Function at 0x10071bfc
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x100be767
mov eax, dword fs:[0]
push eax
sub esp, 0x88
push ebx
push esi
push edi
mov eax, dword [0x1010f048]
xor eax, esp
push eax
lea eax, [esp + 0x98]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
lea ebx, [esi + 0x6c]
mov eax, dword [ebx + 8]
mov edi, dword [ebx + 4]
cmp edi, eax
mov dword [esp + 0x18], eax
je 0x10071cb0
cmp eax, eax
mov dword [esp + 0x14], eax
je 0x10071c83
mov dword [esp + 0x10], eax
sub dword [esp + 0x10], edi
mov eax, dword [esp + 0x14]
push edi
call fcn.1000e702
mov eax, dword [esp + 0x10]
mov eax, dword [eax + edi + 0x10]
mov dword [edi + 0x10], eax
mov eax, dword [esp + 0x14]
mov cx, word [eax + 0x14]
add eax, 0x18
mov word [edi + 0x14], cx
add edi, 0x18
cmp eax, dword [esp + 0x18]
mov dword [esp + 0x14], eax
jne 0x10071c52
mov eax, dword [ebx + 8]
cmp edi, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], edi
je 0x10071cad
mov esi, dword [esp + 0x10]
call fcn.10002d50
add dword [esp + 0x10], 0x18
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x18]
jne 0x10071c92
mov esi, dword [ebp + 8]
mov dword [ebx + 8], edi
push dword [esi + 0x3c]
call dword [sym.imp.USER32.dll_GetMenuItemCount]
and dword [esp + 0x10], 0
test eax, eax
mov dword [esp + 0x18], eax
jle 0x10071e71
mov edi, dword [sym.imp.USER32.dll_GetMenuItemInfoW]
push 0x30
lea eax, [esp + 0x48]
push 0
push eax
call sub.MSVCR80.dll_memset
and dword [esp + 0x74], 0
add esp, 0xc
lea eax, [esp + 0x44]
push eax
push 1
push dword [esp + 0x18]
mov dword [esp + 0x50], 0x30
push dword [esi + 0x3c]
mov dword [esp + 0x58], 0x45
call edi
push eax
call fcn.100073ec
mov eax, dword [esp + 0x70]
inc eax
pop ecx
push eax
lea eax, [esp + 0x20]
call fcn.1004dea4
and dword [esp + 0xa0], 0
mov eax, dword [esp + 0x6c]
inc eax
push eax
lea eax, [esp + 0x88]
call fcn.1004dea4
mov byte [esp + 0xa0], 1
mov eax, dword [esp + 0x20]
inc dword [esp + 0x6c]
mov dword [esp + 0x68], eax
lea eax, [esp + 0x44]
push eax
push 1
push dword [esp + 0x18]
push dword [esi + 0x3c]
call edi
push eax
call fcn.100073ec
mov eax, dword [esp + 0x24]
and dword [esp + 0x18], 0
pop ecx
mov ecx, dword [esp + 0x24]
cmp eax, ecx
je 0x10071d93
cmp word [eax], 0x26
je 0x10071d88
inc eax
inc eax
cmp eax, ecx
jne 0x10071d72
jmp 0x10071d93
cmp word [eax], 0x26
jne 0x10071d8c
inc eax
inc eax
cmp eax, ecx
jne 0x10071d80
movzx eax, word [eax]
mov dword [esp + 0x14], eax
push dword [esp + 0x20]
lea eax, [esp + 0x78]
push eax
call fcn.10002258
mov esi, dword [esp + 0x58]
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x78]
mov byte [esp + 0xa4], 2
call fcn.1000e853
mov ax, word [esp + 0x14]
mov dword [esp + 0x3c], esi
lea esi, [esp + 0x74]
mov word [esp + 0x40], ax
mov byte [esp + 0xa0], 1
call fcn.10002d50
mov byte [esp + 0xa0], 3
mov ecx, dword [ebx + 4]
test ecx, ecx
jne 0x10071ded
xor esi, esi
jmp 0x10071dfa
mov eax, dword [ebx + 0xc]
sub eax, ecx
push 0x18
cdq
pop ecx
idiv ecx
mov esi, eax
mov eax, ebx
call fcn.10019a38
cmp eax, esi
jae 0x10071e19
lea eax, [esp + 0x2c]
push eax
push 1
push dword [ebx + 8]
call fcn.10072528
mov dword [ebx + 8], eax
jmp 0x10071e26
push dword [ebx + 8]
lea ecx, [esp + 0x30]
push ebx
call fcn.10072558
lea esi, [esp + 0x2c]
mov byte [esp + 0xa0], 1
call fcn.10002d50
lea esi, [esp + 0x84]
mov byte [esp + 0xa0], 0
call fcn.10002d50
or dword [esp + 0xa0], 0xffffffff
lea esi, [esp + 0x1c]
call fcn.10002d50
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp eax, dword [esp + 0x18]
mov esi, dword [ebp + 8]
jl 0x10071cd0
mov ecx, dword [esi + 0x28]
mov eax, dword [ecx]
push esi
call dword [eax + 0x20]
mov ecx, dword [esp + 0x98]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4