Function at 0x1000b3f0
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x1c
push ebx
push ebp
mov ebp, dword [esp + 0x28]
cmp byte [ebp + 0x43], 1
push esi
push edi
jne 0x1000b45e
cmp byte [ebp + 0x42], 0
je 0x1000b45e
mov eax, dword [ebp + 0x60]
cmp byte [eax + 2], 0
je 0x1000b45e
mov eax, dword [ebp + 0x28]
mov edx, dword [esp + 0x38]
cmp eax, edx
mov ecx, dword [ebp + 0x2c]
jne 0x1000b438
cmp ecx, dword [esp + 0x3c]
jne 0x1000b438
mov ecx, dword [esp + 0x44]
mov dword [ecx], 0
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret
cmp byte [ebp + 0x41], 0
je 0x1000b45e
cmp ecx, dword [esp + 0x3c]
jg 0x1000b45e
jl 0x1000b44a
cmp eax, edx
jae 0x1000b45e
mov edx, dword [esp + 0x44]
mov dword [edx], 0xffffffff
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret
mov eax, ebp
call fcn.1000b0e0
test eax, eax
jne 0x1000b7d5
cmp byte [ebp + 0x43], al
jne 0x1000b490
mov eax, dword [esp + 0x44]
mov dword [eax], 0xffffffff
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret
movsx ecx, word [ebp + 0x5c]
mov esi, dword [ebp + ecx*4 + 0x60]
movzx eax, word [esi + 0x10]
sub eax, 1
cmp dword [esp + 0x40], 0
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], 0
mov dword [esp + 0x20], eax
jne 0x1000b4bb
cdq
sub eax, edx
sar eax, 1
mov word [ebp + ecx*2 + 0xb0], ax
movsx ecx, word [ebp + 0x5c]
movzx ecx, word [ebp + ecx*2 + 0xb0]
mov word [ebp + 0x3e], 0
movzx edx, word [esi + 0xc]
mov eax, dword [esi + 0x40]
movzx edi, byte [esi + 6]
add edx, eax
movzx ebx, byte [edx + ecx*2 + 1]
mov bh, byte [edx + ecx*2]
mov dword [esp + 0x1c], ecx
lea ecx, [edx + ecx*2]
movzx ecx, word [esi + 0x12]
and ebx, ecx
add ebx, edi
add ebx, eax
cmp byte [esi + 2], 0
je 0x1000b592
cmp byte [esi + 4], 0
je 0x1000b52e
cmp byte [ebx], 0x80
jae 0x1000b517
mov eax, 1
jmp 0x1000b529
lea esi, [esp + 0x30]
mov ecx, ebx
call fcn.10019c80
mov esi, dword [esp + 0x18]
movzx eax, al
movzx edx, al
add ebx, edx
lea edi, [esp + 0x24]
mov eax, ebx
call fcn.10019af0
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x38]
cmp eax, edx
mov ecx, dword [esp + 0x28]
jne 0x1000b560
cmp ecx, dword [esp + 0x3c]
jne 0x1000b564
xor edi, edi
mov byte [ebp + 0x42], 1
mov dword [ebp + 0x28], eax
mov dword [ebp + 0x2c], ecx
jmp 0x1000b691
cmp ecx, dword [esp + 0x3c]
jg 0x1000b57e
jl 0x1000b56c
cmp eax, edx
jae 0x1000b57e
or edi, 0xffffffff
mov byte [ebp + 0x42], 1
mov dword [ebp + 0x28], eax
mov dword [ebp + 0x2c], ecx
jmp 0x1000b691
mov edi, 1
mov byte [ebp + 0x42], 1
mov dword [ebp + 0x28], eax
mov dword [ebp + 0x2c], ecx
jmp 0x1000b691
movzx eax, byte [ebx]
test al, al
js 0x1000b5ba
movzx ecx, word [esi + 8]
cmp eax, ecx
jg 0x1000b5ba
mov edx, dword [esp + 0x34]
push edx
add ebx, 1
push ebx
push eax
call fcn.100240a0
add esp, 0xc
mov edi, eax
jmp 0x1000b691
mov cl, byte [ebx + 1]
test cl, cl
js 0x1000b5ed
movzx edx, word [esi + 8]
and eax, 0x7f
movzx ecx, cl
shl eax, 7
add eax, ecx
cmp eax, edx
jg 0x1000b5ed
mov ecx, dword [esp + 0x34]
push ecx
add ebx, 2
push ebx
push eax
call fcn.100240a0
add esp, 0xc
mov edi, eax
jmp 0x1000b691
lea edx, [ebp + 0x20]
push edx
sub ebx, edi
push ebx
push esi
call fcn.10007480
mov edi, dword [ebp + 0x28]
lea eax, [edi - 1]
add esp, 0xc
cmp eax, 0x7ffffefe
ja 0x1000b77c
cmp dword [0x1009aea0], 0
je 0x1000b6a4
mov eax, dword [0x1009c728]
test eax, eax
je 0x1000b62e
push eax
call dword [0x1009aee8]
add esp, 4
lea ebx, [esp + 0x14]
mov eax, edi
call fcn.10005330
mov eax, dword [0x1009c728]
test eax, eax
je 0x1000b64c
push eax
call dword [0x1009aef0]
add esp, 4
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
test ebx, ebx
je 0x1000b77c
push 0
push ebx
push edi
push 0
push ebp
call fcn.1000ab80
add esp, 0x14
test eax, eax
mov dword [esp + 0x30], eax
jne 0x1000b790
mov ecx, dword [esp + 0x34]
push ecx
push ebx
push edi
call fcn.100240a0
add esp, 0xc
push ebx
mov edi, eax
call fcn.10005700
add esp, 4
test edi, edi
je 0x1000b6d8
jge 0x1000b6b6
mov edx, dword [esp + 0x1c]
add edx, 1
mov dword [esp + 0x10], edx
jmp 0x1000b6c1
push edi
call dword [0x1009aeb8]
mov ebx, eax
add esp, 4
mov dword [esp + 0x14], ebx
jmp 0x1000b654
mov eax, dword [esp + 0x1c]
add eax, 0xffffffff
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x20]
cmp ecx, eax
jg 0x1000b6f6
add eax, ecx
movsx ecx, word [ebp + 0x5c]
jmp 0x1000b4b6
cmp byte [esi + 2], 0
je 0x1000b7a5
cmp byte [esi + 3], 0
jne 0x1000b7a5
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x10], edx
mov ecx, edx
cmp byte [esi + 3], 0
jne 0x1000b7c3
movzx eax, word [esi + 0x10]
cmp ecx, eax
mov eax, dword [esi + 0x40]
jl 0x1000b715
movzx edx, byte [esi + 5]
lea eax, [edx + eax + 8]
jmp 0x1000b72e
movzx edx, word [esi + 0xc]
add edx, eax
movzx ebx, byte [edx + ecx*2 + 1]
mov bh, byte [edx + ecx*2]
lea edx, [edx + ecx*2]
movzx edx, word [esi + 0x12]
and ebx, edx
add eax, ebx
movzx esi, byte [eax + 2]
xor edx, edx
mov dh, byte [eax]
mov dl, byte [eax + 1]
movzx eax, byte [eax + 3]
shl edx, 8
or edx, esi
shl edx, 8
or eax, edx
test eax, eax
je 0x1000b7c3
movsx edx, word [ebp + 0x5c]
mov word [ebp + edx*2 + 0xb0], cx
push eax
mov esi, ebp
mov word [ebp + 0x3e], 0
mov byte [ebp + 0x42], 0
call fcn.1000b000
add esp, 4
test eax, eax
je 0x1000b490
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret
mov dword [esp + 0x30], 7
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret
push ebx
call fcn.10005700
mov eax, dword [esp + 0x34]
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret
mov eax, dword [esp + 0x44]
mov dword [eax], 0
mov dword [esp + 0x30], 0
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x30], 0
mov eax, dword [esp + 0x30]
mov dword [ecx], edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret