Function at 0x1003f170
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x10
mov eax, dword [esp + 0x14]
push ebx
push ebp
push esi
push edi
mov edi, dword [eax]
movzx eax, byte [edi + 0x4c]
sub eax, 7
mov ecx, dword [edi + 0x10]
mov ebp, dword [ecx]
mov esi, dword [edi + 0x3c]
mov byte [esp + 0x13], 0
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], ebp
je 0x1003f413
dec eax
jne 0x1003f3e0
cmp word [esi + 2], 0
jbe 0x1003f2bd
mov eax, dword [esi + 8]
xor edx, edx
mov dx, word [esi]
push edx
push eax
push edi
call fcn.1003e390
add esp, 0xc
cmp ax, word [ebp + 2]
jb 0x1003f1f4
mov edx, dword [esi + 8]
xor ecx, ecx
mov cx, word [esi]
xor eax, eax
mov ax, word [esi + 4]
push ecx
push edx
push eax
push 0xffffff73
push edi
call fcn.1004f450
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4
mov edx, dword [ebp + 4]
movzx ecx, ax
mov ebx, dword [edx + ecx*4]
cmp word [ebx + 0x24], 0
mov dword [esp + 0x14], 0
jbe 0x1003f250
lea esp, [esp]
movzx eax, word [esp + 0x14]
mov ecx, dword [ebx + 0x18]
mov eax, dword [ecx + eax*4]
mov ecx, dword [esi + 0xc]
xor edx, edx
mov dx, word [esi + 2]
mov dword [esp + 0x24], eax
mov eax, dword [eax + 0x10]
add eax, 2
push edx
xor edx, edx
mov dx, word [eax - 2]
push ecx
push edx
push eax
call fcn.100517a0
test al, al
jne 0x1003f28d
mov eax, dword [esp + 0x14]
inc eax
cmp ax, word [ebx + 0x24]
mov dword [esp + 0x14], eax
jb 0x1003f210
mov eax, dword [edi + 0x34]
test eax, eax
jne 0x1003f3bd
mov ax, word [esi + 2]
xor edx, edx
test ax, ax
jbe 0x1003f395
mov dx, word [esi + 6]
mov ecx, dword [esi + 0xc]
push eax
push ecx
push edx
push 0xffffff49
push edi
call fcn.1004f450
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4
push 0x14
call fcn.1005ac20
add esp, 4
test eax, eax
mov dword [edi + 0x34], eax
je 0x1003f3e5
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov edx, dword [edi + 0x34]
mov eax, dword [esp + 0x24]
mov dword [edx], eax
jmp 0x1003f250
xor eax, eax
cmp word [ebp + 2], ax
mov byte [esp + 0x24], 0
mov dword [esp + 0x14], eax
jbe 0x1003f250
mov edi, edi
mov edx, dword [ebp + 4]
movzx ecx, ax
mov edi, dword [edx + ecx*4]
xor ebx, ebx
cmp word [edi + 0x24], bx
jbe 0x1003f352
mov ecx, dword [edi + 0x18]
xor edx, edx
mov dx, word [esi]
movzx eax, bx
mov ebp, dword [ecx + eax*4]
mov eax, dword [ebp + 0x10]
mov ecx, dword [esi + 8]
push edx
xor edx, edx
mov dx, word [eax]
push ecx
add eax, 2
push edx
push eax
call fcn.100517a0
test al, al
jne 0x1003f313
inc ebx
cmp bx, word [edi + 0x24]
jb 0x1003f2e1
jmp 0x1003f34e
mov al, byte [esp + 0x24]
test al, al
jne 0x1003f36e
push 0x14
call fcn.1005ac20
mov ecx, dword [esp + 0x1c]
add esp, 4
test eax, eax
mov dword [ecx + 0x34], eax
je 0x1003f3e5
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], edx
mov eax, dword [ecx + 0x34]
mov dword [eax], ebp
mov byte [esp + 0x24], 1
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
inc eax
cmp ax, word [ebp + 2]
mov dword [esp + 0x14], eax
jb 0x1003f2d0
mov edi, dword [esp + 0x18]
jmp 0x1003f250
mov ecx, dword [ebp + 0x10]
mov eax, dword [esp + 0x18]
xor edx, edx
mov dx, word [esi]
push ecx
push edx
push 0xfffffd5a
push eax
call fcn.1004f490
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4
mov dx, word [esi + 4]
mov ecx, dword [esi + 8]
xor eax, eax
mov ax, word [esi]
push eax
push ecx
push edx
push 0xffffff49
push edi
call fcn.1004f450
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4
mov ecx, dword [eax]
movzx eax, word [ecx]
mov edx, dword [ebp + 4]
mov eax, dword [edx + eax*4]
mov eax, dword [eax + 0x20]
test eax, eax
je 0x1003f3e0
mov cx, word [ecx + 2]
cmp word [eax + 0x22], cx
je 0x1003f3f3
mov eax, dword [eax + 0x24]
test eax, eax
jne 0x1003f3d3
mov byte [esp + 0x13], 1
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4
xor eax, eax
mov ax, word [esi + 4]
push eax
push 0xffffff7a
push edi
call fcn.1004f800
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4
mov edx, dword [esi + 8]
xor ecx, ecx
mov cx, word [esi]
push ecx
push edx
push edi
call fcn.1003e390
add esp, 0xc
cmp ax, word [ebp + 2]
jb 0x1003f456
mov ecx, dword [esi + 8]
xor eax, eax
mov ax, word [esi]
xor edx, edx
mov dx, word [esi + 4]
push eax
push ecx
push edx
push 0xffffff73
push edi
call fcn.1004f450
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4
mov ecx, dword [ebp + 4]
movzx eax, ax
mov ebx, dword [ecx + eax*4]
push 4
call fcn.1005ac20
add esp, 4
test eax, eax
mov dword [edi + 0x28], eax
je 0x1003f3e5
mov dword [eax], ebx
mov eax, dword [ebx + 0x34]
test eax, eax
je 0x1003f4a0
mov edx, dword [ebx]
xor eax, eax
mov ax, word [esi + 4]
push edx
push eax
push 0xfffffee7
push edi
call fcn.1004f490
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x1003f3e0
xor ecx, ecx
mov cx, word [esi + 4]
push ecx
push 0xffffff7a
push edi
call fcn.1004f800
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4