Function at 0x1006daa4
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x14
mov eax, dword [esp + 0x18]
push ebx
push ebp
push esi
mov ebx, dword [eax + 4]
mov eax, dword [eax + 0x30]
push edi
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x10], eax
lea esi, [eax + ebx]
push esi
call fcn.1006d88a
movzx ebp, ax
pop ecx
test bp, bp
jne 0x1006daf1
lea eax, [esi + 2]
push eax
call fcn.1006d88a
movzx eax, ax
sub eax, 6
pop ecx
cmp edi, eax
jge 0x1006dd5d
movzx eax, byte [esi + edi + 6]
jmp 0x1006dd5f
cmp ebp, 6
jne 0x1006db3f
lea eax, [esi + 6]
push eax
call fcn.1006d88a
movzx ebp, ax
pop ecx
cmp edi, ebp
jb 0x1006dd5d
lea eax, [esi + 8]
push eax
call fcn.1006d88a
movzx eax, ax
add eax, ebp
pop ecx
cmp edi, eax
jae 0x1006dd5d
mov eax, dword [esp + 0x10]
sub edi, ebp
lea eax, [eax + edi*2]
add eax, 0xa
add eax, ebx
push eax
call fcn.1006d88a
pop ecx
movzx eax, ax
jmp 0x1006dd5f
push 2
pop eax
cmp bp, ax
je 0x1006dd5d
cmp ebp, 4
jne 0x1006dcdb
lea eax, [esi + 6]
push eax
call fcn.1006d88a
shr ax, 1
movzx eax, ax
mov dword [esp + 0x1c], eax
lea eax, [esi + 8]
push eax
call fcn.1006d88a
shr ax, 1
movzx eax, ax
mov dword [esp + 0x30], eax
lea eax, [esi + 0xa]
push eax
call fcn.1006d88a
mov ebp, dword [esp + 0x1c]
add esp, 0xc
add ebp, 0xe
movzx eax, ax
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], ebp
cmp edi, 0xffff
jg 0x1006dd5d
lea eax, [esi + 0xc]
push eax
call fcn.1006d88a
movzx eax, ax
shr eax, 1
lea esi, [eax*2]
add esi, ebp
lea eax, [esi + ebx]
push eax
call fcn.1006d88a
movzx eax, ax
cmp edi, eax
pop ecx
cmovge ebp, esi
sub ebp, 2
cmp word [esp + 0x18], 0
pop ecx
je 0x1006dc1b
mov ax, word [esp + 0x28]
shr ax, 1
mov word [esp + 0x28], ax
movzx eax, ax
lea esi, [eax*2]
add esi, ebp
lea eax, [esi + ebx]
push eax
call fcn.1006d88a
movzx eax, ax
cmp edi, eax
mov eax, dword [esp + 0x18]
pop ecx
cmovg ebp, esi
add eax, 0xffff
mov dword [esp + 0x14], eax
test ax, ax
mov ax, word [esp + 0x28]
jne 0x1006dbde
sub ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
add ebp, 2
movzx eax, ax
shr ebp, 1
movzx esi, bp
mov ebp, dword [esp + 0x10]
add eax, esi
mov dword [esp + 0x28], esi
lea eax, [eax*2 + 0x10]
add eax, ebp
add eax, ebx
push eax
call fcn.1006d88a
movzx eax, ax
mov dword [esp + 0x20], eax
pop ecx
cmp edi, eax
jl 0x1006dd5d
lea eax, [ebp + 0xe]
lea eax, [eax + esi*2]
add eax, ebx
push eax
call fcn.1006d88a
movzx eax, ax
pop ecx
cmp edi, eax
jg 0x1006dd5d
mov ecx, dword [esp + 0x18]
movzx eax, cx
imul esi, eax, 3
mov eax, dword [esp + 0x28]
add eax, esi
lea eax, [eax*2 + 0x10]
add eax, ebp
add eax, ebx
push eax
call fcn.1006d88a
movzx eax, ax
pop ecx
test ax, ax
jne 0x1006dcc4
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x28]
movzx ecx, dx
lea eax, [eax + ecx*2]
lea eax, [eax*2 + 0x10]
add eax, ebp
add eax, ebx
push eax
call fcn.1006d84c
add ax, di
jmp 0x1006db36
sub esi, dword [esp + 0x1c]
add eax, ebp
add esi, dword [esp + 0x28]
add esi, edi
lea eax, [eax + esi*2]
add eax, 0x10
jmp 0x1006db2e
push 0xc
pop eax
cmp bp, ax
je 0x1006dce8
cmp ebp, 0xd
jne 0x1006dd5d
and dword [esp + 0x28], 0
lea eax, [esi + 0xc]
push eax
call fcn.1006d867
mov dword [esp + 0x1c], eax
pop ecx
test eax, eax
jle 0x1006dd5d
xor ecx, ecx
mov esi, eax
mov eax, dword [esp + 0x10]
sub esi, ecx
sar esi, 1
add esi, ecx
imul ecx, esi, 0xc
add eax, ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x1c], eax
add eax, 0x10
add eax, ebx
push eax
call fcn.1006d867
mov dword [esp + 0x24], eax
pop ecx
cmp edi, eax
jae 0x1006dd3a
mov ecx, dword [esp + 0x28]
mov eax, esi
mov dword [esp + 0x18], eax
jmp 0x1006dd59
mov eax, dword [esp + 0x1c]
add eax, 0x14
add eax, ebx
push eax
call fcn.1006d867
pop ecx
cmp edi, eax
jbe 0x1006dd67
mov eax, dword [esp + 0x18]
lea ecx, [esi + 1]
mov dword [esp + 0x28], ecx
cmp ecx, eax
jl 0x1006dd01
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
add ecx, 0x18
add eax, ecx
add eax, ebx
push eax
call fcn.1006d867
pop ecx
push 0xc
pop ecx
cmp bp, cx
jne 0x1006dd5f
sub eax, dword [esp + 0x20]
add eax, edi
jmp 0x1006dd5f