
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x224], eax
cmp edx, eax
je 0x100d4a3
cmp esi, eax
je 0x100d4a3
cmp word [edx], ax
je 0x100d4a3
cmp ecx, eax
je 0x100cfac
mov ebx, dword [sym.imp.KERNEL32.dll_CreateFileW]
push eax
push eax
push 3
push eax
push 1
mov edi, 0x80000000
push edi
push ecx
call ebx
mov dword [ebp - 0x210], eax
cmp eax, 0xffffffff
jne 0x100cf59
push dword [ebp - 0x214]
lea eax, [ebp - 0x20c]
push 0x1005624
push 0x104
push eax
call fcn.01009e55
add esp, 0x10
test eax, eax
jl 0x100cf10
xor eax, eax
push eax
push eax
push 3
push eax
push 1
push edi
lea eax, [ebp - 0x20c]
push eax
call ebx
mov dword [ebp - 0x210], eax
cmp eax, 0xffffffff
jne 0x100cf59
push dword [ebp - 0x214]
lea eax, [ebp - 0x20c]
push 0x1005640
push 0x104
push eax
call fcn.01009e55
add esp, 0x10
test eax, eax
jl 0x100d4a3
xor eax, eax
push eax
push eax
push 3
push eax
push 1
push edi
lea eax, [ebp - 0x20c]
push eax
call ebx
mov dword [ebp - 0x210], eax
cmp eax, 0xffffffff
je 0x100d4a3
lea eax, [ebp - 0x228]
push eax
push dword [ebp - 0x210]
call fcn.0100c768
push dword [ebp - 0x210]
mov dword [ebp - 0x21c], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x21c], 0
jne 0x100cf90
mov eax, 0x3f1
jmp 0x100d4a6
lea eax, [ebp - 0x24c]
push eax
push dword [ebp - 0x21c]
call fcn.0100c7b2
lea ebx, [ebp - 0x24c]
xor eax, eax
jmp 0x100cfb9
cmp dword [0x10105e4], eax
je 0x100cf86
mov ebx, 0x10105c0
movzx ecx, word [ebx + 0xa]
cmp ecx, eax
mov dword [ebp - 0x210], eax
jle 0x100d018
mov edi, dword [ebx + 0x18]
mov dword [ebp - 0x214], edi
mov eax, dword [ebp - 0x214]
movzx ecx, word [eax]
mov eax, dword [ebx + 0x1c]
push 0x55
lea eax, [eax + ecx*2 + 2]
push eax
push dword [ebp - 0x220]
call fcn.0100c5ed
test eax, eax
je 0x100d00d
movzx eax, word [ebx + 0xa]
inc dword [ebp - 0x210]
add dword [ebp - 0x214], 8
cmp dword [ebp - 0x210], eax
jl 0x100cfd0
jmp 0x100d018
mov eax, dword [ebp - 0x210]
cmp eax, 0xffffffff
jne 0x100d027
mov dword [ebp - 0x224], 0x57
jmp 0x100d479
shl eax, 3
movzx edi, word [edi + eax + 2]
imul edi, edi, 0x130
add edi, dword [ebx + 0x10]
push 0x1420
push 0
push esi
mov dword [ebp - 0x220], eax
call sub.msvcrt.dll_memset
mov ecx, dword [ebx + 0x18]
mov eax, dword [ebp - 0x220]
mov ecx, dword [eax + ecx + 4]
mov dword [esi], ecx
mov ecx, dword [ebx + 0x18]
movzx eax, word [eax + ecx]
mov ecx, dword [ebx + 0x1c]
add esp, 0xc
lea eax, [ecx + eax*2 + 2]
push eax
push 0x55
lea eax, [esi + 0x5fe]
push eax
call fcn.01009dc1
mov ax, word [edi + 0x6e]
mov word [esi + 0x13f4], ax
mov ax, word [edi + 0x70]
mov word [esi + 0x141c], ax
mov ax, word [edi + 0x72]
mov word [esi + 0x1418], ax
mov eax, dword [edi + 0x7c]
mov ecx, dword [ebx + 0x1c]
movzx eax, word [ecx + eax*2 + 2]
mov word [esi + 0x13f6], ax
cmp ax, 1
je 0x100d0da
test ax, ax
je 0x100d0d3
cmp ax, word [ebx + 0xe]
ja 0x100d0d3
mov ecx, dword [ebx + 0x20]
movzx eax, ax
imul eax, eax, 0x48
lea eax, [eax + ecx - 0x48]
mov dword [ebp - 0x218], eax
jmp 0x100d0da
and dword [ebp - 0x218], 0
mov ax, word [edi + 0x1e]
mov word [esi + 0x13f8], ax
mov ax, word [edi + 0x10]
mov word [esi + 0x13fa], ax
mov ax, word [edi + 0x12]
mov word [esi + 0x13fc], ax
mov ax, word [edi + 0xc]
mov word [esi + 0x1400], ax
mov ax, word [edi + 0x22]
mov word [esi + 0x1402], ax
mov ax, word [edi + 0x1a]
dec ax
mov edx, 0xffff
lea ecx, [esi + 0x1404]
mov word [ecx], ax
cmp ax, dx
jne 0x100d130
push 6
pop eax
mov word [ecx], ax
mov ax, word [edi + 0x1c]
mov word [esi + 0x1406], ax
mov ax, word [edi + 0x16]
mov word [esi + 0x1408], ax
mov ax, word [edi + 0x20]
mov word [esi + 0x140a], ax
mov ax, word [edi + 0x14]
mov word [esi + 0x140c], ax
mov ax, word [edi + 0xe]
mov word [esi + 0x140e], ax
mov ax, word [edi + 0x78]
mov word [esi + 0x1410], ax
mov ax, word [edi + 0x76]
mov word [esi + 0x141a], ax
mov eax, dword [edi + 0x4c]
mov ecx, dword [ebx + 0x1c]
lea eax, [ecx + eax*2 + 2]
push eax
push 0x55
lea eax, [esi + 4]
push eax
call fcn.01009dc1
mov eax, dword [edi + 0x50]
mov ecx, dword [ebx + 0x1c]
lea eax, [ecx + eax*2 + 2]
push eax
push 0x55
lea eax, [esi + 0xae]
push eax
call fcn.01009dc1
mov eax, dword [edi + 0x94]
mov ecx, dword [ebx + 0x1c]
lea eax, [ecx + eax*2 + 2]
push eax
push 0x55
lea eax, [esi + 0x158]
push eax
call fcn.01009dc1
mov eax, dword [edi + 0x38]
mov ecx, dword [ebx + 0x1c]
lea eax, [ecx + eax*2 + 2]
push eax
push 0x55
lea eax, [esi + 0x202]
push eax
call fcn.01009dc1
mov eax, dword [edi + 0x30]
mov ecx, dword [ebx + 0x1c]
lea eax, [ecx + eax*2 + 2]
push eax
push 0x55
lea eax, [esi + 0x356]
push eax
call fcn.01009dc1
mov eax, dword [edi + 0x80]
mov ecx, dword [ebx + 0x1c]
lea eax, [ecx + eax*2 + 2]
push eax
push 0x55
lea eax, [esi + 0x4aa]
push eax
call fcn.01009dc1
mov eax, dword [edi + 0x2c]
mov ecx, dword [ebx + 0x1c]
lea eax, [ecx + eax*2 + 2]
push eax
push 0x55
lea eax, [esi + 0x554]
push eax
call fcn.01009dc1
mov eax, dword [edi + 0x3c]
mov ecx, dword [ebx + 0x1c]
lea eax, [ecx + eax*2 + 2]
push eax
push 0x55
lea eax, [esi + 0x752]
push eax
call fcn.01009dc1
mov eax, dword [edi + 0x40]
mov ecx, dword [ebx + 0x1c]
lea eax, [ecx + eax*2 + 2]
push eax
push 0x55
lea eax, [esi + 0x8a6]
push eax
call fcn.01009dc1
mov eax, dword [edi + 0x48]
mov ecx, dword [ebx + 0x1c]
lea eax, [ecx + eax*2 + 2]
push eax
push 0x55
lea eax, [esi + 0x9fa]
push eax
call fcn.01009dc1
mov eax, dword [edi + 0x44]
mov ecx, dword [ebx + 0x1c]
lea eax, [ecx + eax*2 + 2]
push eax
push 0x55
lea eax, [esi + 0xaa4]
push eax
call fcn.01009dc1
mov eax, dword [edi + 0x34]
mov ecx, dword [ebx + 0x1c]
lea eax, [ecx + eax*2 + 2]
push eax
push 0x55
lea eax, [esi + 0xbf8]
push eax
call fcn.01009dc1
mov eax, dword [ebp - 0x218]
test eax, eax
je 0x100d2bb
mov eax, dword [eax + 0xc]
jmp 0x100d2be
mov eax, dword [edi + 0x60]
push 0
push eax
push dword [ebx + 0x1c]
call fcn.0100c5c3
inc eax
inc eax
push eax
push 0x55
lea eax, [esi + 0x6a8]
push eax
call fcn.01009dc1
mov eax, dword [ebp - 0x218]
test eax, eax
je 0x100d2e9
mov eax, dword [eax + 4]
jmp 0x100d2ec
mov eax, dword [edi + 0x5c]
push 0
push eax
push dword [ebx + 0x1c]
call fcn.0100c5c3
inc eax
inc eax
push eax
push 0x55
lea eax, [esi + 0xb4e]
push eax
call fcn.01009dc1
mov eax, dword [ebp - 0x218]
test eax, eax
je 0x100d317
mov eax, dword [eax + 8]
jmp 0x100d31a
mov eax, dword [edi + 0x64]
push 0
push eax
push dword [ebx + 0x1c]
call fcn.0100c5c3
inc eax
inc eax
push eax
push 0x55
lea eax, [esi + 0xea0]
push eax
call fcn.01009dc1
lea eax, [esi + 0xb4e]
push eax
call fcn.0100c883
mov word [esi + 0x13fe], ax
lea eax, [esi + 0xb4e]
push eax
lea eax, [esi + 0x2ac]
push eax
call fcn.0100c930
push 0
push dword [edi + 0x58]
push dword [ebx + 0x1c]
call fcn.0100c5c3
inc eax
inc eax
push eax
push 0x55
lea eax, [esi + 0xd4c]
push eax
call fcn.01009dc1
push 0
push dword [edi + 0x118]
push dword [ebx + 0x1c]
call fcn.0100c5c3
inc eax
inc eax
push eax
push 0x55
lea eax, [esi + 0xdf6]
push eax
call fcn.01009dc1
mov eax, dword [edi + 0x24]
mov ecx, dword [ebx + 0x1c]
lea eax, [ecx + eax*2]
push eax
lea eax, [esi + 0x400]
push eax
call fcn.0100c819
mov eax, dword [edi + 0x28]
mov ecx, dword [ebx + 0x1c]
lea eax, [ecx + eax*2]
push eax
lea eax, [esi + 0x7fc]
push eax
call fcn.0100c819
and dword [ebp - 0x210], 0
lea eax, [esi + 0x950]
mov dword [ebp - 0x214], eax
push dword [ebp - 0x210]
push dword [edi + 0x54]
push dword [ebx + 0x1c]
call fcn.0100c5c3
mov ecx, dword [ebp - 0x214]
inc dword [ebp - 0x210]
mov ax, word [eax + 2]
add dword [ebp - 0x214], 2
cmp dword [ebp - 0x210], 0xa
mov word [ecx], ax
jl 0x100d3da
lea eax, [esi + 0xd4c]
push eax
lea eax, [esi + 0xca2]
push eax
call fcn.0100ca65
lea eax, [esi + 0xd4c]
push eax
call fcn.0100cba6
mov word [esi + 0x1412], ax
lea eax, [esi + 0xd4c]
push eax
call fcn.0100cc8c
mov word [esi + 0x1414], ax
lea eax, [esi + 0xd4c]
push eax
call fcn.0100cc15
mov word [esi + 0x1416], ax
mov eax, dword [edi + 0x128]
mov ecx, dword [ebx + 0x1c]
lea eax, [ecx + eax*2 + 2]
push eax
push 0x200
add esi, 0xf4a
push esi
call fcn.01009dc1
lea eax, [ebp - 0x24c]
cmp ebx, eax
jne 0x100d49b
push dword [ebp - 0x228]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x21c]
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov eax, dword [ebp - 0x224]
jmp 0x100d4a6
push 0x57
pop eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0100c0d0
leave
ret 0xc