Function at 0x10001580
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x100d2480]
sub esp, 0x9c
mov edx, dword [0x100d2484]
mov eax, ecx
or eax, edx
push ebx
push ebp
push esi
push edi
jne 0x10001931
mov ecx, str.ntdll.dll
call fcn.100010f0
mov ecx, eax
or eax, edx
jne 0x100015b6
xor esi, esi
xor edi, edi
jmp 0x100015d9
push 0
add ecx, 0x30
lea eax, [esp + 0x14]
push 8
adc edx, 0
push edx
push ecx
push 0
push eax
call section..text
mov esi, dword [esp + 0x28]
add esp, 0x18
mov edi, dword [esp + 0x14]
push edi
push esi
mov ecx, str.LdrLoadDll
call fcn.10001340
add esp, 8
mov ebx, eax
mov ebp, edx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x58], ebp
push 0x10002058
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edx, eax
lea eax, [edx + edx]
mov word [esp + 0x68], ax
add eax, 2
mov word [esp + 0x6a], ax
xor eax, eax
jmp 0x10001620
movsx cx, byte [eax + 0x10002058]
mov word [esp + eax*2 + 0x78], cx
inc eax
cmp eax, edx
jbe 0x10001620
push 0
push 0x100d2480
push 0
lea eax, [esp + 0x84]
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], eax
lea eax, [esp + 0x74]
push eax
push 0
push 0
push 0
push 0
push 4
push ebp
push ebx
call fcn.10001280
mov ecx, dword [0x100d2480]
add esp, 0x2c
mov edx, dword [0x100d2484]
mov eax, ecx
or eax, edx
jne 0x10001931
push edi
push esi
mov ecx, str.LdrGetKnownDllSectionHandle
call fcn.10001340
push edi
push esi
mov ecx, str.NtMapViewOfSection
mov dword [esp + 0x28], eax
mov dword [esp + 0x48], edx
call fcn.10001340
push edi
push esi
mov ecx, str.NtUnmapViewOfSection
mov dword [esp + 0x40], eax
mov dword [esp + 0x5c], edx
call fcn.10001340
push edi
push esi
mov ecx, str.NtFreeVirtualMemory
mov dword [esp + 0x74], eax
mov dword [esp + 0x70], edx
call fcn.10001340
mov edi, dword [esp + 0x38]
lea ecx, [esp + 0x30]
mov ebx, dword [esp + 0x58]
add esp, 0x20
mov ebp, dword [esp + 0x28]
mov esi, 1
mov dword [esp + 0x4c], eax
mov dword [esp + 0x48], edx
mov dword [esp + 0x5c], str.kernelbase.dll
mov dword [esp + 0x60], str.kernel32.dll
mov dword [esp + 0x64], str.user32.dll
push 0
push ecx
push 0
push 0
push 0
push dword [esp + esi*4 + 0x70]
mov dword [esp + 0x28], 0
push 3
push ebx
push edi
mov dword [esp + 0x38], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
call fcn.10001280
add esp, 0x24
lea eax, [esp + 0x38]
push 0
push 2
push 0
push 0
push 0
push 2
push 0
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea eax, [esp + 0x64]
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [esp + 0x5c]
push dword [esp + 0x5c]
push 0xa
push dword [esp + 0x98]
push ebp
call fcn.10001280
mov edx, dword [esp + 0x84]
add esp, 0x5c
mov eax, dword [edx + 0x3c]
push 0
push 0x8000
push 0
mov ecx, dword [eax + edx + 0x30]
mov eax, dword [eax + edx + 0x34]
mov dword [esp + 0x40], eax
lea eax, [esp + 0x24]
push eax
push 0
lea eax, [esp + 0x44]
mov dword [esp + 0x44], ecx
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 4
push dword [esp + 0x6c]
mov dword [esp + 0x40], 0
push dword [esp + 0x74]
mov dword [esp + 0x48], 0
call fcn.10001280
add esp, 0x2c
lea eax, [esp + 0x28]
push 0
push eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 2
push dword [esp + 0x64]
push dword [esp + 0x6c]
call fcn.10001280
inc esi
lea ecx, [esp + 0x2c]
add esp, 0x1c
cmp esi, 3
jl 0x10001700
mov ebp, dword [esp + 0x58]
lea eax, [esp + 0x68]
mov ebx, dword [esp + 0x24]
push 0
push 0x100d2480
push eax
push 0
push 0
push 0
push 0
push 4
push ebp
push ebx
call fcn.10001280
add esp, 0x28
xor eax, eax
mov dword [esp + 0x18], eax
jmp 0x10001840
mov edi, dword [esp + eax*4 + 0x5c]
mov ecx, edi
call fcn.100010f0
mov ecx, eax
or eax, edx
jne 0x10001857
xor ecx, ecx
xor esi, esi
jmp 0x1000187a
push 0
add ecx, 0x30
lea eax, [esp + 0x34]
push 8
adc edx, 0
push edx
push ecx
push 0
push eax
call section..text
mov ecx, dword [esp + 0x48]
add esp, 0x18
mov esi, dword [esp + 0x34]
mov eax, dword [ecx + 0x3c]
push 0
push 0
push 0
mov edx, dword [eax + ecx + 0x28]
xor eax, eax
push 1
push esi
push ecx
add edx, ecx
push 3
adc eax, esi
push eax
push edx
call fcn.10001280
add esp, 0x24
mov ecx, edi
call fcn.100010f0
mov ebp, eax
mov ebx, edx
push 0
mov edi, ebp
lea eax, [esp + 0x14]
add edi, 0x68
mov esi, ebx
push 8
adc esi, 0
push esi
push edi
push 0
push eax
call section..text
mov eax, dword [esp + 0x2c]
or dword [esp + 0x28], 0x84000
push 0
push 8
mov dword [esp + 0x34], eax
lea eax, [esp + 0x30]
push 0
push eax
push esi
push edi
call section..text
push 0
push 2
push 0
add ebp, 0x70
mov dword [esp + 0x60], 0xffff
lea eax, [esp + 0x60]
push eax
adc ebx, 0
push ebx
push ebp
call section..text
mov eax, dword [esp + 0x60]
add esp, 0x48
inc eax
mov dword [esp + 0x18], eax
cmp eax, 2
jl 0x10001840
mov eax, dword [0x100d2480]
mov edx, dword [0x100d2484]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x9c
ret
pop edi
pop esi
pop ebp
mov eax, ecx
pop ebx
add esp, 0x9c
ret