Function at 0x100b0c00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x4c
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [esi + 8]
mov ebx, edx
or edx, 0xffffffff
mov dword [esp + 0x38], ebx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x30], 0
mov dword [esp + 0x28], edi
test edi, edi
jne 0x100b0c55
cmp dword [esi + 0x78], edi
jne 0x100b0c3f
mov eax, dword [esi]
test byte [eax + 0x44], 8
jne 0x100b0c3f
mov byte [esi + 0x17], 1
call fcn.100c9330
mov edi, eax
or edx, 0xffffffff
mov dword [esp + 0x28], edi
test edi, edi
je 0x100b0eb5
inc dword [esi + 0x3c]
test byte [ebx + 4], 0x20
jne 0x100b0c70
mov edx, 0x14
mov ecx, edi
call fcn.100c8f90
mov edx, eax
mov dword [esp + 0x1c], eax
cmp byte [esi + 0x18f], 2
jne 0x100b0ccb
push dword [esi + 0x1a0]
cmp byte [ebx], 0x31
mov eax, str.SCALAR
mov ecx, str.LIST
cmovne ecx, eax
push ecx
mov ecx, str.CORRELATED
test edx, edx
mov eax, 0x100fb600
cmovs eax, ecx
push eax
push str.EXECUTE__s_s_SUBQUERY__d
push dword [esi]
call fcn.100eaab0
add esp, 0x14
mov edx, 0xa7
push 0xfffffffffffffff9
push eax
push 0
push 0
push dword [esi + 0x19c]
mov ecx, edi
call fcn.100c8bd0
add esp, 0x14
mov cl, byte [ebx]
cmp cl, 0x31
je 0x100b0db7
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x20], eax
cmp cl, 0x77
jne 0x100b0ce8
mov eax, dword [eax]
mov edx, dword [eax]
jmp 0x100b0ced
mov edx, 1
mov eax, dword [esi + 0x2c]
mov dword [esp + 0x50], 0
lea ecx, [eax + 1]
add eax, edx
mov dword [esi + 0x2c], eax
cmp byte [ebx], 0x77
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0
jne 0x100b0d40
lea eax, [ecx - 1]
add eax, edx
push eax
push ecx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], edx
push 0
mov edx, 0x46
mov ecx, edi
mov byte [esp + 0x4c], 0xa
call fcn.100c9000
add esp, 0xc
jmp 0x100b0d57
push ecx
push 0
mov edx, 0x43
mov ecx, edi
mov byte [esp + 0x48], 3
call fcn.100c8eb0
add esp, 8
mov eax, dword [esp + 0x20]
mov edx, dword [eax + 0x38]
test edx, edx
je 0x100b0d69
mov ecx, dword [esi]
call fcn.100b3630
mov ecx, dword [esi]
push 0
push 0x10105f6c
mov edx, 0x86
call fcn.100b3c90
mov ecx, dword [esp + 0x28]
mov edx, ecx
and dword [ecx + 8], 0xfffffbff
mov dword [ecx + 0x38], eax
lea eax, [esp + 0x48]
mov dword [ecx + 0xc], 0
push eax
mov ecx, esi
call fcn.10082b70
add esp, 0xc
test eax, eax
jne 0x100b0eb5
mov eax, dword [esp + 0x44]
mov dword [esp + 0x30], eax
jmp 0x100b1174
mov ecx, dword [ebx + 0xc]
mov dword [esp + 0x2c], ecx
mov al, byte [ecx]
cmp al, 0x96
jne 0x100b0dc7
mov al, byte [ecx + 0x26]
cmp al, 0x97
jne 0x100b0dd2
mov eax, dword [ecx + 0x14]
mov ecx, dword [eax]
jmp 0x100b0de4
cmp al, 0x77
jne 0x100b0ddf
mov eax, dword [ecx + 0x14]
mov eax, dword [eax]
mov ecx, dword [eax]
jmp 0x100b0de4
mov ecx, 1
mov eax, dword [esi + 0x28]
mov dword [ebx + 0x1c], eax
inc dword [esi + 0x28]
mov eax, ecx
mov dword [esp + 0x14], ecx
xor ecx, ecx
cmp dword [ebp + 0xc], ecx
lea edx, [ecx + 0x6c]
cmovne eax, ecx
push eax
push dword [ebx + 0x1c]
mov ecx, edi
call fcn.100c8eb0
add esp, 8
cmp dword [ebp + 0xc], 0
mov dword [esp + 0x3c], eax
je 0x100b0e20
mov dword [esp + 0x18], 0
jmp 0x100b0e34
mov edx, dword [esp + 0x14]
mov ecx, dword [esi]
push 1
call fcn.1008c080
add esp, 4
mov dword [esp + 0x18], eax
test dword [ebx + 4], 0x800
mov eax, dword [ebx + 0x14]
je 0x100b0f59
mov ecx, dword [eax]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x34], ecx
cmp dword [ecx], eax
jne 0x100b111d
mov eax, dword [ebx + 0x1c]
mov edx, ebx
mov ecx, esi
mov byte [esp + 0x40], 0xb
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0
call fcn.100b1240
mov edx, dword [esp + 0x24]
mov dword [esp + 0x50], eax
lea eax, [esp + 0x40]
push eax
mov ecx, esi
mov dword [edx + 0xc], 0
call fcn.10082b70
mov edx, dword [esp + 0x54]
mov ecx, dword [esi]
add esp, 4
test eax, eax
je 0x100b0ebe
call fcn.100ecb90
mov ecx, dword [esp + 0x18]
call fcn.1008c030
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.100ecb90
cmp dword [esp + 0x14], 0
jle 0x100b111d
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x34]
add eax, 0x14
add ebx, 4
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ebx
xor edi, edi
jmp 0x100b0ef0
mov ecx, dword [esp + 0x2c]
mov edx, edi
call fcn.100b4510
test dword [eax + 4], 0x100
mov ebx, dword [ebx]
je 0x100b0f0a
mov edx, eax
jmp 0x100b0f26
test ebx, ebx
je 0x100b0f17
test dword [ebx + 4], 0x100
jne 0x100b0f24
mov edx, eax
mov ecx, esi
call fcn.100b48d0
test eax, eax
jne 0x100b0f2d
mov edx, ebx
mov ecx, esi
call fcn.100b48d0
mov ecx, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
mov dword [ecx], eax
inc edi
add ecx, 4
add ebx, 0x18
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], ebx
cmp edi, dword [esp + 0x14]
jl 0x100b0ef0
mov edi, dword [esp + 0x28]
mov ebx, dword [esp + 0x38]
jmp 0x100b111d
mov dword [esp + 0x38], eax
test eax, eax
je 0x100b111d
mov ecx, dword [esp + 0x2c]
call fcn.100b4b50
movzx ecx, al
test al, al
mov edx, 0x41
cmove ecx, edx
cmp dword [esp + 0x18], 0
mov byte [esp + 0x13], cl
je 0x100b0f97
mov edx, dword [ebx + 0xc]
mov ecx, esi
call fcn.100b48d0
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x14], eax
mov ecx, esi
call fcn.100ac900
mov dword [esp + 0x24], eax
call fcn.100ac900
cmp dword [ebp + 0xc], 0
mov dword [esp + 0x14], eax
je 0x100b0fcc
push 0xffffffffffffffff
push 0x100fb600
push 0
push eax
push 0
mov edx, 0x48
mov ecx, edi
call fcn.100c8bd0
add esp, 0x14
mov edx, dword [esp + 0x38]
add edx, 4
mov eax, dword [edx - 4]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], edx
test eax, eax
jle 0x100b1107
jmp 0x100b0ff0
cmp dword [esp + 0x1c], 0
mov eax, dword [edx]
mov dword [esp + 0x20], eax
jl 0x100b101f
mov ecx, eax
call fcn.100b22f0
test eax, eax
jne 0x100b101b
mov edx, dword [esp + 0x1c]
mov ecx, edi
call fcn.100c8260
mov dword [esp + 0x1c], 0xffffffff
mov eax, dword [esp + 0x20]
cmp dword [ebp + 0xc], 0
je 0x100b1053
lea edx, [esp + 0x38]
mov ecx, eax
call fcn.100b20d0
test eax, eax
je 0x100b1053
push dword [esp + 0x38]
mov edx, 0x75
push dword [esp + 0x18]
mov ecx, edi
push dword [ebx + 0x1c]
call fcn.100c9000
add esp, 0xc
jmp 0x100b10eb
push dword [esp + 0x24]
mov edx, dword [esp + 0x24]
mov ecx, esi
call fcn.100ae140
add esp, 4
cmp dword [ebp + 0xc], 0
mov dword [esp + 0x20], eax
je 0x100b10a2
mov ecx, dword [edi + 0x88]
add ecx, 2
push ecx
push eax
mov edx, 0x11
mov ecx, edi
call fcn.100c8eb0
push dword [esp + 0x28]
mov edx, 0x74
push dword [esp + 0x20]
mov ecx, edi
push dword [ebx + 0x1c]
call fcn.100c9000
add esp, 0x14
jmp 0x100b10eb
push 1
lea ecx, [esp + 0x17]
push ecx
push dword [esp + 0x1c]
mov edx, 0x63
push 1
push eax
mov ecx, edi
call fcn.100c8bd0
mov edx, dword [esp + 0x34]
add esp, 0x14
mov ecx, esi
push 1
call fcn.100af590
add esp, 4
mov edx, 0x7f
push 1
push dword [esp + 0x24]
mov ecx, edi
push dword [esp + 0x1c]
push dword [ebx + 0x1c]
call fcn.100c8a80
add esp, 0x10
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
dec ecx
add edx, 0x18
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x28], edx
test ecx, ecx
jg 0x100b0ff0
mov edx, dword [esp + 0x24]
mov ecx, esi
call fcn.100ac8b0
mov edx, dword [esp + 0x14]
mov ecx, esi
call fcn.100ac8b0
mov edx, dword [esp + 0x18]
test edx, edx
je 0x100b1174
mov ecx, dword [edi]
cmp byte [ecx + 0x49], 0
je 0x100b113d
push edx
mov edx, 0xfffffff7
call fcn.100c8350
add esp, 4
jmp 0x100b1174
mov eax, dword [esp + 0x3c]
test eax, eax
jns 0x100b114c
mov eax, dword [edi + 0x88]
dec eax
lea ecx, [eax + eax*4]
mov eax, dword [edi + 0x58]
cmp byte [eax + ecx*4 + 1], 0
lea eax, [eax + ecx*4]
je 0x100b116d
push 0xfffffffffffffff7
push edx
mov edx, eax
mov ecx, edi
call fcn.100c8130
add esp, 8
jmp 0x100b1174
mov dword [eax + 0x10], edx
mov byte [eax + 1], 0xf7
mov eax, dword [ebp + 8]
test eax, eax
je 0x100b1189
mov edx, dword [ebx + 0x1c]
push eax
mov ecx, edi
call fcn.100b1d10
add esp, 4
mov ecx, dword [esp + 0x1c]
test ecx, ecx
js 0x100b11c6
mov eax, dword [edi]
mov ebx, dword [edi + 0x88]
cmp byte [eax + 0x49], 0
je 0x100b11b9
mov eax, 0x1012875c
mov ecx, esi
mov dword [eax + 8], ebx
call fcn.100af500
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea edx, [ecx + ecx*4]
mov ecx, dword [edi + 0x58]
mov dword [ecx + edx*4 + 8], ebx
lea eax, [ecx + edx*4]
mov ecx, esi
call fcn.100af500
mov eax, dword [esp + 0x30]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret