Function at 0x100b7bcd
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x108
mov eax, dword [0x1013567c]
xor eax, esp
mov dword [esp + 0x104], eax
mov eax, dword [esp + 0x10c]
push ebx
mov ebx, dword [esp + 0x114]
mov dword [esp + 0x10], eax
mov dword [esp + 0x20], ebx
mov ecx, dword [ebx + 0xec]
test ecx, ecx
je 0x100b7c09
mov eax, ecx
jmp 0x100b80bf
push ebp
push esi
push edi
mov edi, dword [eax + 0x48]
lea ecx, [esp + 0x14]
push ecx
xor ebp, ebp
push ebp
push 0xc
push eax
call fcn.100c9f55
mov esi, eax
test esi, esi
js 0x100b80d7
mov eax, dword [esp + 0x14]
mov dword [ebx + 0xec], eax
mov dword [eax + 8], ebp
test byte [ebx + 0xdc], 8
mov ebp, dword [ebx + 0xe0]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x30], ebp
je 0x100b7c63
mov dword [eax], 0x64
mov eax, dword [esp + 0x14]
mov dword [eax + 4], 1
jmp 0x100b80b8
push eax
add eax, 4
push eax
push ebx
push dword [esp + 0x28]
call fcn.100b782d
mov esi, eax
test esi, esi
js 0x100b80d7
mov eax, dword [ebx + 0xe4]
push 1
cmp eax, 0xffffffff
je 0x100b7c9c
push 0x3c
lea ecx, [esp + 0x5c]
push ecx
xor ecx, ecx
push ecx
push eax
push edi
call fcn.1003c570
jmp 0x100b7cc1
lea eax, [esp + 0x58]
mov dword [esp + 0x48], 0x3c
mov dword [esp + 0x54], eax
xor ecx, ecx
lea eax, [esp + 0x48]
push eax
push ecx
push dword [ebx + 0xc8]
push ebp
push edi
call fcn.1003b710
mov esi, eax
test esi, esi
jns 0x100b7cd8
cmp esi, 0xfffffae0
je 0x100b80b8
jmp 0x100b80d7
mov ebp, dword [esp + 0x58]
xor eax, eax
push eax
push Ordinal_2
push ebp
push edi
mov dword [esp + 0x44], ebp
call fcn.1003c7d0
mov esi, eax
jmp 0x100b8093
lea eax, [esp + 0x10]
push eax
push 1
push 0x68
push dword [esp + 0x28]
call fcn.100ca00c
mov esi, eax
test esi, esi
js 0x100b80a3
xor eax, eax
push eax
push eax
lea eax, [esp + 0x20]
push eax
push 0x82
lea eax, [esp + 0xa0]
push eax
push dword [esp + 0x74]
push ebp
push edi
call fcn.1003cb60
mov esi, eax
test esi, esi
js 0x100b80a3
mov eax, dword [esp + 0x18]
and eax, 0xfffffffe
cmp eax, 0x82
jae 0x100b80e1
xor ecx, ecx
xor esi, esi
mov word [esp + eax + 0x90], cx
lea ecx, [esp + 0x90]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, si
jne 0x100b7d65
mov eax, dword [esp + 0x10]
sub ecx, edx
sar ecx, 1
add eax, 4
push eax
push esi
lea eax, [ecx*2 + 2]
push eax
push dword [esp + 0x28]
call fcn.100c9f55
mov esi, eax
test esi, esi
js 0x100b80a3
lea ecx, [esp + 0x90]
xor esi, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, si
jne 0x100b7da4
sub ecx, edx
lea eax, [esp + 0x90]
sar ecx, 1
push eax
lea eax, [ecx + 1]
push eax
mov eax, dword [esp + 0x18]
push dword [eax + 4]
call fcn.10062b10
push esi
push esi
lea eax, [esp + 0x20]
push eax
mov eax, dword [esp + 0x1c]
push 4
add eax, 8
push eax
push dword [esp + 0x80]
push ebp
push edi
call fcn.1003cb60
mov esi, eax
test esi, esi
js 0x100b80a3
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
mov ecx, dword [edx + 8]
test ecx, ecx
je 0x100b7e07
cmp ecx, dword [eax]
jbe 0x100b7e0c
mov eax, dword [eax]
mov dword [edx + 8], eax
cmp dword [ebx + 0xc0], 2
jne 0x100b7e82
mov esi, dword [esp + 0x30]
push esi
call fcn.100ed982
test eax, eax
jne 0x100b7e82
push 2
lea eax, [esp + 0x28]
mov dword [esp + 0x48], 4
mov dword [esp + 0x54], eax
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x98]
push eax
push dword [ebx + 0xc8]
push esi
push edi
call fcn.1003b710
mov esi, eax
test esi, esi
js 0x100b80a3
mov ecx, dword [esp + 0x10]
lea eax, [ecx + 0x10]
push eax
lea eax, [ecx + 0xc]
push eax
push dword [esp + 0x2c]
push edi
call fcn.100edc42
push dword [esp + 0x24]
mov esi, eax
push edi
call fcn.1003bdc0
or dword [esp + 0x24], 0xffffffff
jmp 0x100b7ecd
xor eax, eax
push eax
push eax
lea eax, [esp + 0x20]
push eax
mov eax, dword [esp + 0x1c]
push 4
add eax, 0x10
push eax
push dword [esp + 0x7c]
push ebp
push edi
call fcn.1003cb60
mov esi, eax
test esi, esi
js 0x100b80a3
xor eax, eax
push eax
push eax
lea eax, [esp + 0x20]
push eax
mov eax, dword [esp + 0x1c]
push 4
add eax, 0xc
push eax
push dword [esp + 0x84]
push ebp
push edi
call fcn.1003cb60
mov esi, eax
test esi, esi
js 0x100b80a3
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + 0x10]
test eax, eax
je 0x100b7ee5
cmp eax, dword [ecx + 8]
jbe 0x100b7ef3
mov eax, dword [ecx + 8]
shr eax, 2
inc eax
mov dword [ecx + 0x10], eax
mov ecx, dword [esp + 0x10]
xor edx, edx
cmp dword [ecx + 0xc], edx
jne 0x100b7f08
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 4]
shr eax, 4
inc eax
mov dword [ecx + 0xc], eax
push edx
push edx
lea eax, [esp + 0x20]
push eax
push 4
lea eax, [esp + 0x30]
push eax
push dword [esp + 0x78]
push ebp
push edi
call fcn.1003cb60
mov esi, eax
test esi, esi
js 0x100b80a3
mov ecx, dword [esp + 0x10]
push 0
mov eax, dword [ecx + 0x14]
and eax, 0xfffffffe
or eax, 2
mov dword [ecx + 0x14], eax
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x24]
shl eax, 2
xor eax, dword [ecx + 0x14]
and eax, 4
xor dword [ecx + 0x14], eax
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x24]
shr eax, 4
shl eax, 3
xor eax, dword [ecx + 0x14]
and eax, 8
xor dword [ecx + 0x14], eax
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x24]
shr eax, 1
shl eax, 4
xor eax, dword [ecx + 0x14]
and eax, 0x10
xor dword [ecx + 0x14], eax
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x24]
shr eax, 2
shl eax, 5
xor eax, dword [ecx + 0x14]
and eax, 0x20
xor dword [ecx + 0x14], eax
test byte [esp + 0x24], 0x28
mov ecx, dword [esp + 0x14]
pop eax
setne al
shl eax, 6
xor eax, dword [ecx + 0x14]
and eax, 0x40
xor dword [ecx + 0x14], eax
mov ecx, dword [esp + 0x10]
test byte [ecx + 0x14], 4
jne 0x100b7fc0
mov eax, dword [ecx + 0x10]
cmp eax, dword [ecx + 8]
jbe 0x100b7fca
mov eax, dword [ecx + 8]
mov dword [ecx + 0x10], eax
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x5c]
push eax
push ebp
push edi
push ebx
push ecx
push dword [esp + 0x38]
call fcn.100b75dd
cmp dword [esp + 0x28], 0
mov esi, eax
je 0x100b7ffa
mov eax, dword [esp + 0x10]
or dword [eax + 0x14], 0x80
cmp dword [esp + 0x3c], 0
jne 0x100b8093
mov edx, dword [esp + 0x10]
mov eax, dword [edx + 0x14]
test al, 0x34
je 0x100b807f
mov ecx, dword [ebx + 4]
mov dword [esp + 0x40], ecx
xor ecx, ecx
mov dword [esp + 0x38], ecx
mov ecx, eax
shl ecx, 0x11
sar ecx, 0x1b
test ecx, ecx
jle 0x100b807f
mov ebp, dword [esp + 0x38]
mov ebx, eax
mov eax, dword [edx + 0x18]
shl eax, 0x10
sar eax, 0x12
imul eax, eax, 0x34
add eax, dword [esp + 0x40]
cmp ecx, 1
jne 0x100b8054
test bl, 0x14
je 0x100b8054
or dword [eax + 0x28], 0x4000
mov edx, dword [esp + 0x10]
test byte [edx + 0x14], 0x30
je 0x100b8067
mov ecx, 0x800
or word [eax + 0x30], cx
mov edx, dword [esp + 0x10]
mov ebx, dword [edx + 0x14]
inc ebp
mov ecx, ebx
shl ecx, 0x11
sar ecx, 0x1b
cmp ebp, ecx
jl 0x100b802f
mov ebx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x34]
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 8]
mov dword [edx], eax
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov dword [ecx + 8], eax
test esi, esi
jns 0x100b7cf6
cmp esi, 0xfffff9bd
je 0x100b80b1
cmp ebp, 0xffffffff
je 0x100b80d7
push ebp
push edi
call fcn.1003bdc0
jmp 0x100b80d7
push ebp
push edi
call fcn.1003bdc0
mov eax, dword [esp + 0x14]
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x108]
pop ebx
xor ecx, esp
call fcn.1011720d
add esp, 0x108
ret 8
push esi
push dword [esp + 0x20]
call fcn.100c4b3b
call fcn.10116ea2
int3