Function at 0x1003f3b0
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x10
mov eax, dword [esp + 0x14]
push ebx
push ebp
push esi
push edi
mov edi, dword [eax]
movzx eax, byte [edi + 0x4c]
sub eax, 7
mov ecx, dword [edi + 0x10]
mov ebp, dword [ecx]
mov esi, dword [edi + 0x3c]
mov byte [esp + 0x13], 0
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], ebp
je 0x1003f653
dec eax
jne 0x1003f620
cmp word [esi + 2], 0
jbe 0x1003f4fd
mov eax, dword [esi + 8]
xor edx, edx
mov dx, word [esi]
push edx
push eax
push edi
call fcn.1003e5b0
add esp, 0xc
cmp ax, word [ebp + 2]
jb 0x1003f434
mov edx, dword [esi + 8]
xor ecx, ecx
mov cx, word [esi]
xor eax, eax
mov ax, word [esi + 4]
push ecx
push edx
push eax
push 0xffffff73
push edi
call fcn.1004f5c0
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4
mov edx, dword [ebp + 4]
movzx ecx, ax
mov ebx, dword [edx + ecx*4]
cmp word [ebx + 0x24], 0
mov dword [esp + 0x14], 0
jbe 0x1003f490
lea esp, [esp]
movzx eax, word [esp + 0x14]
mov ecx, dword [ebx + 0x18]
mov eax, dword [ecx + eax*4]
mov ecx, dword [esi + 0xc]
xor edx, edx
mov dx, word [esi + 2]
mov dword [esp + 0x24], eax
mov eax, dword [eax + 0x10]
add eax, 2
push edx
xor edx, edx
mov dx, word [eax - 2]
push ecx
push edx
push eax
call fcn.100518e0
test al, al
jne 0x1003f4cd
mov eax, dword [esp + 0x14]
inc eax
cmp ax, word [ebx + 0x24]
mov dword [esp + 0x14], eax
jb 0x1003f450
mov eax, dword [edi + 0x34]
test eax, eax
jne 0x1003f5fd
mov ax, word [esi + 2]
xor edx, edx
test ax, ax
jbe 0x1003f5d5
mov dx, word [esi + 6]
mov ecx, dword [esi + 0xc]
push eax
push ecx
push edx
push 0xffffff49
push edi
call fcn.1004f5c0
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4
push 0x14
call fcn.1005ad30
add esp, 4
test eax, eax
mov dword [edi + 0x34], eax
je 0x1003f625
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov edx, dword [edi + 0x34]
mov eax, dword [esp + 0x24]
mov dword [edx], eax
jmp 0x1003f490
xor eax, eax
cmp word [ebp + 2], ax
mov byte [esp + 0x24], 0
mov dword [esp + 0x14], eax
jbe 0x1003f490
mov edi, edi
mov edx, dword [ebp + 4]
movzx ecx, ax
mov edi, dword [edx + ecx*4]
xor ebx, ebx
cmp word [edi + 0x24], bx
jbe 0x1003f592
mov ecx, dword [edi + 0x18]
xor edx, edx
mov dx, word [esi]
movzx eax, bx
mov ebp, dword [ecx + eax*4]
mov eax, dword [ebp + 0x10]
mov ecx, dword [esi + 8]
push edx
xor edx, edx
mov dx, word [eax]
push ecx
add eax, 2
push edx
push eax
call fcn.100518e0
test al, al
jne 0x1003f553
inc ebx
cmp bx, word [edi + 0x24]
jb 0x1003f521
jmp 0x1003f58e
mov al, byte [esp + 0x24]
test al, al
jne 0x1003f5ae
push 0x14
call fcn.1005ad30
mov ecx, dword [esp + 0x1c]
add esp, 4
test eax, eax
mov dword [ecx + 0x34], eax
je 0x1003f625
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], edx
mov eax, dword [ecx + 0x34]
mov dword [eax], ebp
mov byte [esp + 0x24], 1
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
inc eax
cmp ax, word [ebp + 2]
mov dword [esp + 0x14], eax
jb 0x1003f510
mov edi, dword [esp + 0x18]
jmp 0x1003f490
mov ecx, dword [ebp + 0x10]
mov eax, dword [esp + 0x18]
xor edx, edx
mov dx, word [esi]
push ecx
push edx
push 0xfffffd5a
push eax
call fcn.1004f600
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4
mov dx, word [esi + 4]
mov ecx, dword [esi + 8]
xor eax, eax
mov ax, word [esi]
push eax
push ecx
push edx
push 0xffffff49
push edi
call fcn.1004f5c0
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4
mov ecx, dword [eax]
movzx eax, word [ecx]
mov edx, dword [ebp + 4]
mov eax, dword [edx + eax*4]
mov eax, dword [eax + 0x20]
test eax, eax
je 0x1003f620
mov cx, word [ecx + 2]
cmp word [eax + 0x22], cx
je 0x1003f633
mov eax, dword [eax + 0x24]
test eax, eax
jne 0x1003f613
mov byte [esp + 0x13], 1
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4
xor eax, eax
mov ax, word [esi + 4]
push eax
push 0xffffff7a
push edi
call fcn.1004f970
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4
mov edx, dword [esi + 8]
xor ecx, ecx
mov cx, word [esi]
push ecx
push edx
push edi
call fcn.1003e5b0
add esp, 0xc
cmp ax, word [ebp + 2]
jb 0x1003f696
mov ecx, dword [esi + 8]
xor eax, eax
mov ax, word [esi]
xor edx, edx
mov dx, word [esi + 4]
push eax
push ecx
push edx
push 0xffffff73
push edi
call fcn.1004f5c0
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4
mov ecx, dword [ebp + 4]
movzx eax, ax
mov ebx, dword [ecx + eax*4]
push 4
call fcn.1005ad30
add esp, 4
test eax, eax
mov dword [edi + 0x28], eax
je 0x1003f625
mov dword [eax], ebx
mov eax, dword [ebx + 0x34]
test eax, eax
je 0x1003f6e0
mov edx, dword [ebx]
xor eax, eax
mov ax, word [esi + 4]
push edx
push eax
push 0xfffffee7
push edi
call fcn.1004f600
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x1003f620
xor ecx, ecx
mov cx, word [esi + 4]
push ecx
push 0xffffff7a
push edi
call fcn.1004f970
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4