Function at 0x100048e0
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x34
push ebp
mov ebp, dword [esp + 0x3c]
mov ecx, 1
mov dword [esp + 0x14], ecx
test ebp, ebp
je 0x10004af6
mov eax, 0x5a4d
cmp word [ebp], ax
jne 0x10004af6
mov eax, dword [ebp + 0x3c]
add eax, ebp
cmp dword [eax], 0x4550
mov dword [esp + 0x24], eax
jne 0x10004af6
push esi
push edi
mov edi, dword [eax + 0x78]
mov eax, dword [edi + ebp + 0x1c]
add edi, ebp
add eax, ebp
mov dword [esp + 0x28], eax
mov eax, dword [edi + 0x24]
add eax, ebp
mov dword [esp + 0x24], eax
mov eax, dword [edi + 0x20]
xor esi, esi
add eax, ebp
mov dword [esp + 0x14], edi
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], esi
cmp dword [edi + 0x18], esi
jbe 0x10004aed
push ebx
jmp 0x1000495a
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + esi*4]
add ecx, ebp
je 0x10004971
mov edx, 0xff
mov eax, ecx
cmp byte [eax], 0
je 0x100049a6
inc eax
dec edx
jne 0x10004968
xor eax, eax
push eax
push ecx
push 0
call fcn.1000d610
mov edx, dword [esp + 0x5c]
xor eax, dword [esp + 0x60]
add esp, 0xc
xor ebx, ebx
test edx, edx
jle 0x10004acf
mov ecx, dword [esp + 0x4c]
cmp eax, dword [ecx]
je 0x100049b3
inc ebx
add ecx, 0x10
cmp ebx, edx
jl 0x10004995
jmp 0x10004acf
test edx, edx
je 0x10004971
mov eax, 0xff
sub eax, edx
jmp 0x10004973
mov ecx, dword [esp + 0x28]
movzx edx, word [ecx + esi*2]
mov eax, dword [esp + 0x2c]
mov esi, dword [eax + edx*4]
add esi, ebp
je 0x10004a9e
cmp esi, edi
jb 0x10004a9e
mov ecx, dword [esp + 0x30]
mov edx, dword [ecx + 0x7c]
add edx, edi
cmp esi, edx
jae 0x10004a9e
push esi
call dword [sym.imp.SHLWAPI.dll_StrDupA]
mov ebp, eax
test ebp, ebp
je 0x10004acb
push 0x2e
push ebp
mov dword [esp + 0x1c], 0
call dword [sym.imp.SHLWAPI.dll_StrChrA]
mov edi, eax
test edi, edi
je 0x10004a88
mov byte [edi], 0
mov eax, dword [0x10001478]
inc edi
push ebp
test eax, eax
je 0x10004a21
call eax
jmp 0x10004a27
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 0x10], eax
test eax, eax
je 0x10004a88
xor esi, esi
mov dword [esp + 0x14], 1
cmp edi, esi
je 0x10004a4d
mov ecx, 0xff
mov eax, edi
cmp byte [eax], 0
je 0x10004ab2
inc eax
dec ecx
jne 0x10004a44
xor eax, eax
push eax
push edi
push esi
call fcn.1000d610
mov ecx, eax
mov eax, dword [esp + 0x60]
push eax
xor ecx, eax
mov eax, dword [esp + 0x20]
push 0x10
lea edx, [esp + 0x48]
push edx
push eax
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], esi
mov dword [esp + 0x5c], esi
call fcn.100048e0
mov esi, dword [esp + 0x5c]
add esp, 0x1c
push ebp
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [esp + 0x14], 0
mov edi, dword [esp + 0x18]
mov ebp, dword [esp + 0x48]
je 0x10004acf
mov ecx, dword [esp + 0x4c]
add ebx, ebx
lea eax, [ecx + ebx*8 + 0xc]
mov ecx, dword [eax]
test ecx, ecx
je 0x10004abf
mov dword [ecx], esi
jmp 0x10004ac1
cmp ecx, esi
je 0x10004a4d
mov eax, 0xff
sub eax, ecx
jmp 0x10004a4f
mov dword [eax], esi
test esi, esi
jne 0x10004acf
mov dword [esp + 0x20], esi
jmp 0x10004acf
mov ebp, dword [esp + 0x48]
mov esi, dword [esp + 0x1c]
inc esi
mov dword [esp + 0x1c], esi
cmp esi, dword [edi + 0x18]
jb 0x10004956
mov eax, dword [esp + 0x20]
pop ebx
pop edi
pop esi
pop ebp
add esp, 0x34
ret
pop edi
pop esi
mov eax, ecx
pop ebp
add esp, 0x34
ret
mov eax, ecx
pop ebp
add esp, 0x34
ret