Function at 0x100106b4
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
lea ebp, [esp - 0x74]
mov eax, 0x56a8
call fcn.10019920
push esi
mov esi, dword [ebp + 0x7c]
mov eax, dword [esi + 0x10]
push edi
xor edi, edi
cmp eax, edi
mov dword [ebp + 0x70], ecx
jne 0x100106e1
mov byte [esi], 1
mov eax, 0x80004005
jmp 0x10010d47
cmp dword [esi + 0x1c], edi
je 0x100106d4
cmp eax, 0x10
jne 0x100106f5
cmp dword [esi + 0x14], edi
je 0x100106d4
cmp dword [esi + 0x18], edi
je 0x100106d4
cmp eax, 0x40
jne 0x10010709
cmp dword [esi + 0x14], edi
je 0x100106d4
cmp dword [esi + 0x18], edi
je 0x100106d4
cmp dword [esi + 0x20], edi
je 0x100106d4
lea edx, [ebp + 0x5c]
push edx
push eax
mov dword [ebp + 0x5c], edi
call fcn.10002f11
test eax, eax
je 0x100106d4
push ebx
push 0xc
pop ebx
push ebx
lea eax, [ebp + 0x28]
push edi
push eax
call fcn.10016e50
push ebx
lea eax, [ebp + 0x18]
push edi
push eax
call fcn.10016e50
push ebx
lea eax, [ebp + 0xc]
push edi
push eax
call fcn.10016e50
push ebx
lea eax, [ebp + 0x34]
push edi
push eax
call fcn.10016e50
mov ecx, dword [ebp + 0x70]
add esp, 0x30
lea eax, [ebp + 0x2c]
push eax
push 2
pop ebx
push ebx
push dword [esi + 0x14]
call fcn.100123b8
mov ecx, dword [ebp + 0x70]
mov dword [ebp + 0x28], eax
lea eax, [ebp + 0x1c]
push eax
push ebx
push dword [esi + 0x18]
call fcn.100123b8
mov ecx, dword [ebp + 0x70]
mov dword [ebp + 0x18], eax
lea eax, [ebp + 0x10]
push eax
push ebx
push dword [esi + 0x1c]
call fcn.100123b8
mov dword [ebp + 0xc], eax
mov eax, dword [esi + 0x20]
cmp eax, edi
je 0x100107a1
lea ecx, [ebp + 0x38]
push ecx
mov ecx, dword [ebp + 0x70]
push ebx
push eax
call fcn.100123b8
mov dword [ebp + 0x34], eax
push 0x168
lea eax, [ebp - 0x17c]
push edi
push eax
call fcn.10016e50
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x16c], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x164], eax
mov eax, dword [esi + 0x18]
mov dword [ebp - 0x120], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0xdc], eax
mov eax, dword [esi + 0x20]
push 0x658
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x7d4]
push edi
push eax
call fcn.10016e50
mov eax, dword [esi + 0x24]
add esp, 0x18
dec eax
je 0x10010813
dec eax
je 0x1001080e
dec eax
je 0x10010809
dec eax
jne 0x1001081c
mov eax, dword [esi + 0x20]
jmp 0x10010816
mov eax, dword [esi + 0x1c]
jmp 0x10010816
mov eax, dword [esi + 0x18]
jmp 0x10010816
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x7c4], eax
test byte [ebp - 0x7c4], 0xf0
mov dword [ebp + 0x40], edi
je 0x10010890
mov ecx, dword [ebp + 0x70]
lea eax, [ebp - 0x7d4]
push eax
mov dword [ebp + 0x40], 1
call fcn.10001e2b
cmp eax, edi
mov dword [ebp + 0x60], eax
jl 0x10010890
mov ebx, dword [ebp - 0x7c0]
cmp ebx, edi
je 0x10010890
jbe 0x10010887
lea ecx, [ebp - 0x7b4]
lea edx, [esi + 0x34]
mov edi, ebx
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov eax, dword [ecx]
mov dword [edx], eax
mov ax, word [ecx - 4]
mov word [edx - 2], ax
mov ax, word [ecx - 8]
mov word [edx - 8], ax
mov ax, word [ecx - 6]
mov word [edx - 6], ax
add ecx, 0x10
add edx, 0x14
dec edi
jne 0x1001085c
mov word [esi + 0x28], bx
jmp 0x10010d3c
mov ecx, dword [ebp + 0x70]
lea eax, [ebp - 0x17c]
push eax
call fcn.1000c8b7
test eax, eax
je 0x1001091e
push 0x4e60
lea eax, [ebp - 0x5634]
push edi
push eax
call fcn.10016e50
mov eax, dword [esi + 0x10]
mov ecx, dword [ebp + 0x70]
mov dword [ebp - 0x5620], eax
mov eax, dword [esi + 0x24]
mov dword [ebp - 0x5624], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x561c], eax
mov eax, dword [esi + 0x18]
mov dword [ebp - 0x5618], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x5614], eax
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x5610], eax
add esp, 0xc
lea eax, [ebp - 0x5634]
push eax
call fcn.1001003d
mov edi, eax
push 0x4e24
lea eax, [ebp - 0x55f8]
push eax
add esi, 0x28
push esi
call fcn.10016ee0
add esp, 0xc
mov eax, edi
jmp 0x10010d46
mov eax, dword [0x1002f424]
add eax, 0x54
push eax
call fcn.1001985b
mov ebx, eax
cmp ebx, edi
pop ecx
mov dword [ebp + 0x24], ebx
je 0x10010d41
mov eax, dword [0x1002f424]
add eax, 0x48
push eax
push edi
push ebx
call fcn.10016e50
mov dword [ebx], 0x44
mov eax, dword [ebp + 0x5c]
mov dword [ebx + 8], eax
mov eax, dword [0x1002f424]
mov dword [ebx + 0x40], eax
mov eax, dword [esi + 0x24]
add esp, 0xc
dec eax
je 0x10010990
dec eax
je 0x10010987
dec eax
je 0x1001097e
dec eax
je 0x10010975
mov dword [ebx + 0x3c], edi
jmp 0x10010997
mov dword [ebx + 0x3c], 4
jmp 0x10010997
mov dword [ebx + 0x3c], 3
jmp 0x10010997
mov dword [ebx + 0x3c], 2
jmp 0x10010997
mov dword [ebx + 0x3c], 1
push 0xc
lea eax, [ebp + 0x28]
push eax
lea eax, [ebx + 0xc]
push eax
call fcn.10016ee0
push 0xc
lea eax, [ebp + 0x18]
push eax
lea eax, [ebx + 0x18]
push eax
call fcn.10016ee0
push 0xc
lea eax, [ebp + 0xc]
push eax
lea eax, [ebx + 0x24]
push eax
call fcn.10016ee0
push 0xc
lea eax, [ebp + 0x34]
push eax
lea eax, [ebx + 0x30]
push eax
call fcn.10016ee0
mov eax, dword [ebx + 0x40]
mov ecx, dword [ebp + 0x70]
add esp, 0x30
push esi
push ebx
add eax, 0x54
push eax
push 0x44
mov dword [ebx + 4], 4
call fcn.100044e7
test eax, eax
jl 0x10010d41
mov eax, dword [ebx + 0x40]
cmp eax, edi
jbe 0x10010d41
add eax, 0x54
push eax
mov dword [ebp + 0x7c], eax
call fcn.1001985b
push dword [ebp + 0x7c]
mov edi, eax
push 0
push edi
call fcn.10016e50
mov dword [edi], 0x44
mov eax, dword [ebp + 0x5c]
mov dword [edi + 8], eax
mov eax, dword [ebx + 0x40]
mov dword [edi + 0x40], eax
mov eax, dword [esi + 0x24]
add esp, 0x10
dec eax
je 0x10010a61
dec eax
je 0x10010a58
dec eax
je 0x10010a4f
dec eax
je 0x10010a46
and dword [edi + 0x3c], 0
jmp 0x10010a68
mov dword [edi + 0x3c], 4
jmp 0x10010a68
mov dword [edi + 0x3c], 3
jmp 0x10010a68
mov dword [edi + 0x3c], 2
jmp 0x10010a68
mov dword [edi + 0x3c], 1
push 0xc
lea eax, [ebp + 0x28]
push eax
lea eax, [edi + 0xc]
push eax
call fcn.10016ee0
push 0xc
lea eax, [ebp + 0x18]
push eax
lea eax, [edi + 0x18]
push eax
call fcn.10016ee0
push 0xc
lea eax, [ebp + 0xc]
push eax
lea eax, [edi + 0x24]
push eax
call fcn.10016ee0
push 0xc
lea eax, [ebp + 0x34]
push eax
lea eax, [edi + 0x30]
push eax
call fcn.10016ee0
mov eax, dword [edi + 0x40]
mov ecx, dword [ebp + 0x70]
add esp, 0x30
push esi
push edi
add eax, 0x54
push eax
push 0x44
call fcn.100044e7
test eax, eax
mov dword [ebp + 0x60], eax
jl 0x10010d2e
mov eax, dword [ebp + 0x70]
mov ecx, dword [eax + 0x20]
test ecx, ecx
mov dword [ebp + 0x4c], 8
mov dword [ebp + 0x48], 0x280
mov dword [ebp + 0x44], 0x1e0
je 0x10010aeb
call fcn.10001054
jmp 0x10010aed
xor eax, eax
lea ecx, [ebp + 0x4c]
push ecx
lea ecx, [ebp + 0x44]
push ecx
lea ecx, [ebp + 0x48]
push ecx
mov ecx, dword [ebp + 0x70]
push eax
call fcn.1000af0b
push 0x1c
lea eax, [ebp - 0x14]
push 0
push eax
call fcn.10016e50
mov eax, dword [esi + 0x24]
and dword [ebp + 0x7c], 0
add esp, 0xc
dec eax
je 0x10010b49
dec eax
je 0x10010b3d
dec eax
je 0x10010b31
dec eax
jne 0x10010b53
mov eax, dword [esi + 0x20]
mov dword [ebp + 0x7c], 3
jmp 0x10010b50
mov eax, dword [esi + 0x1c]
mov dword [ebp + 0x7c], 2
jmp 0x10010b50
mov eax, dword [esi + 0x18]
mov dword [ebp + 0x7c], 1
jmp 0x10010b50
mov eax, dword [esi + 0x14]
and dword [ebp + 0x7c], 0
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0x70]
lea eax, [ebp - 0x14]
push eax
call fcn.10009612
and dword [ebp + 0x54], 0
and dword [ebp + 0x58], 0
mov dword [ebp + 0x60], eax
mov eax, dword [ebp + 0x7c]
lea eax, [eax*4 + 0x10030d08]
mov eax, dword [eax]
test eax, eax
je 0x10010b83
mov ecx, eax
call fcn.10001054
jmp 0x10010b85
xor eax, eax
mov ecx, dword [ebp + 0x70]
push eax
call fcn.100049ef
cmp eax, 1
mov dword [ebp + 0x50], eax
mov dword [ebp + 0x64], 0x800
mov dword [ebp + 0x6c], 0x600
mov dword [ebp + 0x68], 0x78
jne 0x10010c13
mov ecx, dword [ebp + 0x7c]
xor eax, eax
sub ecx, eax
je 0x10010bcc
dec ecx
je 0x10010bc7
dec ecx
je 0x10010bc2
dec ecx
jne 0x10010bcf
mov eax, dword [ebp + 0x38]
jmp 0x10010bcf
mov eax, dword [ebp + 0x10]
jmp 0x10010bcf
mov eax, dword [ebp + 0x1c]
jmp 0x10010bcf
mov eax, dword [ebp + 0x2c]
mov ecx, dword [ebp + 0x70]
push eax
call fcn.1001208b
test eax, eax
je 0x10010c13
movzx edx, word [eax + 0x20]
movzx ecx, word [eax + 0x22]
test ecx, ecx
mov dword [ebp + 0x6c], edx
movzx edx, word [eax + 0x24]
mov dword [ebp + 0x64], ecx
mov dword [ebp + 0x68], edx
je 0x10010bff
cmp dword [ebp + 0x6c], 0
je 0x10010bff
test edx, edx
jne 0x10010c13
movzx ecx, word [eax + 2]
mov dword [ebp + 0x64], ecx
movzx ecx, word [eax]
movzx eax, word [eax + 4]
mov dword [ebp + 0x6c], ecx
mov dword [ebp + 0x68], eax
and dword [ebp + 0x7c], 0
test dword [edi + 0x40], 0xfffffff0
jbe 0x10010d26
lea ecx, [esi + 0x2e]
lea eax, [edi + 0x44]
movzx edx, word [eax]
cmp edx, dword [ebp + 0x48]
jb 0x10010d0e
movzx edx, word [eax + 2]
movzx ebx, dx
cmp ebx, dword [ebp + 0x44]
mov dword [ebp + 8], edx
mov dword [ebp + 0x70], ebx
jb 0x10010d0e
movzx ebx, word [eax + 4]
cmp ebx, dword [ebp + 0x4c]
jb 0x10010d0e
cmp dword [ebp + 4], 1
je 0x10010ca1
cmp dword [ebp + 4], 4
je 0x10010ca1
cmp dword [ebp + 0x50], 0
je 0x10010c91
movzx edx, word [eax]
cmp edx, dword [ebp + 0x64]
ja 0x10010cd5
mov edx, dword [ebp + 0x6c]
cmp dword [ebp + 0x70], edx
ja 0x10010cd5
movzx edx, word [eax + 6]
cmp edx, dword [ebp + 0x68]
ja 0x10010cd5
mov dx, word [eax]
mov word [ecx - 2], dx
mov dx, word [eax + 2]
jmp 0x10010ccb
mov dx, word [eax]
mov word [ecx - 2], dx
mov dx, word [eax + 2]
mov word [ecx], dx
jmp 0x10010cdb
cmp dword [ebp + 0x50], 0
je 0x10010cc4
movzx edx, word [eax]
cmp edx, dword [ebp + 0x64]
ja 0x10010cd5
mov edx, dword [ebp + 0x6c]
cmp dword [ebp + 0x70], edx
ja 0x10010cd5
movzx edx, word [eax + 6]
cmp edx, dword [ebp + 0x68]
ja 0x10010cd5
mov dx, word [ebp + 8]
mov word [ecx - 2], dx
mov dx, word [eax]
mov word [ecx], dx
mov dword [ebp + 0x7c], 1
cmp dword [ebp + 0x7c], 1
jne 0x10010d0e
cmp dword [ebp + 0x40], 1
jne 0x10010ce9
mov word [ecx + 2], 0x3c
jmp 0x10010cf1
mov dx, word [eax + 6]
mov word [ecx + 2], dx
mov dx, word [eax + 4]
mov word [ecx + 4], dx
movzx edx, byte [eax + 8]
and edx, 1
inc dword [ebp + 0x54]
mov word [ecx + 0xe], dx
add ecx, 0x14
and dword [ebp + 0x7c], 0
mov edx, dword [edi + 0x40]
inc dword [ebp + 0x58]
shr edx, 4
add eax, 0x10
cmp dword [ebp + 0x58], edx
jb 0x10010c2a
mov ebx, dword [ebp + 0x24]
mov ax, word [ebp + 0x54]
mov word [esi + 0x28], ax
push edi
call fcn.1001977e
push ebx
call fcn.1001977e
pop ecx
pop ecx
mov eax, dword [ebp + 0x60]
jmp 0x10010d46
mov eax, 0x80004005
pop ebx
pop edi
pop esi
add ebp, 0x74
leave
ret 4