Function at 0x1000c160
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x24
push ebp
push esi
mov esi, dword [esp + 0x30]
xor ebp, ebp
mov dword [esp + 8], ebp
cmp esi, ebp
je 0x1000c193
cmp esi, 0xffffffff
je 0x1000c193
push 0x40
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
je 0x1000c19b
push str.77CaJXykRKiJILOiWnDEXG1qJcow2kEt7q7XkjBnDeec70YZvUVS1CKg808sPQ
push ebp
call fcn.1000b050
add esp, 8
pop esi
xor eax, eax
pop ebp
add esp, 0x24
ret
mov eax, 0x5a4d
cmp word [esi], ax
je 0x1000c1bb
push str.7GCeb7eO4CRUXf3XXprHZku6AUx7L2W_1KF0hylAO8ObvYaSEiarcZgyrm_jQ
push ebp
call fcn.1000b050
add esp, 8
pop esi
xor eax, eax
pop ebp
add esp, 0x24
ret
mov eax, dword [esi + 0x3c]
add eax, esi
cmp dword [eax], 0x4550
je 0x1000c1de
push str.7GCeb7eO4CRUXf3XXprHZku6AUx7L2W_1KF0hac7wUYP8VXUmduv9SpDGR
push ebp
call fcn.1000b050
add esp, 8
pop esi
xor eax, eax
pop ebp
add esp, 0x24
ret
movzx ecx, word [eax + 4]
mov edx, 0x200
cmp cx, dx
je 0x1000c676
mov edx, 0x8664
cmp cx, dx
je 0x1000c676
mov ecx, 0x20b
cmp word [eax + 0x18], cx
je 0x1000c676
push edi
mov edi, dword [eax + 0x78]
cmp edi, ebp
jne 0x1000c22c
push str.7GCeb7eO4CRUXf3XXprHZku6AU27euS60uOgCzKJ64fa_QoRzxFqQ
push ebp
call fcn.1000b050
add esp, 8
pop edi
pop esi
xor eax, eax
pop ebp
add esp, 0x24
ret
mov edx, dword [eax + 0x7c]
mov eax, dword [eax + 0x50]
mov ecx, dword [edi + esi + 0x20]
mov dword [esp + 0x10], edx
lea edx, [ecx + esi]
mov dword [esp + 0x24], eax
add eax, esi
push ebx
mov ebx, dword [edi + esi + 0x1c]
mov dword [esp + 0x2c], edx
mov edx, dword [edi + esi + 0x24]
mov dword [esp + 0x38], eax
mov al, byte [esi + 0xff4]
add edx, esi
add ebx, esi
mov dword [esp + 0x30], edx
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], ebp
cmp al, 0x7a
jne 0x1000c293
cmp byte [esi + 0xff5], 0x9c
jne 0x1000c293
cmp byte [esi + 0xff6], 0x77
jne 0x1000c293
cmp byte [esi + 0xff7], 0xb2
jne 0x1000c293
mov dword [esp + 0x18], 1
jmp 0x1000c2b7
test al, al
jne 0x1000c2b7
cmp byte [esi + 0xff5], al
jne 0x1000c2b7
cmp byte [esi + 0xff6], al
jne 0x1000c2b7
cmp byte [esi + 0xff7], al
jne 0x1000c2b7
mov dword [esp + 0x1c], 1
mov eax, dword [esp + 0x3c]
mov ebp, eax
shr ebp, 0x10
test ebp, ebp
jne 0x1000c448
sub eax, dword [edi + esi + 0x10]
mov ecx, dword [edi + esi + 0x14]
mov ebp, eax
cmp ebp, ecx
jae 0x1000c66a
xor edx, edx
cmp dword [esp + 0x18], edx
je 0x1000c33e
mov eax, dword [esi + 0xff8]
cmp eax, edx
je 0x1000c66a
xor eax, 0xafcd32b9
mov ebp, dword [eax + ebp*4]
cmp ebp, edx
jne 0x1000c30a
pop ebx
pop edi
pop esi
mov dword [esp + 4], edx
mov eax, edx
pop ebp
add esp, 0x24
ret
cmp ebp, edi
jae 0x1000c31e
pop ebx
add ebp, esi
pop edi
pop esi
mov dword [esp + 4], ebp
mov eax, ebp
pop ebp
add esp, 0x24
ret
mov eax, dword [esp + 0x14]
add eax, edi
cmp ebp, eax
jae 0x1000c30e
push ebp
push esi
call fcn.1000bee0
add esp, 8
pop ebx
pop edi
pop esi
mov dword [esp + 4], eax
pop ebp
add esp, 0x24
ret
mov eax, dword [ebx + ebp*4]
cmp eax, edx
je 0x1000c2fc
cmp eax, edi
jae 0x1000c36b
mov edx, dword [esp + 0x38]
push edx
push ebx
push ecx
add eax, esi
push esi
mov dword [esp + 0x20], eax
call fcn.1000bd10
mov eax, dword [esp + 0x20]
add esp, 0x10
pop ebx
pop edi
pop esi
pop ebp
add esp, 0x24
ret
mov edx, dword [esp + 0x14]
add edx, edi
mov dword [esp + 0x18], edx
cmp eax, edx
jb 0x1000c519
cmp eax, dword [esp + 0x28]
jae 0x1000c3a5
add eax, esi
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x38]
push eax
push ebx
push ecx
push esi
call fcn.1000bd10
mov eax, dword [esp + 0x20]
add esp, 0x10
pop ebx
pop edi
pop esi
pop ebp
add esp, 0x24
ret
push eax
push ebp
push str.5bhhS_FcakkKhT70QTzwroTgZsGdKoM0phNm_VRGWomsxkiE1DZ3gaMTXqUY3Y5v8rsXSNg5oys
push 0
call fcn.1000b050
mov edx, dword [esp + 0x2c]
mov eax, dword [edi + esi + 0x14]
lea ecx, [esp + 0x48]
push ecx
push edx
push eax
push ebp
push esi
mov dword [esp + 0x5c], 0
call fcn.1000b9a0
mov ebx, eax
add esp, 0x24
test ebx, ebx
je 0x1000c66a
mov ebp, dword [esp + 0x38]
test ebp, ebp
je 0x1000c644
lea ecx, [esp + 0x38]
push ecx
push 4
push 0x1000
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x1000c636
mov eax, dword [esp + 0x38]
lea edx, [esp + 0x38]
push edx
push eax
xor ebp, 0xafcd32b9
mov dword [esi + 0xff8], ebp
push 0x1000
push esi
mov byte [esi + 0xff4], 0x7a
mov byte [esi + 0xff5], 0x9c
mov byte [esi + 0xff6], 0x77
mov byte [esi + 0xff7], 0xb2
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
jmp 0x1000c644
test ecx, ecx
jne 0x1000c464
push str.3iO1AvJALNK5mPB6hZYqjyC8ICfYOWh7qoDmZPT2C0e3gTNphHOstB2O2QRV0l1MNrsOCPeQFyKrINV15k3xnQUvzO0q9U
push ecx
call fcn.1000b050
add esp, 8
pop ebx
pop edi
pop esi
xor eax, eax
pop ebp
add esp, 0x24
ret
xor ecx, ecx
mov dword [esp + 0x24], ecx
cmp dword [edi + esi + 0x18], ecx
jbe 0x1000c66a
movzx ebp, word [edx + ecx*2]
mov dword [esp + 0x20], ebp
mov ebp, dword [esp + 0x2c]
mov ebp, dword [ebp + ecx*4]
add ebp, esi
cmp ebp, esi
jb 0x1000c4c9
cmp dword [esp + 0x38], ebp
jb 0x1000c4c9
mov edx, ebp
mov ecx, eax
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x1000c4b4
test al, al
je 0x1000c4b0
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x1000c4b4
add ecx, 2
add edx, 2
test al, al
jne 0x1000c494
xor eax, eax
jmp 0x1000c4b9
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1000c4e0
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x30]
inc ecx
mov dword [esp + 0x24], ecx
cmp ecx, dword [edi + esi + 0x18]
jb 0x1000c474
mov eax, dword [esp + 0x10]
pop ebx
pop edi
pop esi
pop ebp
add esp, 0x24
ret
cmp dword [esp + 0x18], 0
je 0x1000c52f
mov eax, dword [esi + 0xff8]
test eax, eax
je 0x1000c52f
mov ecx, dword [esp + 0x20]
xor eax, 0xafcd32b9
mov eax, dword [eax + ecx*4]
cmp eax, edi
jae 0x1000c50f
pop ebx
pop edi
add eax, esi
pop esi
mov dword [esp + 4], eax
pop ebp
add esp, 0x24
ret
mov edx, dword [esp + 0x14]
add edx, edi
cmp eax, edx
jae 0x1000c501
push eax
push esi
call fcn.1000bee0
add esp, 8
pop ebx
pop edi
pop esi
mov dword [esp + 4], eax
pop ebp
add esp, 0x24
ret
mov eax, dword [esp + 0x20]
mov eax, dword [ebx + eax*4]
cmp eax, edi
jae 0x1000c560
mov ecx, dword [esp + 0x38]
mov edx, dword [edi + esi + 0x14]
push ecx
push ebx
push edx
add eax, esi
push esi
mov dword [esp + 0x20], eax
call fcn.1000bd10
mov eax, dword [esp + 0x20]
add esp, 0x10
pop ebx
pop edi
pop esi
pop ebp
add esp, 0x24
ret
mov ecx, dword [esp + 0x14]
add ecx, edi
mov dword [esp + 0x18], ecx
cmp eax, ecx
jb 0x1000c519
cmp eax, dword [esp + 0x28]
jae 0x1000c59a
mov edx, dword [esp + 0x38]
add eax, esi
push edx
mov dword [esp + 0x14], eax
mov eax, dword [edi + esi + 0x14]
push ebx
push eax
push esi
call fcn.1000bd10
mov eax, dword [esp + 0x20]
add esp, 0x10
pop ebx
pop edi
pop esi
pop ebp
add esp, 0x24
ret
push eax
push ebp
push str.OpunpAiyZ25t2VpfN6wPIuKHfBGArcpbXdc434kXhTvHQCyip79RWIebNo7rfW5q1KgNXXHfb7U
push 4
call fcn.1000b050
mov edx, dword [esp + 0x2c]
mov eax, dword [edi + esi + 0x14]
lea ecx, [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x34]
push edx
push eax
push ecx
push esi
mov dword [esp + 0x5c], 0
call fcn.1000b9a0
mov ebx, eax
add esp, 0x24
test ebx, ebx
je 0x1000c66a
mov ebp, dword [esp + 0x38]
test ebp, ebp
je 0x1000c644
lea edx, [esp + 0x38]
push edx
push 4
push 0x1000
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x1000c636
mov ecx, dword [esp + 0x38]
lea eax, [esp + 0x38]
push eax
push ecx
xor ebp, 0xafcd32b9
mov dword [esi + 0xff8], ebp
push 0x1000
push esi
mov byte [esi + 0xff4], 0x7a
mov byte [esi + 0xff5], 0x9c
mov byte [esi + 0xff6], 0x77
mov byte [esi + 0xff7], 0xb2
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
jmp 0x1000c644
push 0x8000
push 0
push ebp
call dword [sym.imp.KERNEL32.dll_VirtualFree]
cmp ebx, edi
jb 0x1000c664
cmp ebx, dword [esp + 0x18]
jae 0x1000c664
push ebx
push esi
call fcn.1000bee0
add esp, 8
pop ebx
pop edi
pop esi
mov dword [esp + 4], eax
pop ebp
add esp, 0x24
ret
add ebx, esi
mov dword [esp + 0x10], ebx
mov eax, dword [esp + 0x10]
pop ebx
pop edi
pop esi
pop ebp
add esp, 0x24
ret
push str.kLH0Gs1fxXd67njWJ141FvqyCe1oQdR6sQjH0MZcTFltK4G2WlqxQZSSLLaXV3vYGVdqWII1gwl4v3Ds1aOpi3mzmX39hCCyxkONdJAI5tYOgWlqlpIqePKQTb8
push ebp
call fcn.1000b050
add esp, 8
pop esi
xor eax, eax
pop ebp
add esp, 0x24
ret