Function at 0x1006c1f0
Capabilities:
Enumerate pe sections

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3c
push ebx
push esi
mov ebx, ecx
push edi
mov dword [esp + 0x44], ebx
call fcn.1006bc30
cmp dword [ebx + 0x64], 0
mov esi, eax
mov edi, edx
jne 0x1006c27d
mov eax, dword [ebx + 0x3c]
or dword [ebx + 8], 0x80000000
mov esi, dword [ebx + 0x108]
mov edi, dword [ebx + eax*4 + 0x108]
cmp esi, edi
jae 0x1006c7d5
cmp byte [esi + 0xdc], 1
jne 0x1006c24f
mov eax, dword [esi + 0x38]
mov eax, dword [eax + 0x7398]
test eax, eax
je 0x1006c24f
push eax
call dword [0x100b413c]
cmp byte [esi + 0xdd], 1
jne 0x1006c26c
mov eax, dword [esi + 0x38]
mov eax, dword [eax + 0x7398]
test eax, eax
je 0x1006c26c
push eax
call dword [0x100b413c]
add esi, 0x118
cmp esi, edi
jb 0x1006c232
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebx + 0x68]
add esi, 0xa
cdq
push edx
push eax
push 0
adc edi, 0
mov dword [esp + 0x48], esi
push 0x83d60
push edi
push esi
mov dword [esp + 0x4c], edi
call fcn.1006fe10
mov dword [esp + 0x2c], eax
lea eax, [ebx + 0x104]
mov dword [esp + 0x30], edx
mov dword [esp + 0x24], eax
mov dword [esp + 0x40], eax
mov eax, dword [ebx + 0x68]
cdq
push edx
push eax
push 0
push 0x83d60
push edi
push esi
call fcn.1006fe10
mov ecx, eax
mov dword [esp + 0x18], edx
push dword [esp + 0x18]
mov eax, dword [ebx + 0xa8]
or edx, 0xffffffff
mov dword [esp + 0x20], edx
mov edi, SysReAllocString
cdq
push ecx
mov esi, edx
mov dword [esp + 0x28], edi
mov edi, eax
mov dword [esp + 0x1c], ecx
push esi
push edi
mov dword [esp + 0x38], 0
call fcn.100a8850
push 0
push 0xcdfe600
push edx
push eax
call fcn.100a87a0
push dword [esp + 0x30]
mov dword [esp + 0x3c], eax
push dword [esp + 0x30]
push esi
push edi
call fcn.100a8850
push 0
push 0xcdfe600
push edx
push eax
call fcn.100a87a0
mov edx, dword [esp + 0x38]
sub edx, eax
je 0x1006c3b3
mov edi, dword [esp + 0x40]
nop dword [eax]
mov ecx, dword [ebx + 0xb4]
cmp ecx, dword [ebx + 0xb8]
jge 0x1006c3b3
and ecx, 3
add ecx, 0xc
shl ecx, 4
add ecx, ebx
movzx eax, word [ecx + 6]
mov esi, eax
cmp esi, edx
jge 0x1006c3a7
sub dword [ebx + 0xb0], esi
sub edx, esi
mov esi, dword [ecx]
xor eax, eax
mov word [ecx + 6], ax
mov dword [esp + 0x24], edi
cmp esi, edx
jg 0x1006c399
sub dword [ebx + 0xb0], esi
mov eax, dword [edi]
add eax, dword [ecx]
mov dword [edi], eax
sub edx, dword [ecx]
inc dword [ebx + 0xb4]
test edx, edx
jne 0x1006c340
mov dword [esp + 0x24], edi
jmp 0x1006c3b3
sub esi, edx
mov dword [ecx], esi
sub dword [ebx + 0xb0], edx
add dword [edi], edx
jmp 0x1006c3b3
sub eax, edx
mov word [ecx + 6], ax
sub dword [ebx + 0xb0], edx
push dword [esp + 0x18]
mov eax, dword [ebx + 0x100]
push dword [esp + 0x18]
cdq
mov edi, edx
mov ebx, eax
push edi
push ebx
call fcn.100a8850
push 0
push 0xcdfe600
push edx
push eax
call fcn.100a87a0
push dword [esp + 0x30]
mov esi, eax
push dword [esp + 0x30]
push edi
push ebx
call fcn.100a8850
push 0
push 0xcdfe600
push edx
push eax
call fcn.100a87a0
mov ecx, dword [esp + 0x24]
sub eax, esi
add dword [ecx], eax
jns 0x1006c40a
mov dword [ecx], 0
mov ebx, dword [esp + 0x44]
xor ecx, ecx
mov dword [esp + 0x10], ecx
cmp dword [ebx + 0x3c], ecx
jle 0x1006c64c
lea eax, [ebx + 0x108]
mov dword [esp + 0x38], eax
nop word [eax + eax]
mov esi, dword [eax]
test esi, esi
je 0x1006c642
cmp byte [esi + 0xde], 0
jne 0x1006c478
cmp byte [esi + 0xdc], 0
mov ecx, esi
push dword [esp + 0x30]
push dword [esp + 0x30]
push dword [esp + 0x20]
push dword [esp + 0x20]
je 0x1006c465
call fcn.1006b790
jmp 0x1006c46a
call fcn.1006ba90
cmp dword [esi + 0x14], 0
mov ecx, dword [esp + 0x10]
je 0x1006c52e
mov edx, dword [esp + 0x18]
cmp dword [esi + 0x2c], edx
jg 0x1006c490
jl 0x1006c48c
mov eax, dword [esp + 0x14]
cmp dword [esi + 0x28], eax
ja 0x1006c490
or dword [ebx + 8], 2
cmp byte [esi + 0xdc], 0
je 0x1006c4e9
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
add ecx, 0x19bfcc0
mov edi, dword [esi + 0x2c]
mov edx, dword [esi + 0x28]
adc eax, 0
cmp edi, eax
jg 0x1006c52a
jl 0x1006c4ba
cmp edx, ecx
ja 0x1006c52a
mov ecx, dword [esi + 0x40]
mov eax, 0x200
sub eax, ecx
cmp eax, 0xbc
jl 0x1006c52a
mov eax, dword [esi + 0xb0]
sub eax, dword [esi + 0xcc]
sub eax, dword [esi + 0xac]
sub eax, ecx
cmp eax, 0xbc
jmp 0x1006c5b2
cmp byte [esi + 0xdd], 0
je 0x1006c552
cmp byte [esi + 0xd9], 0
je 0x1006c54c
cmp byte [esi + 0xd8], 0
je 0x1006c54c
mov ecx, dword [esi + 0xe0]
cmp dword [ecx + 0x14], 0
je 0x1006c54c
mov eax, dword [ecx + 0x28]
cmp eax, dword [esi + 0x28]
jne 0x1006c54c
mov eax, dword [ecx + 0x2c]
cmp eax, dword [esi + 0x2c]
jne 0x1006c54c
mov eax, dword [esp + 0x14]
mov dword [ecx + 0x20], eax
mov dword [ecx + 0x24], edx
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x38]
inc ecx
add eax, 4
mov dword [esp + 0x10], ecx
mov dword [esp + 0x38], eax
cmp ecx, dword [ebx + 0x3c]
jl 0x1006c430
jmp 0x1006c64c
mov ecx, dword [esp + 0x14]
jmp 0x1006c571
cmp byte [esi + 0xdf], 0
je 0x1006c5df
cmp dword [esi + 0x24], edx
jg 0x1006c52e
mov eax, dword [esp + 0x14]
jl 0x1006c56f
cmp dword [esi + 0x20], eax
ja 0x1006c52e
mov ecx, eax
mov eax, dword [esp + 0x18]
add ecx, 0x19bfcc0
mov edi, dword [esi + 0x2c]
mov edx, dword [esi + 0x28]
adc eax, 0
cmp edi, eax
jg 0x1006c52a
jl 0x1006c58e
cmp edx, ecx
ja 0x1006c52a
mov ecx, dword [esi + 0x40]
mov eax, 0x200
sub eax, ecx
cmp eax, 0xbc
jl 0x1006c52a
mov eax, dword [esi + 0xb0]
sub eax, dword [esi + 0xcc]
sub eax, ecx
cmp eax, 0xb8
jl 0x1006c52a
cmp edi, dword [esp + 0x20]
jg 0x1006c52a
jl 0x1006c5ce
cmp edx, dword [esp + 0x1c]
jae 0x1006c52a
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], edi
mov dword [esp + 0x28], esi
jmp 0x1006c52a
cmp byte [esi + 0xde], 0
je 0x1006c52e
mov ecx, dword [esp + 0x14]
add ecx, dword [ebx + 0xa0]
mov eax, dword [ebx + 0xa4]
adc eax, dword [esp + 0x18]
mov edi, dword [esi + 0x2c]
mov edx, dword [esi + 0x28]
cmp edi, eax
jg 0x1006c52a
jl 0x1006c618
cmp edx, ecx
ja 0x1006c52a
mov ecx, dword [ebx + 0xb0]
mov eax, 0x200
sub eax, ecx
cmp eax, 0xbc
jl 0x1006c52a
mov eax, 0x600
sub eax, ecx
mov ecx, dword [esp + 0x24]
sub eax, dword [ecx]
jmp 0x1006c5ad
mov dword [ebx + 0x88], 0x14
cmp dword [ebx + 0x88], 0
jne 0x1006c731
mov eax, dword [esp + 0x28]
test eax, eax
je 0x1006c67b
push dword [esp + 0x18]
mov edi, dword [esp + 0x18]
mov edx, eax
push edi
mov ecx, ebx
call fcn.1006b110
inc dword [ebx + 0x84]
jmp 0x1006c6cb
cmp byte [ebx + 0x38], 0
je 0x1006c6c7
mov eax, dword [ebx + 0x7c]
push 0xb8
push 0xff
mov byte [eax], 0x47
inc dword [ebx + 0x7c]
mov eax, dword [ebx + 0x7c]
mov byte [eax], 0x1f
inc dword [ebx + 0x7c]
mov eax, dword [ebx + 0x7c]
mov byte [eax], 0xff
inc dword [ebx + 0x7c]
mov eax, dword [ebx + 0x7c]
mov byte [eax], 0x10
inc dword [ebx + 0x7c]
push dword [ebx + 0x7c]
call fcn.100a81ac
add dword [ebx + 0x7c], 0xb8
add esp, 0xc
inc dword [ebx + 0x84]
mov edi, dword [esp + 0x14]
mov eax, dword [ebx + 0x7c]
mov ecx, dword [ebx + 0x80]
sub eax, ecx
cmp eax, 0xf6c
jne 0x1006c704
mov esi, dword [ebx + 0x44]
test esi, esi
je 0x1006c704
push dword [ebx + 0x48]
add dword [ebx + 0x6c], eax
mov dword [ebx + 0x10], ecx
mov ecx, esi
push ebx
mov dword [ebx + 0x14], eax
call dword [0x100b4244]
call esi
lea eax, [ebx + 0x2a8]
mov dword [ebx + 0x7c], eax
mov esi, dword [esp + 0x3c]
mov eax, dword [esp + 0x18]
add esi, 0xbc
mov dword [esp + 0x2c], edi
adc dword [esp + 0x34], 0
cmp dword [ebx + 0x64], 0
mov edi, dword [esp + 0x34]
mov dword [esp + 0x3c], esi
mov dword [esp + 0x30], eax
jne 0x1006c2b5
mov eax, dword [ebx + 0x7c]
mov ecx, dword [ebx + 0x80]
cmp eax, ecx
je 0x1006c767
mov esi, dword [ebx + 0x44]
test esi, esi
je 0x1006c767
push dword [ebx + 0x48]
sub eax, ecx
mov dword [ebx + 0x10], ecx
add dword [ebx + 0x6c], eax
mov ecx, esi
push ebx
mov dword [ebx + 0x14], eax
call dword [0x100b4244]
call esi
lea eax, [ebx + 0x2a8]
mov dword [ebx + 0x7c], eax
or dword [ebx + 8], 0x80000000
xor edi, edi
cmp dword [ebx + 0x3c], edi
jle 0x1006c7d5
lea eax, [ebx + 0x108]
mov dword [esp + 0x30], eax
nop
mov esi, dword [eax]
test esi, esi
je 0x1006c7c8
cmp byte [esi + 0xdc], 1
jne 0x1006c7a7
mov eax, dword [esi + 0x38]
mov eax, dword [eax + 0x7398]
test eax, eax
je 0x1006c7a3
push eax
call dword [0x100b413c]
mov eax, dword [esp + 0x30]
cmp byte [esi + 0xdd], 1
jne 0x1006c7c8
mov eax, dword [esi + 0x38]
mov eax, dword [eax + 0xfc]
test eax, eax
je 0x1006c7c4
push eax
call dword [0x100b413c]
mov eax, dword [esp + 0x30]
inc edi
add eax, 4
mov dword [esp + 0x30], eax
cmp edi, dword [ebx + 0x3c]
jl 0x1006c780
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret