Function at 0x100ea890
Capabilities:
Enumerate pe sections

Disassembly:
push esi
mov esi, edx
push edi
mov edi, ecx
movzx eax, byte [esi + 4]
add eax, 0xfffffffc
cmp eax, 0x22
ja case.default.0x100ea8ae
movzx eax, byte [eax + 0x100eaad8]
push ebx
jmp dword [eax*4 + 0x100eaab4]
mov eax, dword [esi + 0x14]
mov edx, dword [esi + 0x30]
shl eax, 2
push 0
push eax
call fcn.100f0420
mov eax, dword [esi + 0x1c]
mov ecx, edi
mov edx, dword [esi + 0x34]
shl eax, 2
push 0
push eax
call fcn.100f0420
mov eax, dword [esi + 0x10]
mov ecx, edi
mov edx, dword [esi + 0x2c]
shl eax, 4
push 0
push eax
call fcn.100f0420
mov eax, dword [esi + 0x18]
mov ecx, edi
mov edx, dword [esi + 0x38]
shl eax, 2
push 0
push eax
call fcn.100f0420
mov eax, dword [esi + 0x20]
mov ecx, edi
mov edx, dword [esi + 0x3c]
push 0
lea eax, [eax + eax*2]
shl eax, 2
push eax
call fcn.100f0420
mov eax, dword [esi + 0xc]
mov ecx, edi
mov edx, dword [esi + 0x40]
shl eax, 3
push 0
push eax
call fcn.100f0420
push 0
push 0x50
mov edx, esi
mov ecx, edi
call fcn.100f0420
add esp, 0x38
pop ebx
pop edi
pop esi
ret
mov cl, byte [esi + 6]
push ebp
xor ebp, ebp
test cl, cl
je 0x100ea97f
lea ebx, [esi + 0x10]
nop dword [eax]
mov edx, dword [ebx]
test edx, edx
je 0x100ea971
add dword [edx + 4], 0xffffffff
jne 0x100ea971
lea eax, [edx + 8]
cmp dword [edx], eax
jne 0x100ea971
push 0
push 0x18
mov ecx, edi
call fcn.100f0420
add esp, 8
mov cl, byte [esi + 6]
inc ebp
movzx eax, cl
add ebx, 4
cmp ebp, eax
jl 0x100ea950
movzx eax, cl
mov edx, esi
push 0
mov ecx, edi
lea eax, [eax*4 + 0x10]
push eax
call fcn.100f0420
add esp, 8
pop ebp
pop ebx
pop edi
pop esi
ret
movzx eax, byte [esi + 6]
inc eax
shl eax, 4
push 0
push eax
call fcn.100f0420
add esp, 8
pop ebx
pop edi
pop esi
ret
cmp dword [esi + 0x14], 0
je 0x100ea9d7
mov cl, byte [esi + 7]
mov eax, 1
mov edx, dword [esi + 0x10]
shl eax, cl
mov ecx, edi
shl eax, 5
push 0
push eax
call fcn.100f0420
add esp, 8
mov eax, dword [esi + 8]
mov ecx, edi
mov edx, dword [esi + 0xc]
shl eax, 4
push 0
push eax
call fcn.100f0420
push 0
push 0x20
mov edx, esi
mov ecx, edi
call fcn.100f0420
add esp, 0x10
pop ebx
pop edi
pop esi
ret
mov edx, dword [esi + 0x20]
mov ecx, esi
call fcn.100e9ce0
cmp dword [esi + 0x20], 0
je 0x100eaa31
lea eax, [esi + 0x34]
mov ecx, esi
mov dword [esi + 0x14], eax
call fcn.100f8ae0
mov eax, dword [esi + 0x60]
mov ecx, esi
mov edx, dword [esi + 0x20]
shl eax, 4
push 0
push eax
call fcn.100f0420
add esp, 8
push 0
push 0x7c
lea edx, [esi - 4]
mov ecx, edi
call fcn.100f0420
add esp, 8
pop ebx
pop edi
pop esi
ret
mov eax, dword [esi + 0xc]
add eax, 0x18
push 0
push eax
call fcn.100f0420
add esp, 8
pop ebx
pop edi
pop esi
ret
mov edx, dword [edi + 0x10]
mov ecx, dword [edx + 0x20]
mov eax, dword [edx + 0x18]
dec ecx
and ecx, dword [esi + 8]
lea ecx, [eax + ecx*4]
mov eax, dword [ecx]
cmp eax, esi
je 0x100eaa7a
lea ecx, [eax + 0xc]
mov eax, dword [ecx]
cmp eax, esi
jne 0x100eaa71
mov eax, dword [eax + 0xc]
mov dword [ecx], eax
mov ecx, edi
dec dword [edx + 0x1c]
mov edx, esi
movzx eax, byte [esi + 7]
add eax, 0x11
push 0
push eax
call fcn.100f0420
add esp, 8
pop ebx
pop edi
pop esi
ret
mov eax, dword [esi + 0xc]
add eax, 0x11
push 0
push eax
call fcn.100f0420
add esp, 8
pop ebx
pop edi
pop esi
ret