Function at 0x10004f41
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x28
mov eax, dword [0x100b8230]
mov ecx, dword [0x100b8238]
push ebx
mov ebx, dword [0x100b8224]
push ebp
push esi
mov esi, eax
imul esi, ebx
imul esi, ecx
shl esi, 2
push edi
mov edi, dword [0x100b8228]
push 4
pop edx
sub edx, esi
mov esi, dword [esp + 0x3c]
mov esi, dword [esi]
mov dword [esp + 0x14], esi
xor esi, esi
inc esi
sub esi, eax
sub esi, edi
imul esi, ecx
mov dword [esp + 0x1c], edx
mov ebp, dword [0x100b822c]
mov ecx, esi
mov esi, dword [0x100b8234]
imul edx, esi
imul edx, esi
add edx, 4
imul edx, ebp
sub ecx, esi
add ecx, ebx
add ecx, edi
lea ecx, [edx + ecx*4]
mov edx, dword [esp + 0x14]
imul ecx, ecx, 0xf8
movzx ecx, word [ecx + edx + 0x14]
xor edx, edx
inc edx
sub edx, eax
sub edx, edi
imul edx, dword [0x100b8238]
mov eax, edi
imul eax, eax, 0xb
add edx, ebp
add eax, edx
add eax, ebx
mov edx, eax
mov eax, dword [esp + 0x1c]
imul eax, ebp
add ecx, dword [esp + 0x14]
imul eax, esi
add eax, 0x24
imul eax, esi
lea ecx, [ecx + edx*4 + 0x18]
add eax, ecx
test byte [0x100bc098], 1
mov dword [esp + 0x10], eax
jne 0x1000502a
mov eax, dword [0x100b8238]
or dword [0x100bc098], 1
imul eax, eax, 3
mov ecx, ebx
sub ecx, eax
mov eax, edi
imul eax, esi
add ecx, edi
lea eax, [eax + eax - 4]
add ecx, esi
imul eax, dword [0x100b8230]
lea eax, [eax + ecx*2]
mov dword [0x100bc094], eax
mov eax, dword [0x100b8230]
add eax, esi
imul eax, esi
xor ecx, ecx
inc ecx
sub ecx, eax
mov eax, dword [0x100bc094]
sub ecx, edi
imul ecx, dword [0x100b8238]
mov edx, dword [esp + 0x3c]
add ecx, edi
lea eax, [eax + ecx*4]
mov ecx, dword [esp + 0x10]
or eax, dword [ecx + 8]
mov ecx, edi
sub ecx, esi
imul ecx, ecx, 5
add ecx, dword [edx + 0x3c]
mov dword [esp + 0x24], eax
push ecx
push eax
call fcn.1000423e
mov dword [esp + 0x30], eax
mov eax, ebp
imul eax, ebp
imul eax, dword [0x100b8230]
mov ebp, dword [0x100b8238]
imul eax, ebx
imul eax, ebx
push dword [esp + 0x44]
imul eax, esi
mov ecx, ebp
sub ecx, eax
imul ecx, ecx, 0x28
add ecx, dword [esp + 0x1c]
call fcn.10004a8c
lea edx, [esi + 1]
lea ecx, [ebx + ebp]
imul ecx, edx
sub ecx, dword [0x100b8230]
mov edx, dword [esp + 0x20]
sub eax, edi
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x24]
and dword [esp + 0x40], 0
add dword [esp + 0x1c], 0x28
mov dword [esp + 0x3c], eax
movzx edx, word [edx + 6]
xor eax, eax
add ecx, edi
inc eax
lea ecx, [edx + ecx*2]
add esp, 0xc
cmp ecx, eax
mov dword [esp + 0x18], eax
jle 0x1000533a
mov ebp, ebx
imul ebp, ebx
mov eax, ebp
imul eax, ebx
imul eax, ebx
mov ecx, dword [0x100b8230]
imul eax, edi
mov edx, dword [0x100b8238]
imul eax, edi
sub eax, ecx
imul edx, edx, 3
imul eax, dword [0x100b822c]
lea eax, [eax + edi*2]
sub eax, edx
mov edx, dword [0x100bc094]
lea eax, [edx + eax*4]
lea edx, [esi + 1]
imul edx, edi
add edx, ecx
mov ecx, dword [esp + 0x10]
imul edx, edx, 3
add edx, dword [ecx + 8]
mov ecx, dword [esp + 0x3c]
push dword [ecx + 0x3c]
or eax, edx
push eax
mov dword [esp + 0x28], eax
call fcn.1000423e
imul ebp, edi
mov dword [esp + 0x1c], eax
mov eax, dword [0x100b8238]
imul ebp, eax
imul ebp, esi
imul ebp, esi
xor ecx, ecx
imul ebp, ebp, 3
inc ecx
sub ecx, dword [0x100b8230]
lea edx, [eax - 2]
imul ecx, esi
imul edx, eax
mov eax, dword [0x100b822c]
add ecx, edx
add ebp, 3
imul ebp, eax
push dword [esp + 0x44]
imul ebp, eax
lea edx, [edi + edi]
sub ecx, edx
add ecx, ebx
imul ecx, ecx, 3
add ecx, ebp
imul ecx, ecx, 0x28
add ecx, dword [esp + 0x1c]
call fcn.10004a8c
add eax, dword [0x100b8238]
mov ecx, dword [esp + 0x20]
lea eax, [eax + ebx*2]
add eax, esi
add esp, 0xc
cmp dword [esp + 0x28], ecx
mov dword [esp + 0x1c], eax
mov eax, dword [0x100b822c]
je 0x1000525c
mov edx, eax
imul edx, ebx
xor ebp, ebp
inc ebp
sub ebp, edx
imul ebp, edi
mov edx, eax
sub edx, ebx
imul edx, esi
add ebp, edx
mov edx, dword [0x100b8230]
add edx, edx
sub ebp, edx
mov edx, dword [esp + 0x24]
imul ebp, ebp, 5
add ebp, ecx
mov ecx, dword [esp + 0x2c]
add ecx, edx
cmp ecx, ebp
ja 0x1000525c
imul ebx, ebx, 0x3c
sub ebx, 0x3c
imul ebx, eax
lea eax, [esp + ebx + 0x24]
push eax
push dword [esp + 0x40]
call fcn.10004bd4
test eax, eax
pop ecx
pop ecx
je 0x1000535c
mov eax, dword [esp + 0x20]
mov edi, dword [0x100b8228]
mov esi, dword [0x100b8234]
mov ebx, dword [0x100b8224]
mov edx, dword [0x100b8238]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x28], eax
mov eax, dword [0x100b8230]
sub eax, edi
add eax, dword [esp + 0x1c]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x24]
mov dword [esp + 0x30], eax
jmp 0x10005306
mov ecx, dword [0x100b8230]
mov edx, dword [esp + 0x10]
mov edx, dword [edx + 0x24]
mov dword [esp + 0x14], edx
mov edx, ecx
imul edx, ebx
inc edx
imul edx, eax
push 2
pop ebp
sub ebp, edx
mov edx, ecx
shl ebp, 2
shl edx, 2
sub ebp, edx
imul ebp, edi
mov edx, 0x400000
sub edx, ecx
lea ecx, [eax + edx*2]
mov edx, dword [0x100b8238]
add ecx, esi
lea ecx, [ebp + ecx*4]
lea ebp, [eax*4 - 8]
imul ebp, edx
add ecx, ebp
test dword [esp + 0x14], ecx
je 0x100052cf
mov ecx, eax
imul ecx, edx
imul ecx, ecx, 3
mov ebp, 0x2000000
sub ebp, ecx
test dword [esp + 0x30], ebp
je 0x100052cf
mov ecx, dword [esp + 0x14]
or dword [esp + 0x30], ecx
jmp 0x100052e9
mov ecx, esi
imul ecx, ecx, 5
mov ebp, 0xfdffffff
sub ebp, ecx
mov ecx, dword [esp + 0x14]
or ecx, dword [esp + 0x30]
and ebp, ecx
mov dword [esp + 0x30], ebp
mov ecx, ebx
imul ecx, edx
sub ecx, esi
sub ecx, dword [esp + 0x24]
add ecx, eax
add ecx, eax
add ecx, edx
add ecx, dword [esp + 0x1c]
add ecx, dword [esp + 0x20]
mov dword [esp + 0x2c], ecx
inc dword [esp + 0x18]
add dword [esp + 0x10], 0x28
lea ecx, [esi + 1]
lea eax, [ebx + edx]
imul eax, ecx
mov ecx, dword [esp + 0x3c]
sub eax, dword [0x100b8230]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 6]
add eax, edi
lea eax, [ecx + eax*2]
cmp dword [esp + 0x18], eax
jl 0x100050e8
xor eax, eax
inc eax
mov dword [esp + 0x34], eax
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x40]
call fcn.10004bd4
neg eax
pop ecx
sbb eax, eax
pop ecx
neg eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x28
ret
xor eax, eax
jmp 0x10005354