Function at 0x1007fa2f
Capabilities:
Enumerate pe sections

Disassembly:
push 0x280
push 0x10170f68
call fcn.10005951
mov eax, edx
mov dword [ebp - 0x264], eax
mov esi, ecx
mov dword [ebp - 0x250], esi
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x28c], 0x10167c38
mov dword [ebp - 0x288], esi
mov dword [ebp - 0x284], eax
xor edi, edi
mov dword [ebp - 0x27c], edi
mov dword [ebp - 0x280], 4
lea eax, [esi + 8]
mov dword [ebp - 0x25c], eax
mov ecx, dword [eax]
mov eax, dword [ecx]
lea edx, [ebx + 0x68]
lea esi, [ebp - 0x28c]
push esi
push dword [ebp + 0xc]
push dword [ebx + 0xc]
push dword [ebx + 8]
push edx
mov edx, dword [ebp - 0x264]
push dword [edx + 0x40]
call dword [eax + 0x44]
test eax, eax
mov esi, dword [ebp - 0x250]
jne 0x1007fab7
xor eax, eax
jmp 0x1007fd1c
mov ecx, dword [ebp - 0x25c]
mov ecx, dword [ecx]
mov eax, dword [ecx]
lea edx, [ebp - 0x258]
push edx
push edi
push edi
lea edx, [ebp - 0x290]
push edx
lea edx, [ebx + 0x68]
push edx
call dword [eax + 0x30]
test eax, eax
je 0x1007fb43
mov dword [ebp - 0x258], edi
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax]
mov eax, dword [ecx]
push 0x200
lea edx, [ebp - 0x220]
push edx
push dword [ebx + 0xc]
push dword [ebx + 8]
push dword [esi]
call dword [eax + 0x78]
mov dword [ebp - 0x260], eax
test eax, eax
je 0x1007fb3b
or dword [esi + 0x74], 2
mov ecx, dword [esi + 0x14]
mov edx, dword [ecx]
push eax
push 0x200
push dword [ebx + 0xc]
push dword [ebx + 8]
push str.GenGetImageSections.Read_0x_I64x__0x_x__failed__0x_08x
push 4
push ecx
call dword [edx + 4]
add esp, 0x1c
mov eax, dword [ebp - 0x260]
jmp 0x1007fd1c
lea eax, [ebp - 0x220]
jmp 0x1007fb49
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x24c], eax
xor edx, edx
mov ecx, eax
call fcn.100830fd
mov ecx, eax
mov dword [ebp - 0x260], ecx
test ecx, ecx
jne 0x1007fb8d
mov esi, 0x80070482
mov edx, dword [ebp - 0x250]
mov eax, dword [edx + 0x14]
mov ecx, dword [eax]
push dword [ebx + 0xc]
push dword [ebx + 8]
push str.GenGetImageSections.GenImageNtHeader_0x_I64x__failed
push 4
push eax
call dword [ecx + 4]
add esp, 0x14
jmp 0x1007fcfe
mov esi, edi
movzx edx, word [ecx + 0x14]
add edx, 0x18
add edx, ecx
mov dword [ebp - 0x254], edx
cmp dword [ebp - 0x258], esi
je 0x1007fc24
mov dword [ebp - 4], edi
mov dword [ebp - 0x26c], edi
movzx eax, word [ecx + 6]
cmp edi, eax
jae 0x1007fc18
imul eax, edi, 0x28
add eax, edx
push eax
push dword [ebp + 0xc]
push ebx
mov edx, dword [ebp - 0x264]
mov ecx, dword [ebp - 0x250]
call fcn.1003a42b
test eax, eax
cmovne esi, eax
mov dword [ebp - 0x274], esi
inc edi
mov dword [ebp - 0x26c], edi
mov edx, dword [ebp - 0x254]
mov ecx, dword [ebp - 0x260]
jmp 0x1007fbaf
mov dword [ebp - 4], 0xfffffffe
jmp 0x1007fcfe
sub edx, dword [ebp - 0x24c]
xor eax, eax
add edx, dword [ebx + 8]
mov dword [ebp - 0x254], edx
adc eax, dword [ebx + 0xc]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x268], edi
xor eax, eax
cmp ax, word [ecx + 6]
jae 0x1007fcfe
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax]
mov eax, dword [ecx]
push 0x28
lea edx, [ebp - 0x248]
push edx
push dword [ebp - 0x24c]
mov edx, dword [ebp - 0x254]
push edx
mov edx, dword [ebp - 0x250]
push dword [edx]
call dword [eax + 0x78]
mov dword [ebp - 0x278], eax
test eax, eax
je 0x1007fcb1
mov esi, eax
mov eax, dword [ebp - 0x250]
mov ecx, dword [eax + 0x14]
mov edx, dword [ecx]
push esi
push 0x28
push dword [ebp - 0x24c]
push dword [ebp - 0x254]
push str.GenGetImageSections.Section.Read_0x_I64x__0x_x__failed__0x_08x
push 4
push ecx
call dword [edx + 4]
add esp, 0x1c
jmp 0x1007fcd2
lea eax, [ebp - 0x248]
push eax
push dword [ebp + 0xc]
push ebx
mov edx, dword [ebp - 0x264]
mov ecx, dword [ebp - 0x250]
call fcn.1003a42b
test eax, eax
cmovne esi, eax
add dword [ebp - 0x254], 0x28
adc dword [ebp - 0x24c], edi
mov ecx, dword [ebp - 0x268]
inc ecx
mov dword [ebp - 0x268], ecx
mov eax, dword [ebp - 0x260]
movzx eax, word [eax + 6]
cmp ecx, eax
jb 0x1007fc50
cmp dword [ebp - 0x258], 0
je 0x1007fd1a
mov ecx, dword [ebp - 0x25c]
mov ecx, dword [ecx]
mov edx, dword [ecx]
push dword [ebp - 0x258]
call dword [edx + 0x34]
mov eax, esi
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
leave
ret 8