Function at 0x100d9270
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x18
mov eax, dword [ecx + 0x108]
push ebx
push ebp
push esi
push edi
xor edi, edi
mov dword [esp + 0x10], ecx
test eax, eax
jne 0x100d9297
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [eax + 4]
cmp dword [ecx + 0x1c], edi
je 0x100d928d
mov eax, dword [eax + 0xc]
test eax, eax
je 0x100d961b
mov ebx, dword [eax + 4]
mov dword [esp + 0x24], ebx
test ebx, ebx
je 0x100d961b
mov esi, dword [ebx + 4]
test esi, esi
je 0x100d961b
or ebp, 0xffffffff
jmp 0x100d92d4
mov ebx, dword [esp + 0x24]
mov eax, dword [esi + 0x3f8]
test eax, eax
jne 0x100d92f4
mov eax, esi
call fcn.100e3710
test eax, eax
je 0x100d9601
mov edx, dword [eax + 0x18]
movzx eax, word [edx + 4]
cmp eax, 0x6766
jne 0x100d9601
mov eax, dword [esi + 0x460]
test eax, eax
je 0x100d9338
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x100d9338
mov eax, dword [ecx + 4]
test eax, eax
je 0x100d9338
mov edx, dword [esp + 0x10]
jmp 0x100d9320
cmp dword [eax], edx
je 0x100d9366
test ecx, ecx
je 0x100d9338
mov eax, dword [ecx + 8]
test eax, eax
je 0x100d9338
mov ecx, eax
mov eax, dword [eax + 4]
test eax, eax
jne 0x100d9320
push 8
call fcn.1003ddbb
add esp, 4
test eax, eax
je 0x100d934f
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
jmp 0x100d9351
xor eax, eax
mov ecx, dword [esp + 0x10]
mov dword [eax], ecx
mov dword [eax + 4], ebp
mov edi, dword [esi + 0x460]
push eax
call fcn.10003080
cmp dword [esi + 0x390], ebp
jne 0x100d9378
mov dword [esi + 0x390], 0x86000000
mov eax, dword [esi + 0x3fc]
test eax, eax
je 0x100d9386
mov ebx, eax
jmp 0x100d939c
mov eax, esi
call fcn.100e3710
test eax, eax
je 0x100d939a
mov edx, dword [eax + 0x18]
movzx ebx, word [edx + 6]
jmp 0x100d939c
mov ebx, ebp
mov eax, esi
call fcn.100e3710
mov edi, eax
test edi, edi
je 0x100d94e6
mov eax, dword [edi + 0x18]
movzx ebx, word [eax + 6]
mov dword [esp + 0x14], ebp
mov ecx, dword [edi + 8]
test ecx, ecx
je 0x100d94e6
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
lea eax, [esp + 0x14]
push eax
movzx eax, byte [edi + 0x16]
push 0x10
push eax
movzx eax, byte [edi + 0x15]
push eax
movzx eax, byte [edi + 0x14]
push eax
call edx
test eax, eax
je 0x100d94e6
mov eax, dword [esp + 0x14]
test al, 1
jne 0x100d94e6
mov ecx, eax
shr ecx, 1
and ecx, 3
sub ecx, 2
je 0x100d9452
and eax, 0xfffffff0
mov dword [esp + 0x18], eax
jbe 0x100d94e6
push 0x2000000
push eax
push 0
call fcn.1013c470
mov ecx, eax
call fcn.1013ccb0
mov edi, eax
test edi, edi
jne 0x100d94e0
push 0x14
call fcn.1003ddbb
add esp, 4
test eax, eax
je 0x100d94d0
mov ecx, dword [esp + 0x18]
push ebp
push ecx
push edi
mov ecx, eax
call fcn.1006aaa0
mov edi, eax
jmp 0x100d94d2
and eax, 0xfffffff0
mov edx, ebp
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], edx
mov ecx, dword [edi + 8]
test ecx, ecx
je 0x100d948b
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
lea eax, [esp + 0x1c]
push eax
movzx eax, byte [edi + 0x16]
push 0x14
push eax
movzx eax, byte [edi + 0x15]
push eax
movzx eax, byte [edi + 0x14]
push eax
call edx
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
test eax, eax
ja 0x100d9493
test edx, edx
jbe 0x100d94e6
push 0x2000000
push eax
push edx
call fcn.1013c470
mov ecx, eax
call fcn.1013ccb0
mov edi, eax
test edi, edi
jne 0x100d94e0
push 0x14
call fcn.1003ddbb
add esp, 4
test eax, eax
je 0x100d94d0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
push ebp
push ecx
push edx
mov ecx, eax
call fcn.1006aaa0
mov edi, eax
jmp 0x100d94d2
xor edi, edi
call fcn.1013c470
mov ecx, dword [eax + 0x24]
push edi
call fcn.10002150
mov dword [esi + 0x51c], edi
lea eax, [ebx - 0x3d00]
cmp eax, 4
ja case.0x100d94f5.15617
jmp dword [eax*4 + 0x100d9628]
push str.Glenfly_Arise_GT10C0
lea eax, [esi + 0x10]
push 0x100
push eax
call fcn.1003dc98
add esp, 0xc
push 0x101c65ac
lea ecx, [esi + 0x210]
push 0x80
push ecx
call fcn.1003dc98
fld dword [0x101f6ee8]
fstp dword [esi + 0x384]
mov dword [esi + 0x390], 0x86100004
fld dword [0x101f6c0c]
fstp dword [esi + 0x3b0]
jmp 0x100d95f5
push str.Glenfly_Arise_GT1040
lea edx, [esi + 0x10]
push 0x100
push edx
call fcn.1003dc98
add esp, 0xc
push 0x101c65cc
lea eax, [esi + 0x210]
push 0x80
push eax
call fcn.1003dc98
mov dword [esi + 0x390], 0x86100003
jmp 0x100d95f5
push str.Glenfly_Arise1020
lea ecx, [esi + 0x10]
push 0x100
push ecx
call fcn.1003dc98
add esp, 0xc
push 0x101c65e8
lea edx, [esi + 0x210]
push 0x80
push edx
call fcn.1003dc98
mov dword [esi + 0x390], 0x86100002
jmp 0x100d95f5
push str.Glenfly_Arise1010
lea eax, [esi + 0x10]
push 0x100
push eax
call fcn.1003dc98
add esp, 0xc
push str.Arise
lea ecx, [esi + 0x210]
push 0x80
push ecx
call fcn.1003dc98
mov dword [esi + 0x390], 0x86100001
add esp, 0xc
mov ebx, dword [esp + 0x24]
mov edi, 1
test ebx, ebx
je 0x100d961b
mov eax, dword [ebx + 8]
test eax, eax
je 0x100d961b
mov esi, dword [eax + 4]
mov dword [esp + 0x24], eax
test esi, esi
jne 0x100d92d0
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret