Function at 0x10ec5e8
Capabilities:
Enumerate pe sections
Parse pe header

Disassembly:
push 0x38
push 0x13c98a8
call fcn.010ce0b8
mov esi, ecx
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x20], edi
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x34]
push eax
xor ebx, ebx
inc ebx
push ebx
push edi
call fcn.010ebc65
mov dword [ebp - 0x1c], eax
cmp eax, edi
jl 0x10ec906
mov edi, dword [ebp - 0x34]
movzx eax, word [edi]
cmp ax, 0x5a4d
je 0x10ec63f
cmp ax, 0x4550
je 0x10ec639
mov dword [ebp - 0x1c], 0xd000007b
jmp 0x10ec906
cmp ax, 0x5a4d
jne 0x10ec671
mov eax, dword [edi + 0x3c]
test eax, eax
je 0x10ec62d
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x28]
push ecx
push ebx
push eax
mov ecx, esi
call fcn.010ebd70
mov dword [ebp - 0x1c], eax
test eax, eax
jl 0x10ec906
lea eax, [edi + 0x40]
mov edi, dword [ebp - 0x28]
cmp edi, eax
jae 0x10ec699
jmp 0x10ec62d
and dword [ebp - 0x20], 0
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x28]
push eax
push ebx
push 0
mov ecx, esi
call fcn.010ebd70
mov dword [ebp - 0x1c], eax
test eax, eax
jl 0x10ec906
and dword [ebp - 0x34], 0
mov edi, dword [ebp - 0x28]
cmp dword [edi], 0x4550
jne 0x10ec62d
cmp word [edi + 0x14], 0
je 0x10ec62d
movzx edx, word [edi + 4]
mov eax, edx
mov ecx, 0x14c
sub eax, ecx
je 0x10ec6cc
sub eax, 0x74
je 0x10ec6cc
sub eax, 0x40
je 0x10ec6cc
sub eax, 0x8464
jne 0x10ec62d
cmp byte [edi + 0x1a], 3
jae 0x10ec6dc
cmp byte [edi + 0x1b], 5
jb 0x10ec62d
movzx eax, word [edi + 0x18]
cmp ax, 0x10b
je 0x10ec6f6
cmp ax, 0x20b
jne 0x10ec62d
cmp ax, 0x10b
jne 0x10ec72f
mov eax, edx
sub eax, ecx
je 0x10ec705
sub eax, 0x74
jne 0x10ec62d
push 0
push 0
push ebx
push dword [ebp - 0x20]
mov ecx, esi
call fcn.010ebd70
mov dword [ebp - 0x1c], eax
test eax, eax
jl 0x10ec906
mov eax, dword [edi + 0x34]
mov dword [ebp - 0x48], eax
and dword [ebp - 0x44], 0
and dword [ebp - 0x38], 0
jmp 0x10ec76c
cmp edx, 0x200
je 0x10ec743
cmp edx, 0x8664
jne 0x10ec62d
push 0
push 0
push ebx
push dword [ebp - 0x20]
mov ecx, esi
call fcn.010ebe8f
mov dword [ebp - 0x1c], eax
test eax, eax
jl 0x10ec906
mov eax, dword [edi + 0x30]
mov dword [ebp - 0x48], eax
mov eax, dword [edi + 0x34]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x38], ebx
mov eax, dword [edi + 0x50]
mov dword [esi + 0x14], eax
mov ebx, dword [edi + 0x54]
test ebx, ebx
je 0x10ec62d
mov ecx, esi
call fcn.010eabb2
cmp ebx, eax
jae 0x10ec62d
mov ecx, dword [edi + 0x38]
mov dword [ebp - 0x30], ecx
mov eax, dword [edi + 0x3c]
test eax, eax
je 0x10ec62d
lea edx, [eax - 1]
test eax, edx
jne 0x10ec62d
lea edx, [ecx - 1]
test ecx, edx
jne 0x10ec62d
cmp ecx, eax
jb 0x10ec62d
test ax, 0x1ff
je 0x10ec7c9
cmp eax, ecx
jne 0x10ec62d
movzx ebx, word [edi + 6]
mov dword [ebp - 0x3c], ebx
test ebx, ebx
jbe 0x10ec62d
movzx eax, word [edi + 0x14]
lea eax, [edi + eax + 0x18]
mov dword [ebp - 0x28], eax
mov ecx, dword [esi + 8]
lea edx, [ebp - 0x20]
push edx
sub eax, ecx
push eax
call fcn.010eb02c
test eax, eax
jl 0x10ec62d
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x28]
push eax
push ebx
push dword [ebp - 0x20]
mov ecx, esi
call fcn.010ebfae
mov dword [ebp - 0x1c], eax
test eax, eax
jl 0x10ec906
and dword [ebp - 0x24], 0
mov ebx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x24], eax
jae 0x10ec884
mov eax, dword [ebp - 0x24]
mov ecx, ebx
imul eax, eax, 0x28
lea ebx, [ecx + eax]
cmp dword [esi + 0x20], 0
je 0x10ec83d
mov eax, dword [ebx + 0xc]
jmp 0x10ec840
mov eax, dword [ebx + 0x14]
push 0
push 0
push dword [ebx + 0x10]
push eax
mov ecx, esi
call fcn.010ec0c8
mov dword [ebp - 0x1c], eax
test eax, eax
jl 0x10ec906
cmp dword [esi + 0x20], 0
je 0x10ec86d
mov eax, dword [ebp - 0x30]
dec eax
test dword [ebx + 0xc], eax
jne 0x10ec62d
mov ebx, dword [ebx + 0x10]
mov eax, dword [ebp - 0x30]
lea eax, [ebx + eax - 1]
cmp eax, ebx
jb 0x10ec62d
inc dword [ebp - 0x24]
jmp 0x10ec81c
imul eax, eax, 0x28
add eax, ebx
cmp dword [esi + 0x20], 0
je 0x10ec894
mov ecx, dword [eax - 0x1c]
jmp 0x10ec897
mov ecx, dword [eax - 0x14]
mov dword [ebp - 0x2c], ecx
mov eax, dword [eax - 0x18]
lea edx, [ebp - 0x2c]
push edx
push eax
push ecx
call fcn.010504a8
mov dword [ebp - 0x1c], eax
test eax, eax
jl 0x10ec906
mov eax, dword [ebp - 0x38]
mov dword [esi + 0x24], eax
mov eax, dword [ebp - 0x48]
mov dword [esi + 0x28], eax
mov eax, dword [ebp - 0x44]
mov dword [esi + 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 0x30]
mov dword [esi + 0x1c], eax
mov eax, dword [ebp - 0x34]
mov dword [esi + 0x38], eax
mov dword [esi + 0x3c], edi
mov dword [esi + 0x40], ebx
mov eax, dword [ebp - 0x3c]
mov dword [esi + 0x44], eax
jmp 0x10ec906
mov dword [ebp - 4], 0xfffffffe
cmp dword [ebp - 0x1c], 0
jge 0x10ec93a
mov eax, dword [0x1426c54]
cmp eax, 0x1426c54
je 0x10ec93a
test byte [eax + 0x3c], 2
je 0x10ec93a
push dword [ebp - 0x1c]
push 0x1010de4
push 0x14
push dword [eax + 0x34]
push dword [eax + 0x30]
call fcn.01043c41
mov eax, dword [ebp - 0x1c]
call fcn.0104300a
ret