Function at 0x100118c0
Capabilities:
Read file via mapping

Disassembly:
sub esp, 0x48
push ebx
push ebp
push esi
push edi
push str.MMAP_PS_AV_STRING_AB1098C2_33CF_4001_A246_0C68E4DFE2D3
push 0
push 4
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
push 0
push 0
push 0
push 4
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
test eax, eax
jne 0x10011f35
mov ecx, 8
mov esi, str.0000000000000000000000000000000
lea edi, [esp + 0x30]
rep movsd dword es:[edi], dword [esi]
push 0x4a7d3639
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x1001192b
push 0xe33f02e6
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x1001192b
xor eax, eax
jmp 0x10011930
mov eax, 1
test al, al
setne al
add al, 0x30
push 0xf8a0b1d1
mov byte [esp + 0x34], al
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011972
push 0xa6c7e180
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011972
push 0x5e1718d2
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011972
xor eax, eax
jmp 0x10011977
mov eax, 1
test al, al
setne cl
add cl, 0x30
push 0x3dc975b3
mov byte [esp + 0x35], cl
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x100119ba
push 0x5c532628
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x100119ba
push 0x54833250
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x100119ba
xor eax, eax
jmp 0x100119bf
mov eax, 1
test al, al
setne dl
add dl, 0x30
push 0x5f43d167
mov byte [esp + 0x36], dl
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x100119f1
push 0x3398f1df
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x100119f1
xor eax, eax
jmp 0x100119f6
mov eax, 1
test al, al
setne al
add al, 0x30
push 0xf569010a
mov byte [esp + 0x37], al
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011a27
push 0x9afa7931
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011a27
xor eax, eax
jmp 0x10011a2c
mov eax, 1
test al, al
setne cl
add cl, 0x30
push 0x7ba65ca5
mov byte [esp + 0x38], cl
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011a5a
push 0x290e7d06
call fcn.10010ed0
add esp, 4
test eax, eax
je 0x10011a5f
mov eax, 1
test al, al
setne dl
add dl, 0x30
push 0x2e808ae5
mov byte [esp + 0x39], dl
call fcn.10010ed0
test eax, eax
seta al
add al, 0x30
push 0x5da6c35c
mov byte [esp + 0x3e], al
call fcn.10010ed0
test eax, eax
seta cl
add cl, 0x30
push 0x768018cb
mov byte [esp + 0x43], cl
call fcn.10010ed0
add esp, 0xc
test eax, eax
ja 0x10011abc
push 0xf1ace7da
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011abc
xor eax, eax
jmp 0x10011ac1
mov eax, 1
test al, al
setne dl
add dl, 0x30
push 0x6bd49bae
mov byte [esp + 0x3c], dl
call fcn.10010ed0
test eax, eax
seta al
add al, 0x30
push 0x36d48902
mov byte [esp + 0x41], al
call fcn.10010ed0
add esp, 8
test eax, eax
ja 0x10011b08
push 0xac5a39b4
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011b08
xor eax, eax
jmp 0x10011b0d
mov eax, 1
test al, al
setne cl
add cl, 0x30
push 0xc4151736
mov byte [esp + 0x3e], cl
call fcn.10010ed0
test eax, eax
seta dl
add dl, 0x30
push 0xb77c6e20
mov byte [esp + 0x43], dl
call fcn.10010ed0
test eax, eax
seta al
add al, 0x30
push 0xb6ee655
mov byte [esp + 0x48], al
call fcn.10010ed0
test eax, eax
seta cl
add cl, 0x30
push 0xa281be07
mov byte [esp + 0x4d], cl
call fcn.10010ed0
test eax, eax
seta dl
add dl, 0x30
mov byte [esp + 0x4e], dl
call fcn.10011210
test al, al
setne al
add al, 0x30
push 0x955ea822
mov byte [esp + 0x53], al
call fcn.10010ed0
add esp, 0x14
test eax, eax
ja 0x10011bb7
push 0x750f114b
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011bb7
push 0xe35d8c95
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011bb7
xor eax, eax
jmp 0x10011bbc
mov eax, 1
test al, al
setne cl
add cl, 0x30
push 0x75177b66
mov byte [esp + 0x45], cl
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011bee
push 0xe76c25e
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011bee
xor eax, eax
jmp 0x10011bf3
mov eax, 1
test al, al
setne dl
add dl, 0x30
push 0x37c02ab3
mov byte [esp + 0x46], dl
call fcn.10010ed0
test eax, eax
seta al
add al, 0x30
push 0x5d4c48d7
mov byte [esp + 0x4b], al
call fcn.10010ed0
add esp, 8
test eax, eax
ja 0x10011c3a
push 0xaf6fbac8
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011c3a
xor eax, eax
jmp 0x10011c3f
mov eax, 1
test al, al
setne cl
add cl, 0x30
push 0x9e3a6612
mov byte [esp + 0x48], cl
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011c71
push 0x3724c002
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011c71
xor eax, eax
jmp 0x10011c76
mov eax, 1
test al, al
setne dl
add dl, 0x30
push 0x5020c873
mov byte [esp + 0x49], dl
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011cb5
push 0x1944542c
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011cb5
push 0x684bf36a
call fcn.10010ed0
add esp, 4
test eax, eax
je 0x10011cba
mov eax, 1
test al, al
setne al
add al, 0x30
push 0x2d90a0b9
mov byte [esp + 0x4a], al
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011ceb
push 0x68949900
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011ceb
xor eax, eax
jmp 0x10011cf0
mov eax, 1
test al, al
setne cl
add cl, 0x30
push 0xa40fba0f
mov byte [esp + 0x4b], cl
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011d2f
push 0x4efc83c5
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011d2f
push 0xa5914847
call fcn.10010ed0
add esp, 4
test eax, eax
je 0x10011d34
mov eax, 1
test al, al
setne dl
add dl, 0x30
push 0xc39ae7f0
mov byte [esp + 0x4c], dl
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011d66
push 0x914e412c
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011d66
xor eax, eax
jmp 0x10011d6b
mov eax, 1
test al, al
setne al
add al, 0x30
push 0x93b5637f
mov byte [esp + 0x4d], al
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011d9c
push 0xe2477f3
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011d9c
xor eax, eax
jmp 0x10011da1
mov eax, 1
test al, al
setne cl
add cl, 0x30
push 0x2da5955c
mov byte [esp + 0x4e], cl
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011dd3
push 0x5779bb8c
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011dd3
xor eax, eax
jmp 0x10011dd8
mov eax, 1
test al, al
setne dl
add dl, 0x30
push 0x992bdc64
mov byte [esp + 0x4f], dl
call fcn.10010ed0
test eax, eax
seta al
add al, 0x30
push 0xed4f37d8
mov byte [esp + 0x54], al
call fcn.10010ed0
test eax, eax
seta cl
add cl, 0x30
push 0x82272400
mov byte [esp + 0x59], cl
call fcn.10010ed0
add esp, 0xc
test eax, eax
ja 0x10011e35
push 0x9bbc6ad2
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011e35
xor eax, eax
jmp 0x10011e3a
mov eax, 1
test al, al
setne dl
add dl, 0x30
push 0xf7092721
mov byte [esp + 0x52], dl
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011e6c
push 0xe79c16ca
call fcn.10010ed0
add esp, 4
test eax, eax
ja 0x10011e6c
xor eax, eax
jmp 0x10011e71
mov eax, 1
mov esi, dword [esp + 0x60]
mov edi, dword [esp + 0x5c]
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpynA]
test al, al
push esi
lea ecx, [esp + 0x34]
setne al
push ecx
add al, 0x30
push edi
mov byte [esp + 0x4c], al
call ebp
sub esp, 0x1c
mov ecx, esp
lea eax, [esp + 0x4c]
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], 0
mov dword [esp + 0x2c], esp
mov byte [ecx + 4], 0
lea ebx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x10011eb5
sub eax, ebx
push eax
lea edx, [esp + 0x50]
push edx
call fcn.10002150
lea eax, [esp + 0x30]
push eax
call fcn.10011800
mov eax, dword [esp + 0x38]
mov ebx, 0x10
add esp, 0x20
cmp dword [esp + 0x2c], ebx
jae 0x10011ee9
lea eax, [esp + 0x18]
push esi
push eax
push edi
call ebp
push 0x1003e210
push esi
push 0
push 4
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
push 0
push 0
push 0
push 2
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
test eax, eax
je 0x10011f1a
push esi
push edi
push eax
call ebp
cmp dword [esp + 0x2c], ebx
jb 0x10011f46
mov ecx, dword [esp + 0x18]
push ecx
call fcn.10023a80
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x48
ret
mov edx, dword [esp + 0x60]
push edx
push eax
mov eax, dword [esp + 0x64]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x48
ret