Function at 0x101c9860
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x2c
push ebx
push ebp
push esi
mov esi, dword [esp + 0x40]
xor ebp, ebp
mov dword [esp + 0x20], ebp
mov bl, byte [esi + 8]
test bl, 1
jne 0x101c9d7f
test bl, 2
je 0x101c9d7f
push edi
mov edi, dword [esp + 0x40]
mov eax, 0x8000
movzx edx, word [edi + 0x24c]
movzx ecx, word [edi + 0x24a]
sub eax, edx
sub eax, ecx
mov dword [esp + 0x1c], ecx
movzx ecx, bl
shr ecx, 2
and ecx, 1
mov dword [esp + 0x18], edx
cmp byte [esi + 9], 8
mov edx, dword [esi]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x28], ecx
jne 0x101c9a60
cmp dword [edi + 0x194], ebp
je 0x101c999e
cmp dword [edi + 0x198], ebp
je 0x101c999e
mov esi, dword [esp + 0x48]
mov edx, esi
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x20], edx
test ebx, ebx
je 0x101c9d3b
mov dword [esp + 0x24], ebx
nop dword [eax]
mov bl, byte [esi]
mov bh, byte [esi + 1]
mov al, byte [esi + 2]
add esi, 3
cmp bl, bh
jne 0x101c9925
cmp bl, al
jne 0x101c9925
mov ecx, dword [edi + 0x18c]
test ecx, ecx
je 0x101c996c
movzx eax, bl
mov bl, byte [eax + ecx]
jmp 0x101c996c
mov ecx, dword [edi + 0x198]
or ebp, 1
movzx eax, al
movzx edx, byte [eax + ecx]
imul edx, dword [esp + 0x14]
movzx eax, bh
movzx eax, byte [eax + ecx]
imul eax, dword [esp + 0x18]
add edx, eax
movzx eax, bl
add edx, 0x4000
movzx ecx, byte [eax + ecx]
imul ecx, dword [esp + 0x1c]
mov eax, dword [edi + 0x194]
add ecx, edx
mov edx, dword [esp + 0x20]
shr ecx, 0xf
mov bl, byte [ecx + eax]
cmp dword [esp + 0x28], 0
lea ecx, [edx + 1]
mov byte [edx], bl
mov edx, ecx
mov dword [esp + 0x20], edx
je 0x101c998a
mov al, byte [esi]
lea edx, [ecx + 1]
mov byte [ecx], al
inc esi
mov dword [esp + 0x20], edx
sub dword [esp + 0x24], 1
jne 0x101c9900
mov edx, dword [esp + 0x10]
jmp 0x101c9d3d
mov ebx, dword [esp + 0x10]
mov edx, dword [esp + 0x48]
mov esi, edx
test ebx, ebx
je 0x101c9d3b
mov edi, dword [esp + 0x1c]
test ecx, ecx
je 0x101c9a12
mov dword [esp + 0x24], ebx
nop dword [eax]
mov bl, byte [edx]
mov bh, byte [edx + 1]
mov cl, byte [edx + 2]
cmp bl, bh
jne 0x101c99d0
cmp bl, cl
je 0x101c99f0
movzx ecx, cl
or ebp, 1
imul ecx, eax
movzx eax, bh
imul eax, dword [esp + 0x18]
add ecx, eax
movzx eax, bl
imul eax, edi
add ecx, eax
shr ecx, 0xf
mov bl, cl
mov byte [esi], bl
mov al, byte [edx + 3]
add edx, 4
mov byte [esi + 1], al
add esi, 2
sub dword [esp + 0x24], 1
mov eax, dword [esp + 0x14]
jne 0x101c99c0
mov edx, dword [esp + 0x10]
jmp 0x101c9d3d
mov dword [esp + 0x24], ebx
mov bl, byte [edx]
lea edx, [edx + 3]
mov bh, byte [edx - 2]
mov cl, byte [edx - 1]
cmp bl, bh
jne 0x101c9a29
cmp bl, cl
je 0x101c9a4d
movzx ecx, cl
or ebp, 1
imul ecx, eax
movzx eax, bh
imul eax, dword [esp + 0x18]
add ecx, eax
movzx eax, bl
imul eax, edi
add ecx, eax
mov eax, dword [esp + 0x14]
shr ecx, 0xf
mov bl, cl
mov byte [esi], bl
inc esi
sub dword [esp + 0x24], 1
jne 0x101c9a16
mov edx, dword [esp + 0x10]
jmp 0x101c9d3d
mov eax, dword [edi + 0x1a0]
mov dword [esp + 0x30], eax
test eax, eax
je 0x101c9bdd
mov eax, dword [edi + 0x19c]
mov dword [esp + 0x38], eax
test eax, eax
je 0x101c9bdd
mov esi, dword [esp + 0x48]
mov edi, esi
test edx, edx
je 0x101c9d3d
mov dword [esp + 0x20], edx
movzx edx, byte [esi]
movzx eax, byte [esi + 1]
mov cl, byte [esi + 5]
shl dx, 8
or dx, ax
movzx eax, byte [esi + 3]
movzx ebx, dx
movzx edx, byte [esi + 2]
shl dx, 8
or dx, ax
mov dword [esp + 0x34], ebx
movzx eax, dx
mov dword [esp + 0x2c], eax
mov al, byte [esi + 4]
add esi, 6
movzx edx, al
shl dx, 8
movzx eax, cl
or dx, ax
movzx eax, dx
mov edx, dword [esp + 0x2c]
cmp bx, dx
jne 0x101c9b1c
cmp bx, ax
jne 0x101c9b1c
mov ecx, dword [esp + 0x40]
mov eax, dword [ecx + 0x190]
mov dword [esp + 0x2c], eax
test eax, eax
je 0x101c9b14
mov cl, byte [ecx + 0x184]
movzx edx, bx
movzx eax, dl
shr eax, cl
mov ecx, dword [esp + 0x2c]
shr edx, 8
jmp 0x101c9b9c
movzx ecx, bx
jmp 0x101c9ba3
mov ebp, dword [esp + 0x30]
mov ebx, eax
mov eax, dword [esp + 0x40]
movzx edx, dx
movzx ecx, word [eax + 0x184]
movzx eax, dl
shr eax, cl
shr edx, 8
mov eax, dword [ebp + eax*4]
movzx edx, word [eax + edx*2]
imul edx, dword [esp + 0x18]
movzx eax, bl
shr eax, cl
shr ebx, 8
mov eax, dword [ebp + eax*4]
movzx eax, word [eax + ebx*2]
imul eax, dword [esp + 0x14]
add edx, eax
mov eax, dword [esp + 0x34]
movzx ebx, ax
movzx eax, bl
shr eax, cl
shr ebx, 8
mov eax, dword [ebp + eax*4]
mov ebp, dword [esp + 0x24]
movzx eax, word [eax + ebx*2]
imul eax, dword [esp + 0x1c]
add eax, 0x4000
add eax, edx
shr eax, 0xf
movzx edx, ax
movzx eax, dl
shr eax, cl
mov ecx, dword [esp + 0x38]
shr edx, 8
or ebp, 1
mov dword [esp + 0x24], ebp
mov eax, dword [ecx + eax*4]
movzx ecx, word [eax + edx*2]
mov eax, ecx
shr eax, 8
mov byte [edi], al
mov byte [edi + 1], cl
add edi, 2
cmp dword [esp + 0x28], 0
je 0x101c9bc9
movzx eax, byte [esi]
mov byte [edi], al
movzx eax, byte [esi + 1]
mov byte [edi + 1], al
add edi, 2
add esi, 2
sub dword [esp + 0x20], 1
jne 0x101c9a96
mov edx, dword [esp + 0x10]
jmp 0x101c9d3d
mov eax, dword [esp + 0x48]
mov edi, eax
test edx, edx
je 0x101c9d3d
test ecx, ecx
je 0x101c9ca2
mov dword [esp + 0x28], edx
nop word [eax + eax]
movzx esi, byte [eax]
movzx ecx, byte [eax + 1]
shl si, 8
or si, cx
movzx ecx, byte [eax + 3]
movzx ebx, si
movzx esi, byte [eax + 2]
shl si, 8
or si, cx
movzx ecx, si
movzx esi, byte [eax + 4]
mov dword [esp + 0x38], ecx
movzx ecx, byte [eax + 5]
shl si, 8
or si, cx
movzx ecx, si
mov esi, dword [esp + 0x38]
cmp bx, si
jne 0x101c9c47
cmp bx, cx
je 0x101c9c4a
or ebp, 1
mov edx, ecx
movzx ecx, si
imul ecx, dword [esp + 0x18]
imul edx, dword [esp + 0x14]
add edx, ecx
mov ecx, ebx
imul ecx, dword [esp + 0x1c]
add edx, 0x4000
add ecx, edx
shr ecx, 0xf
movzx edx, cx
mov ecx, edx
shr ecx, 8
mov byte [edi], cl
mov byte [edi + 1], dl
movzx ecx, byte [eax + 6]
mov byte [edi + 2], cl
movzx ecx, byte [eax + 7]
add eax, 8
mov byte [edi + 3], cl
add edi, 4
sub dword [esp + 0x28], 1
jne 0x101c9c00
mov edx, dword [esp + 0x10]
jmp 0x101c9d3d
mov dword [esp + 0x28], edx
movzx esi, byte [eax]
lea eax, [eax + 6]
movzx ecx, byte [eax - 5]
mov dl, byte [eax - 1]
shl si, 8
or si, cx
movzx ecx, byte [eax - 3]
movzx ebx, si
movzx esi, byte [eax - 4]
shl si, 8
or si, cx
movzx ecx, si
mov dword [esp + 0x38], ecx
mov cl, byte [eax - 2]
movzx esi, cl
shl si, 8
movzx ecx, dl
or si, cx
movzx ecx, si
mov esi, dword [esp + 0x38]
cmp bx, si
jne 0x101c9cf4
cmp bx, cx
je 0x101c9cf7
or ebp, 1
mov edx, ecx
movzx ecx, si
imul ecx, dword [esp + 0x18]
imul edx, dword [esp + 0x14]
add edx, ecx
mov ecx, ebx
imul ecx, dword [esp + 0x1c]
add edx, 0x4000
add ecx, edx
shr ecx, 0xf
movzx edx, cx
mov ecx, edx
shr ecx, 8
mov byte [edi], cl
mov byte [edi + 1], dl
add edi, 2
sub dword [esp + 0x28], 1
jne 0x101c9ca6
mov edx, dword [esp + 0x10]
jmp 0x101c9d3d
mov edx, ebx
mov edi, dword [esp + 0x44]
add byte [edi + 0xa], 0xfe
movzx eax, byte [edi + 0xa]
movzx ecx, byte [edi + 9]
and byte [edi + 8], 0xfd
imul ecx, eax
mov byte [edi + 0xb], cl
movzx eax, cl
cmp cl, 8
jb 0x101c9d72
shr eax, 3
imul eax, edx
mov dword [edi + 4], eax
mov eax, ebp
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret
imul eax, edx
add eax, 7
shr eax, 3
mov dword [edi + 4], eax
pop edi
pop esi
mov eax, ebp
pop ebp
pop ebx
add esp, 0x2c
ret