Function at 0x1000b5b0
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x34
push ebp
mov ebp, dword [esp + 0x3c]
mov ecx, 1
mov dword [esp + 0x14], ecx
test ebp, ebp
je 0x1000b7c6
mov eax, 0x5a4d
cmp word [ebp], ax
jne 0x1000b7c6
mov eax, dword [ebp + 0x3c]
add eax, ebp
cmp dword [eax], 0x4550
mov dword [esp + 0x24], eax
jne 0x1000b7c6
push esi
push edi
mov edi, dword [eax + 0x78]
mov eax, dword [edi + ebp + 0x1c]
add edi, ebp
add eax, ebp
mov dword [esp + 0x28], eax
mov eax, dword [edi + 0x24]
add eax, ebp
mov dword [esp + 0x24], eax
mov eax, dword [edi + 0x20]
xor esi, esi
add eax, ebp
mov dword [esp + 0x14], edi
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], esi
cmp dword [edi + 0x18], esi
jbe 0x1000b7bd
push ebx
jmp 0x1000b62a
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + esi*4]
add ecx, ebp
je 0x1000b641
mov edx, 0xff
mov eax, ecx
cmp byte [eax], 0
je 0x1000b676
inc eax
dec edx
jne 0x1000b638
xor eax, eax
push eax
push ecx
push 0
call fcn.1000c290
mov edx, dword [esp + 0x5c]
xor eax, dword [esp + 0x60]
add esp, 0xc
xor ebx, ebx
test edx, edx
jle 0x1000b79f
mov ecx, dword [esp + 0x4c]
cmp eax, dword [ecx]
je 0x1000b683
inc ebx
add ecx, 0x10
cmp ebx, edx
jl 0x1000b665
jmp 0x1000b79f
test edx, edx
je 0x1000b641
mov eax, 0xff
sub eax, edx
jmp 0x1000b643
mov ecx, dword [esp + 0x28]
movzx edx, word [ecx + esi*2]
mov eax, dword [esp + 0x2c]
mov esi, dword [eax + edx*4]
add esi, ebp
je 0x1000b76e
cmp esi, edi
jb 0x1000b76e
mov ecx, dword [esp + 0x30]
mov edx, dword [ecx + 0x7c]
add edx, edi
cmp esi, edx
jae 0x1000b76e
push esi
call dword [sym.imp.SHLWAPI.dll_StrDupA]
mov ebp, eax
test ebp, ebp
je 0x1000b79b
push 0x2e
push ebp
mov dword [esp + 0x1c], 0
call dword [sym.imp.SHLWAPI.dll_StrChrA]
mov edi, eax
test edi, edi
je 0x1000b758
mov byte [edi], 0
mov eax, dword [0x1001215c]
inc edi
push ebp
test eax, eax
je 0x1000b6f1
call eax
jmp 0x1000b6f7
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 0x10], eax
test eax, eax
je 0x1000b758
xor esi, esi
mov dword [esp + 0x14], 1
cmp edi, esi
je 0x1000b71d
mov ecx, 0xff
mov eax, edi
cmp byte [eax], 0
je 0x1000b782
inc eax
dec ecx
jne 0x1000b714
xor eax, eax
push eax
push edi
push esi
call fcn.1000c290
mov ecx, eax
mov eax, dword [esp + 0x60]
push eax
xor ecx, eax
mov eax, dword [esp + 0x20]
push 0x10
lea edx, [esp + 0x48]
push edx
push eax
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], esi
mov dword [esp + 0x5c], esi
call fcn.1000b5b0
mov esi, dword [esp + 0x5c]
add esp, 0x1c
push ebp
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [esp + 0x14], 0
mov edi, dword [esp + 0x18]
mov ebp, dword [esp + 0x48]
je 0x1000b79f
mov ecx, dword [esp + 0x4c]
add ebx, ebx
lea eax, [ecx + ebx*8 + 0xc]
mov ecx, dword [eax]
test ecx, ecx
je 0x1000b78f
mov dword [ecx], esi
jmp 0x1000b791
cmp ecx, esi
je 0x1000b71d
mov eax, 0xff
sub eax, ecx
jmp 0x1000b71f
mov dword [eax], esi
test esi, esi
jne 0x1000b79f
mov dword [esp + 0x20], esi
jmp 0x1000b79f
mov ebp, dword [esp + 0x48]
mov esi, dword [esp + 0x1c]
inc esi
mov dword [esp + 0x1c], esi
cmp esi, dword [edi + 0x18]
jb 0x1000b626
mov eax, dword [esp + 0x20]
pop ebx
pop edi
pop esi
pop ebp
add esp, 0x34
ret
pop edi
pop esi
mov eax, ecx
pop ebp
add esp, 0x34
ret
mov eax, ecx
pop ebp
add esp, 0x34
ret