Function at 0x101a1010
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 8
lea eax, [esp]
push ebx
push edi
mov edi, dword [esp + 0x14]
push eax
push 0xb8
push edi
call fcn.100dc800
mov ebx, eax
add esp, 0xc
test ebx, ebx
jne 0x101a13b7
mov ecx, dword [esp + 8]
push esi
push 0x84
push ebx
lea eax, [ecx + 0x34]
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x14]
push dword [eax + 4]
call fcn.10220d70
mov eax, dword [esp + 0x18]
add esp, 0xc
mov esi, dword [esp + 0x24]
mov ecx, dword [eax + 4]
mov eax, dword [esp + 0x20]
mov dword [ecx + 0x18], eax
test byte [edi + 0x9c], 4
mov eax, dword [esp + 0xc]
jne 0x101a109c
movzx ecx, byte [esi + 3]
mov byte [eax], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 2]
mov byte [eax + 1], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 1]
mov byte [eax + 2], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi]
mov byte [eax + 3], cl
jmp 0x101a10a0
mov ecx, dword [esi]
mov dword [eax], ecx
test byte [edi + 0x9c], 4
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 4]
jne 0x101a10e3
movzx eax, byte [esi + 7]
mov byte [ecx + 0xc], al
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 4]
movzx eax, byte [esi + 6]
mov byte [ecx + 0xd], al
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 4]
movzx eax, byte [esi + 5]
mov byte [ecx + 0xe], al
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 4]
movzx eax, byte [esi + 4]
mov byte [ecx + 0xf], al
jmp 0x101a10e9
mov eax, dword [esi + 4]
mov dword [ecx + 0xc], eax
test byte [edi + 0x9c], 4
mov eax, dword [esp + 0xc]
jne 0x101a1120
movzx ecx, byte [esi + 0xb]
mov byte [eax + 8], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0xa]
mov byte [eax + 9], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 9]
mov byte [eax + 0xa], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 8]
mov byte [eax + 0xb], cl
jmp 0x101a1126
mov ecx, dword [esi + 8]
mov dword [eax + 8], ecx
test byte [edi + 0x9c], 4
mov eax, dword [esp + 0xc]
jne 0x101a115d
movzx ecx, byte [esi + 0xf]
mov byte [eax + 0xc], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0xe]
mov byte [eax + 0xd], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0xd]
mov byte [eax + 0xe], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0xc]
mov byte [eax + 0xf], cl
jmp 0x101a1163
mov ecx, dword [esi + 0xc]
mov dword [eax + 0xc], ecx
test byte [edi + 0x9c], 4
mov eax, dword [esp + 0xc]
jne 0x101a119a
movzx ecx, byte [esi + 0x13]
mov byte [eax + 0x10], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0x12]
mov byte [eax + 0x11], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0x11]
mov byte [eax + 0x12], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0x10]
mov byte [eax + 0x13], cl
jmp 0x101a11a0
mov ecx, dword [esi + 0x10]
mov dword [eax + 0x10], ecx
test byte [edi + 0x9c], 4
jne 0x101a11cf
movzx eax, byte [esi + 0x17]
mov byte [esp + 0x10], al
movzx eax, byte [esi + 0x16]
mov byte [esp + 0x11], al
movzx eax, byte [esi + 0x15]
mov byte [esp + 0x12], al
movzx eax, byte [esi + 0x14]
mov byte [esp + 0x13], al
mov ecx, dword [esp + 0x10]
jmp 0x101a11d6
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0xc]
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x101a1203
mov eax, dword [esp + 0xc]
push 1
mov dword [ecx], 0
push dword [eax + 0x14]
push ecx
push dword [eax + 4]
push edi
call fcn.1015e610
add esp, 0x14
mov ebx, eax
test byte [edi + 0x9c], 4
jne 0x101a1232
movzx eax, byte [esi + 0x1b]
mov byte [esp + 0x10], al
movzx eax, byte [esi + 0x1a]
mov byte [esp + 0x11], al
movzx eax, byte [esi + 0x19]
mov byte [esp + 0x12], al
movzx eax, byte [esi + 0x18]
mov byte [esp + 0x13], al
mov ecx, dword [esp + 0x10]
jmp 0x101a1239
mov ecx, dword [esi + 0x18]
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0xc]
mov dword [eax + 0x18], ecx
test byte [edi + 0x9c], 4
jne 0x101a126f
movzx eax, byte [esi + 0x1f]
mov byte [esp + 0x10], al
movzx eax, byte [esi + 0x1e]
mov byte [esp + 0x11], al
movzx eax, byte [esi + 0x1d]
mov byte [esp + 0x12], al
movzx eax, byte [esi + 0x1c]
mov byte [esp + 0x13], al
mov ecx, dword [esp + 0x10]
jmp 0x101a1276
mov ecx, dword [esi + 0x1c]
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0xc]
mov dword [eax + 0x1c], ecx
test byte [edi + 0x9c], 4
jne 0x101a12ac
movzx eax, byte [esi + 0x23]
mov byte [esp + 0x10], al
movzx eax, byte [esi + 0x22]
mov byte [esp + 0x11], al
movzx eax, byte [esi + 0x21]
mov byte [esp + 0x12], al
movzx eax, byte [esi + 0x20]
mov byte [esp + 0x13], al
mov ecx, dword [esp + 0x10]
jmp 0x101a12b3
mov ecx, dword [esi + 0x20]
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0xc]
mov dword [eax + 0x20], ecx
test byte [edi + 0x9c], 4
jne 0x101a12e9
movzx eax, byte [esi + 0x27]
mov byte [esp + 0x10], al
movzx eax, byte [esi + 0x26]
mov byte [esp + 0x11], al
movzx eax, byte [esi + 0x25]
mov byte [esp + 0x12], al
movzx eax, byte [esi + 0x24]
mov byte [esp + 0x13], al
mov ecx, dword [esp + 0x10]
jmp 0x101a12f0
mov ecx, dword [esi + 0x24]
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0xc]
mov dword [eax + 0x24], ecx
test byte [edi + 0x9c], 4
mov eax, dword [esp + 0xc]
jne 0x101a132e
movzx ecx, byte [esi + 0x2b]
mov byte [eax + 0x28], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0x2a]
mov byte [eax + 0x29], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0x29]
mov byte [eax + 0x2a], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0x28]
mov byte [eax + 0x2b], cl
jmp 0x101a1334
mov ecx, dword [esi + 0x28]
mov dword [eax + 0x28], ecx
test byte [edi + 0x9c], 4
mov eax, dword [esp + 0xc]
jne 0x101a136b
movzx ecx, byte [esi + 0x2f]
mov byte [eax + 0x2c], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0x2e]
mov byte [eax + 0x2d], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0x2d]
mov byte [eax + 0x2e], cl
mov eax, dword [esp + 0xc]
movzx ecx, byte [esi + 0x2c]
mov byte [eax + 0x2f], cl
jmp 0x101a1371
mov ecx, dword [esi + 0x2c]
mov dword [eax + 0x2c], ecx
test byte [edi + 0x9c], 4
jne 0x101a13a0
movzx eax, byte [esi + 0x33]
mov byte [esp + 0x10], al
movzx eax, byte [esi + 0x32]
mov byte [esp + 0x11], al
movzx eax, byte [esi + 0x31]
mov byte [esp + 0x12], al
movzx eax, byte [esi + 0x30]
mov byte [esp + 0x13], al
mov ecx, dword [esp + 0x10]
jmp 0x101a13a3
mov ecx, dword [esi + 0x30]
mov eax, dword [esp + 0xc]
pop esi
mov dword [eax + 0x30], ecx
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 8]
mov dword [ecx], eax
mov eax, ebx
pop edi
pop ebx
add esp, 8
ret