Function at 0x100080b0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x470
push ebx
push esi
lea ecx, [eax + 0x1482]
push edi
mov edi, eax
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x38], ecx
cmp eax, ecx
ja 0x1000816b
mov edx, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x38]
cmp edi, 0x4801
ja 0x1000833d
je 0x10008329
cmp edi, 0x45a9
ja 0x1000825c
je 0x1000824f
cmp edi, 0x447d
ja 0x10008209
je 0x100081fc
cmp edi, 0x43e7
ja 0x100081db
je 0x100081ce
cmp edi, 0x2a85
je 0x1000814a
cmp edi, 0x439c
jne 0x1000868c
mov edx, str.eoACaSittrrmnget
mov eax, 0x65
mov dword [ebp - 0xc], edx
mov word [ebp - 0x5c], ax
jmp 0x1000868c
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx]
cmp eax, 0xffffffff
je 0x1000819b
test eax, eax
jne 0x100081b2
mov esi, 0x656d
mov eax, esi
sub eax, 0x656d
je 0x10008175
sub eax, 0x30
jne 0x10008190
mov eax, dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [edx + 9], edx
and dword [ebx + ecx*4], 0x458b0855
or al, 0x52
push eax
call fcn.100346a0
mov edx, dword [ebp - 0xc]
add esp, 8
mov dword [ebp - 0x14], eax
add esi, 0x30
cmp esi, 0x659d
jbe 0x1000815d
mov eax, 0x96f
cmp eax, eax
je 0x100086a5
add eax, 0x20
cmp eax, 0x96f
jbe 0x100081a2
mov eax, 0x248a
cmp eax, eax
je 0x100086b7
add eax, 0x34
cmp eax, 0x248a
jbe 0x100081b9
jmp 0x1000868c
mov cx, word [edx + 2]
mov word [ebp - 0x50], cx
jmp 0x1000868c
cmp edi, 0x4432
jne 0x1000868c
mov ax, word [edx + 4]
mov cx, word [edx + 6]
mov word [ebp - 0x54], ax
mov word [ebp - 0x60], cx
jmp 0x1000868c
mov ax, word [edx + 8]
mov word [ebp - 0x5a], ax
jmp 0x1000868c
mov eax, edi
sub eax, 0x44c8
je 0x10008242
sub eax, 0x4b
je 0x10008235
sub eax, 0x4b
jne 0x1000868c
mov cx, word [edx + 0xe]
mov ax, word [edx + 0x10]
mov word [ebp - 0x58], cx
mov word [ebp - 0x4a], ax
jmp 0x1000868c
mov cx, word [edx + 0xc]
mov word [ebp - 0x46], cx
jmp 0x1000868c
mov ax, word [edx + 0xa]
mov word [ebp - 0x4c], ax
jmp 0x1000868c
mov cx, word [edx + 0x12]
mov word [ebp - 0x48], cx
jmp 0x1000868c
cmp edi, 0x46d5
ja 0x100082c1
je 0x100082ac
mov eax, edi
sub eax, 0x45f4
je 0x1000829f
sub eax, 0x4b
je 0x10008292
sub eax, 0x4b
jne 0x1000868c
mov ax, word [edx + 0x18]
mov cx, word [edx + 0x1a]
mov word [ebp - 0x44], ax
mov word [ebp - 0x42], cx
jmp 0x1000868c
mov ax, word [edx + 0x16]
mov word [ebp - 0x4e], ax
jmp 0x1000868c
mov cx, word [edx + 0x14]
mov word [ebp - 0x5e], cx
jmp 0x1000868c
mov ax, word [edx + 0x1c]
mov cx, word [edx + 0x1e]
mov word [ebp - 0x56], ax
mov word [ebp - 0x52], cx
jmp 0x1000868c
mov eax, edi
sub eax, 0x4720
je 0x1000831a
sub eax, 0x4b
je 0x100082f0
sub eax, 0x4b
jne 0x1000868c
lea edx, [ebp - 0x26c]
push edx
call dword [sym.imp.KERNEL32.dll_AddAtomW]
movzx eax, ax
mov dword [ebp - 0x30], eax
jmp 0x10008689
xor eax, eax
jmp 0x10008300
movzx ecx, word [ebp + eax - 0x60]
mov word [ebp + eax - 0x26c], cx
add eax, 2
test cx, cx
jne 0x10008300
jmp 0x1000868c
xor ecx, ecx
mov word [ebp - 0x40], cx
mov byte [ebp - 5], 1
jmp 0x1000868c
cmp word [ebp - 0x30], 0
jne 0x1000868c
mov byte [ebp - 5], 0
jmp 0x1000868c
cmp edi, 0x7279
ja 0x10008553
je 0x1000853e
cmp edi, 0x714d
ja 0x100084ef
je 0x100084db
mov eax, edi
sub eax, 0x484c
je 0x10008389
sub eax, 0x4b
je 0x1000837d
sub eax, 0x4b
je 0x1000816b
jmp 0x1000868c
mov dword [ebp - 0x14], 0
jmp 0x1000868c
cmp byte [ebp - 5], 0
je 0x1000868c
mov edi, 0x4633
jmp 0x100083a0
mov eax, edi
sub eax, 0x4633
je 0x100083c1
sub eax, 0xc
jne 0x100084c4
mov edx, dword [ebp - 0x30]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
jmp 0x100084c4
lea eax, [ebp - 0x26c]
push eax
call dword [sym.imp.KERNEL32.dll_FindAtomW]
cmp ax, word [ebp - 0x30]
je 0x100084c4
mov esi, 0x23a3
lea ecx, [ecx]
cmp esi, 0x2457
ja 0x10008459
je 0x10008451
lea eax, [esi - 0x23a3]
cmp eax, 0x96
ja case.0x1000846b.9334
movzx ecx, byte [eax + 0x100086e8]
jmp dword [ecx*4 + 0x100086cc]
mov dl, byte [ebx + 5]
mov byte [ebp - 0x28], dl
jmp case.0x1000846b.9334
mov ebx, str.dt_n_Ao_nmiw_nto
mov byte [ebp - 0x1c], 0x64
jmp case.0x1000846b.9334
mov al, byte [ebx + 6]
mov cl, byte [ebx + 7]
mov byte [ebp - 0x26], al
mov byte [ebp - 0x24], cl
jmp case.0x1000846b.9334
mov dl, byte [ebx + 4]
mov byte [ebp - 0x1b], dl
jmp case.0x1000846b.9334
mov al, byte [ebx + 1]
mov byte [ebp - 0x27], al
jmp case.0x1000846b.9334
mov cl, byte [ebx + 2]
mov dl, byte [ebx + 3]
mov byte [ebp - 0x20], cl
mov byte [ebp - 0x23], dl
jmp case.0x1000846b.9334
mov al, byte [ebx + 8]
mov byte [ebp - 0x1d], al
jmp case.0x1000846b.9334
lea eax, [esi - 0x2475]
cmp eax, 0x78
ja case.0x1000846b.9334
movzx ecx, byte [eax + 0x10008798]
jmp dword [ecx*4 + 0x10008780]
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x46c]
push eax
mov byte [ebp - 0x19], 0
call fcn.1003ddf8
add esp, 8
jmp case.0x1000846b.9334
mov cl, byte [ebx + 0xb]
mov dl, byte [ebx + 0xc]
mov byte [ebp - 0x1f], cl
mov byte [ebp - 0x1a], dl
jmp case.0x1000846b.9334
mov al, byte [ebx + 9]
mov cl, byte [ebx + 0xa]
mov byte [ebp - 0x25], al
mov byte [ebp - 0x1e], cl
jmp case.0x1000846b.9334
mov dl, byte [ebx + 0xe]
mov byte [ebp - 0x22], dl
jmp case.0x1000846b.9334
mov al, byte [ebx + 0xd]
mov byte [ebp - 0x21], al
add esi, 0x1e
cmp esi, 0x24ed
jbe 0x100083e0
add edi, 0xc
cmp edi, 0x463f
jbe 0x100083a0
mov edi, dword [ebp - 0x3c]
jmp 0x10008689
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x34], eax
add eax, 0x3c
mov dword [ebp - 0x10], eax
jmp 0x1000868c
mov eax, edi
sub eax, 0x7198
je 0x1000852c
sub eax, 0x4b
je 0x10008514
sub eax, 0x4b
jne 0x1000868c
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov dword [ebp - 0x18], eax
jmp 0x1000868c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 0x1c]
mov eax, dword [ebp + 0xc]
push edx
push eax
call fcn.10008e80
mov dword [ebp - 0x2c], eax
jmp 0x10008686
mov ecx, dword [ebp - 0x10]
cmp dword [ecx + 4], 0
je 0x1000816b
jmp 0x1000868c
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 0xc]
call fcn.10037910
mov edx, dword [ebp - 0x18]
mov dword [edx], eax
jmp 0x10008689
cmp edi, 0x73a5
ja 0x10008646
je 0x10008632
mov eax, edi
sub eax, 0x72c4
je 0x10008624
sub eax, 0x4b
je 0x1000860d
sub eax, 0x4b
jne 0x1000868c
mov eax, dword [ebp - 0x10]
mov edx, dword [eax + 0x10]
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 0xc], edx
mov edx, dword [eax + 0x14]
mov dword [ecx + 0x10], edx
mov eax, dword [eax + 0x18]
mov dword [ecx + 0x14], eax
mov ecx, dword [ebp - 0x34]
cmp byte [ecx + 0x38], 0
je 0x100085df
mov edx, dword [ebp + 0xc]
push 0x96
push 0x66
push 0x64
push 0x65
push 0x63
push 0x5f
push edx
call fcn.10024f50
add esp, 4
push eax
call fcn.1003b070
add esp, 0x1c
test al, al
je 0x100085df
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp + 0xc]
push eax
push ecx
call fcn.1000c2e0
jmp 0x10008686
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
cmp dword [eax + 4], 0
je 0x100085f8
mov eax, edx
push eax
call fcn.10024f50
add esp, 4
jmp 0x100085fa
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp + 0xc]
push ecx
push eax
push edx
call fcn.10023030
add esp, 0xc
jmp 0x10008689
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax + 0x5c]
mov eax, dword [ecx + 0x10]
mov ecx, dword [ebp - 0x10]
sub eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 8], eax
jmp 0x1000868c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x18]
mov dword [eax + 4], ecx
jmp 0x1000868c
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
push ecx
push eax
call fcn.1003db30
add esp, 8
jmp 0x1000868c
mov eax, edi
sub eax, 0x73f0
je 0x10008674
sub eax, 0x4b
je 0x10008665
sub eax, 0x4b
jne 0x1000868c
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x1c], 5
jmp 0x1000868c
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
push edx
push eax
call fcn.1002c460
jmp 0x10008686
mov bl, 0x5c
stosb byte es:[edi], al
adc esp, dword [edx - 0x740fb275]
push ebp
or al, 0x51
push edx
call fcn.1000b2e0
add esp, 8
mov edx, dword [ebp - 0xc]
add edi, 0x4b
mov dword [ebp - 0x3c], edi
cmp edi, dword [ebp - 0x38]
jbe 0x100080d8
mov eax, dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.100318a0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
call fcn.10021b90
pop edi
pop esi
movzx eax, al
pop ebx
mov esp, ebp
pop ebp
ret