Function at 0x100b85ee
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x108
mov eax, dword [0x101366b4]
xor eax, esp
mov dword [esp + 0x104], eax
mov eax, dword [esp + 0x10c]
push ebx
mov ebx, dword [esp + 0x114]
mov dword [esp + 0x10], eax
mov dword [esp + 0x20], ebx
mov ecx, dword [ebx + 0xec]
test ecx, ecx
je 0x100b862a
mov eax, ecx
jmp 0x100b8ae0
push ebp
push esi
push edi
mov edi, dword [eax + 0x48]
lea ecx, [esp + 0x14]
push ecx
xor ebp, ebp
push ebp
push 0xc
push eax
call fcn.100caa46
mov esi, eax
test esi, esi
js 0x100b8af8
mov eax, dword [esp + 0x14]
mov dword [ebx + 0xec], eax
mov dword [eax + 8], ebp
test byte [ebx + 0xdc], 8
mov ebp, dword [ebx + 0xe0]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x30], ebp
je 0x100b8684
mov dword [eax], 0x64
mov eax, dword [esp + 0x14]
mov dword [eax + 4], 1
jmp 0x100b8ad9
push eax
add eax, 4
push eax
push ebx
push dword [esp + 0x28]
call fcn.100b824e
mov esi, eax
test esi, esi
js 0x100b8af8
mov eax, dword [ebx + 0xe4]
push 1
cmp eax, 0xffffffff
je 0x100b86bd
push 0x3c
lea ecx, [esp + 0x5c]
push ecx
xor ecx, ecx
push ecx
push eax
push edi
call fcn.1003c8d0
jmp 0x100b86e2
lea eax, [esp + 0x58]
mov dword [esp + 0x48], 0x3c
mov dword [esp + 0x54], eax
xor ecx, ecx
lea eax, [esp + 0x48]
push eax
push ecx
push dword [ebx + 0xc8]
push ebp
push edi
call fcn.1003ba60
mov esi, eax
test esi, esi
jns 0x100b86f9
cmp esi, 0xfffffae0
je 0x100b8ad9
jmp 0x100b8af8
mov ebp, dword [esp + 0x58]
xor eax, eax
push eax
push Ordinal_2
push ebp
push edi
mov dword [esp + 0x44], ebp
call fcn.1003cb30
mov esi, eax
jmp 0x100b8ab4
lea eax, [esp + 0x10]
push eax
push 1
push 0x68
push dword [esp + 0x28]
call fcn.100caafd
mov esi, eax
test esi, esi
js 0x100b8ac4
xor eax, eax
push eax
push eax
lea eax, [esp + 0x20]
push eax
push 0x82
lea eax, [esp + 0xa0]
push eax
push dword [esp + 0x74]
push ebp
push edi
call fcn.1003cec0
mov esi, eax
test esi, esi
js 0x100b8ac4
mov eax, dword [esp + 0x18]
and eax, 0xfffffffe
cmp eax, 0x82
jae 0x100b8b02
xor ecx, ecx
xor esi, esi
mov word [esp + eax + 0x90], cx
lea ecx, [esp + 0x90]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, si
jne 0x100b8786
mov eax, dword [esp + 0x10]
sub ecx, edx
sar ecx, 1
add eax, 4
push eax
push esi
lea eax, [ecx*2 + 2]
push eax
push dword [esp + 0x28]
call fcn.100caa46
mov esi, eax
test esi, esi
js 0x100b8ac4
lea ecx, [esp + 0x90]
xor esi, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, si
jne 0x100b87c5
sub ecx, edx
lea eax, [esp + 0x90]
sar ecx, 1
push eax
lea eax, [ecx + 1]
push eax
mov eax, dword [esp + 0x18]
push dword [eax + 4]
call fcn.100631e0
push esi
push esi
lea eax, [esp + 0x20]
push eax
mov eax, dword [esp + 0x1c]
push 4
add eax, 8
push eax
push dword [esp + 0x80]
push ebp
push edi
call fcn.1003cec0
mov esi, eax
test esi, esi
js 0x100b8ac4
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
mov ecx, dword [edx + 8]
test ecx, ecx
je 0x100b8828
cmp ecx, dword [eax]
jbe 0x100b882d
mov eax, dword [eax]
mov dword [edx + 8], eax
cmp dword [ebx + 0xc0], 2
jne 0x100b88a3
mov esi, dword [esp + 0x30]
push esi
call fcn.100ee470
test eax, eax
jne 0x100b88a3
push 2
lea eax, [esp + 0x28]
mov dword [esp + 0x48], 4
mov dword [esp + 0x54], eax
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x98]
push eax
push dword [ebx + 0xc8]
push esi
push edi
call fcn.1003ba60
mov esi, eax
test esi, esi
js 0x100b8ac4
mov ecx, dword [esp + 0x10]
lea eax, [ecx + 0x10]
push eax
lea eax, [ecx + 0xc]
push eax
push dword [esp + 0x2c]
push edi
call fcn.100ee730
push dword [esp + 0x24]
mov esi, eax
push edi
call fcn.1003c120
or dword [esp + 0x24], 0xffffffff
jmp 0x100b88ee
xor eax, eax
push eax
push eax
lea eax, [esp + 0x20]
push eax
mov eax, dword [esp + 0x1c]
push 4
add eax, 0x10
push eax
push dword [esp + 0x7c]
push ebp
push edi
call fcn.1003cec0
mov esi, eax
test esi, esi
js 0x100b8ac4
xor eax, eax
push eax
push eax
lea eax, [esp + 0x20]
push eax
mov eax, dword [esp + 0x1c]
push 4
add eax, 0xc
push eax
push dword [esp + 0x84]
push ebp
push edi
call fcn.1003cec0
mov esi, eax
test esi, esi
js 0x100b8ac4
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + 0x10]
test eax, eax
je 0x100b8906
cmp eax, dword [ecx + 8]
jbe 0x100b8914
mov eax, dword [ecx + 8]
shr eax, 2
inc eax
mov dword [ecx + 0x10], eax
mov ecx, dword [esp + 0x10]
xor edx, edx
cmp dword [ecx + 0xc], edx
jne 0x100b8929
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 4]
shr eax, 4
inc eax
mov dword [ecx + 0xc], eax
push edx
push edx
lea eax, [esp + 0x20]
push eax
push 4
lea eax, [esp + 0x30]
push eax
push dword [esp + 0x78]
push ebp
push edi
call fcn.1003cec0
mov esi, eax
test esi, esi
js 0x100b8ac4
mov ecx, dword [esp + 0x10]
push 0
mov eax, dword [ecx + 0x14]
and eax, 0xfffffffe
or eax, 2
mov dword [ecx + 0x14], eax
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x24]
shl eax, 2
xor eax, dword [ecx + 0x14]
and eax, 4
xor dword [ecx + 0x14], eax
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x24]
shr eax, 4
shl eax, 3
xor eax, dword [ecx + 0x14]
and eax, 8
xor dword [ecx + 0x14], eax
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x24]
shr eax, 1
shl eax, 4
xor eax, dword [ecx + 0x14]
and eax, 0x10
xor dword [ecx + 0x14], eax
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x24]
shr eax, 2
shl eax, 5
xor eax, dword [ecx + 0x14]
and eax, 0x20
xor dword [ecx + 0x14], eax
test byte [esp + 0x24], 0x28
mov ecx, dword [esp + 0x14]
pop eax
setne al
shl eax, 6
xor eax, dword [ecx + 0x14]
and eax, 0x40
xor dword [ecx + 0x14], eax
mov ecx, dword [esp + 0x10]
test byte [ecx + 0x14], 4
jne 0x100b89e1
mov eax, dword [ecx + 0x10]
cmp eax, dword [ecx + 8]
jbe 0x100b89eb
mov eax, dword [ecx + 8]
mov dword [ecx + 0x10], eax
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
push ebp
push edi
push ebx
push ecx
push dword [esp + 0x38]
call fcn.100b7ffe
cmp dword [esp + 0x28], 0
mov esi, eax
je 0x100b8a1b
mov eax, dword [esp + 0x10]
or dword [eax + 0x14], 0x80
cmp dword [esp + 0x3c], 0
jne 0x100b8ab4
mov edx, dword [esp + 0x10]
mov eax, dword [edx + 0x14]
test al, 0x34
je 0x100b8aa0
mov ecx, dword [ebx + 4]
mov dword [esp + 0x40], ecx
xor ecx, ecx
mov dword [esp + 0x38], ecx
mov ecx, eax
shl ecx, 0x11
sar ecx, 0x1b
test ecx, ecx
jle 0x100b8aa0
mov ebp, dword [esp + 0x38]
mov ebx, eax
mov eax, dword [edx + 0x18]
shl eax, 0x10
sar eax, 0x12
imul eax, eax, 0x34
add eax, dword [esp + 0x40]
cmp ecx, 1
jne 0x100b8a75
test bl, 0x14
je 0x100b8a75
or dword [eax + 0x28], 0x4000
mov edx, dword [esp + 0x10]
test byte [edx + 0x14], 0x30
je 0x100b8a88
mov ecx, 0x800
or word [eax + 0x30], cx
mov edx, dword [esp + 0x10]
mov ebx, dword [edx + 0x14]
inc ebp
mov ecx, ebx
shl ecx, 0x11
sar ecx, 0x1b
cmp ebp, ecx
jl 0x100b8a50
mov ebx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x34]
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 8]
mov dword [edx], eax
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov dword [ecx + 8], eax
test esi, esi
jns 0x100b8717
cmp esi, 0xfffff9bd
je 0x100b8ad2
cmp ebp, 0xffffffff
je 0x100b8af8
push ebp
push edi
call fcn.1003c120
jmp 0x100b8af8
push ebp
push edi
call fcn.1003c120
mov eax, dword [esp + 0x14]
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x108]
pop ebx
xor ecx, esp
call fcn.10117cfd
add esp, 0x108
ret 8
push esi
push dword [esp + 0x20]
call fcn.100c55ec
call fcn.10117992
int3