Function at 0x10197970
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 8
lea eax, [esp]
push ebx
push edi
mov edi, dword [esp + 0x14]
push eax
push 0xac
push edi
call fcn.100dc800
mov ebx, eax
add esp, 0xc
test ebx, ebx
jne 0x10197c60
mov ecx, dword [esp + 8]
push esi
push 0x84
push ebx
lea eax, [ecx + 0x28]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x14]
push dword [eax + 4]
call fcn.10220d70
mov eax, dword [esp + 0x18]
add esp, 0xc
mov esi, dword [esp + 0x24]
mov ecx, dword [eax + 4]
mov eax, dword [esp + 0x20]
mov dword [ecx + 0x18], eax
test byte [edi + 0x9c], 4
mov eax, dword [esp + 0xc]
jne 0x101979fc
movzx ecx, byte [esi + 3]
mov byte [eax], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 2]
mov byte [eax + 1], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 1]
mov byte [eax + 2], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi]
mov byte [eax + 3], cl
jmp 0x10197a00
mov ecx, dword [esi]
mov dword [eax], ecx
test byte [edi + 0x9c], 4
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 4]
jne 0x10197a43
movzx eax, byte [esi + 7]
mov byte [ecx + 0xc], al
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 4]
movzx eax, byte [esi + 6]
mov byte [ecx + 0xd], al
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 4]
movzx eax, byte [esi + 5]
mov byte [ecx + 0xe], al
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 4]
movzx eax, byte [esi + 4]
mov byte [ecx + 0xf], al
jmp 0x10197a49
mov eax, dword [esi + 4]
mov dword [ecx + 0xc], eax
test byte [edi + 0x9c], 4
mov eax, dword [esp + 0xc]
jne 0x10197a80
movzx ecx, byte [esi + 0xb]
mov byte [eax + 8], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0xa]
mov byte [eax + 9], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 9]
mov byte [eax + 0xa], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 8]
mov byte [eax + 0xb], cl
jmp 0x10197a86
mov ecx, dword [esi + 8]
mov dword [eax + 8], ecx
test byte [edi + 0x9c], 4
mov eax, dword [esp + 0xc]
jne 0x10197abd
movzx ecx, byte [esi + 0xf]
mov byte [eax + 0xc], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0xe]
mov byte [eax + 0xd], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0xd]
mov byte [eax + 0xe], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0xc]
mov byte [eax + 0xf], cl
jmp 0x10197ac3
mov ecx, dword [esi + 0xc]
mov dword [eax + 0xc], ecx
test byte [edi + 0x9c], 4
jne 0x10197af2
movzx eax, byte [esi + 0x13]
mov byte [esp + 0x10], al
movzx eax, byte [esi + 0x12]
mov byte [esp + 0x11], al
movzx eax, byte [esi + 0x11]
mov byte [esp + 0x12], al
movzx eax, byte [esi + 0x10]
mov byte [esp + 0x13], al
mov ecx, dword [esp + 0x10]
jmp 0x10197af9
mov ecx, dword [esi + 0x10]
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0xc]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x10197b26
mov eax, dword [esp + 0xc]
push 1
mov dword [ecx], 0
push dword [eax + 0x10]
push ecx
push dword [eax + 4]
push edi
call fcn.1015e610
add esp, 0x14
mov ebx, eax
test byte [edi + 0x9c], 4
mov eax, dword [esp + 0xc]
jne 0x10197b5d
movzx ecx, byte [esi + 0x17]
mov byte [eax + 0x14], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0x16]
mov byte [eax + 0x15], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0x15]
mov byte [eax + 0x16], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0x14]
mov byte [eax + 0x17], cl
jmp 0x10197b63
mov ecx, dword [esi + 0x14]
mov dword [eax + 0x14], ecx
test byte [edi + 0x9c], 4
mov eax, dword [esp + 0xc]
jne 0x10197b9a
movzx ecx, byte [esi + 0x1b]
mov byte [eax + 0x18], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0x1a]
mov byte [eax + 0x19], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0x19]
mov byte [eax + 0x1a], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0x18]
mov byte [eax + 0x1b], cl
jmp 0x10197ba0
mov ecx, dword [esi + 0x18]
mov dword [eax + 0x18], ecx
test byte [edi + 0x9c], 4
jne 0x10197bcf
movzx eax, byte [esi + 0x1f]
mov byte [esp + 0x10], al
movzx eax, byte [esi + 0x1e]
mov byte [esp + 0x11], al
movzx eax, byte [esi + 0x1d]
mov byte [esp + 0x12], al
movzx eax, byte [esi + 0x1c]
mov byte [esp + 0x13], al
mov ecx, dword [esp + 0x10]
jmp 0x10197bd6
mov ecx, dword [esi + 0x1c]
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0xc]
mov dword [eax + 0x1c], ecx
test byte [edi + 0x9c], 4
mov eax, dword [esp + 0xc]
jne 0x10197c14
movzx ecx, byte [esi + 0x23]
mov byte [eax + 0x20], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0x22]
mov byte [eax + 0x21], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0x21]
mov byte [eax + 0x22], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0x20]
mov byte [eax + 0x23], cl
jmp 0x10197c1a
mov ecx, dword [esi + 0x20]
mov dword [eax + 0x20], ecx
test byte [edi + 0x9c], 4
jne 0x10197c49
movzx eax, byte [esi + 0x27]
mov byte [esp + 0x10], al
movzx eax, byte [esi + 0x26]
mov byte [esp + 0x11], al
movzx eax, byte [esi + 0x25]
mov byte [esp + 0x12], al
movzx eax, byte [esi + 0x24]
mov byte [esp + 0x13], al
mov ecx, dword [esp + 0x10]
jmp 0x10197c4c
mov ecx, dword [esi + 0x24]
mov eax, dword [esp + 0xc]
pop esi
mov dword [eax + 0x24], ecx
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 8]
mov dword [ecx], eax
mov eax, ebx
pop edi
pop ebx
add esp, 8
ret