Function at 0x100074c0
Capabilities:
Enumerate pe sections

Disassembly:
push esi
mov esi, dword [esp + 8]
push edi
cmp byte [esi + 0x2e8], 0
mov al, byte [esi + 0x2e6]
mov byte [esp + 0xc], al
je 0x100074f4
push 0x1016
push str.d:CodePCAcceleratePro_nortonHookHelperdisasm_libdisasm_x86.c
push str._X86Instruction__rex_b
call fcn.100206ee
mov al, byte [esp + 0x18]
add esp, 0xc
mov cl, al
and cl, 3
cmp cl, 3
jne 0x10007588
mov edx, dword [esp + 0x14]
movzx ecx, word [edx + 6]
sub ecx, 1
je 0x1000756d
sub ecx, 1
je 0x10007552
sub ecx, 2
je 0x10007535
push 0x1024
push str.d:CodePCAcceleratePro_nortonHookHelperdisasm_libdisasm_x86.c
push 0x1004e50c
call fcn.100206ee
add esp, 0xc
xor eax, eax
pop edi
pop esi
ret
mov edi, dword [esp + 0x10]
movzx eax, al
shr eax, 5
add eax, 0x90
mov dword [edx + 0x10], eax
mov eax, edi
or dword [edx], 0x80
pop edi
pop esi
ret
mov edi, dword [esp + 0x10]
movzx eax, al
shr eax, 5
sub eax, 0xffffff80
mov dword [edx + 0x10], eax
mov eax, edi
or dword [edx], 0x80
pop edi
pop esi
ret
mov edi, dword [esp + 0x10]
movzx eax, al
shr eax, 5
add eax, 0x70
mov dword [edx + 0x10], eax
mov eax, edi
or dword [edx], 0x80
pop edi
pop esi
ret
push ebx
test cl, cl
jne 0x10007770
mov cl, al
and cl, 0xe0
cmp cl, 0xc0
jne 0x10007770
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
movsx eax, word [edi]
cdq
mov dword [esi + 0x310], eax
mov dword [esi + 0x314], edx
cmp eax, 0x10000
je 0x100075cf
jb 0x1000767d
cmp eax, 0x7fff0000
jae 0x1000767d
or byte [esi + 0x306], 0x40
test byte [esi + 0x309], 2
je 0x1000762c
mov al, byte [esi + 0x394]
test al, 0x10
jne 0x10007677
cmp dword [esp + 0x20], 0
jne 0x10007622
mov eax, dword [esi + 0x120]
push dword [esi + 0x2f0]
cdq
add eax, dword [esi + 0x110]
adc edx, dword [esi + 0x114]
push edx
push eax
push str._0x_08I64X__ANOMALY:_unexpected_segment_0x_02X_n
call fcn.10011070
mov al, byte [esi + 0x394]
add esp, 0x10
or al, 0x10
mov byte [esi + 0x394], al
jmp 0x10007677
mov ecx, dword [esi + 0x2f0]
cmp ecx, 5
ja case.default.0x10007637
jmp dword [ecx*4 + 0x100079bc]
mov dword [ebx + 8], eax
mov dword [ebx + 0xc], edx
jmp 0x10007677
mov byte [esp + 0x10], cl
push eax
push dword [esp + 0x14]
call fcn.10001750
cdq
add esp, 8
mov dword [ebx + 8], eax
mov dword [ebx + 0xc], edx
jmp 0x10007677
push 0x1034
push str.d:CodePCAcceleratePro_nortonHookHelperdisasm_libdisasm_x86.c
push 0x1004e50c
call fcn.100206ee
add esp, 0xc
or dword [ebx], 0x80000
test dword [ebx], 0x4000
mov edx, dword [esp + 0x1c]
je 0x100076ec
mov al, byte [esi + 0x306]
test al, 2
je 0x100076b4
push 0x1037
push str.d:CodePCAcceleratePro_nortonHookHelperdisasm_libdisasm_x86.c
push str._X86Instruction__HasDstAddressing
call fcn.100206ee
mov al, byte [esi + 0x306]
add esp, 0xc
mov edx, dword [esp + 0x1c]
or al, 2
mov byte [esi + 0x306], al
movzx eax, byte [esi + 0x307]
shr eax, 4
and eax, 3
mov byte [eax + esi + 0x2f7], dl
mov al, byte [esi + 0x307]
lea ecx, [eax + 0x10]
and al, 0xcc
and cl, 0x30
or cl, al
mov al, dl
and al, 3
or cl, al
mov byte [esi + 0x307], cl
test dword [ebx], 0x2000
je 0x1000775a
cmp dword [esi + 0x11c], 0x4001
je 0x10007724
test byte [esi + 0x306], 4
je 0x10007724
push 0x1037
push str.d:CodePCAcceleratePro_nortonHookHelperdisasm_libdisasm_x86.c
push str._X86Instruction__HasSrcAddressing
call fcn.100206ee
mov edx, dword [esp + 0x28]
add esp, 0xc
movzx eax, byte [esi + 0x307]
or byte [esi + 0x306], 4
shr eax, 6
mov byte [eax + esi + 0x2f4], dl
and dl, 3
mov cl, byte [esi + 0x307]
shl dl, 2
lea eax, [ecx + 0x40]
and cl, 0x33
and al, 0xc0
or al, dl
or al, cl
mov byte [esi + 0x307], al
or dword [ebx], 0x10000
add dword [esi + 0x128], 2
add edi, 2
pop ebx
mov eax, edi
pop edi
pop esi
ret
mov edi, dword [esp + 0x14]
movzx ecx, al
mov eax, ecx
and eax, 3
push ebp
mov ebp, dword [esp + 0x1c]
sub eax, 1
je 0x100077c5
sub eax, 1
jne 0x100077dc
movsx eax, word [edi]
cdq
mov dword [esi + 0x310], eax
mov dword [esi + 0x314], edx
cmp eax, 0x10000
je 0x100077ab
jb 0x100077b9
cmp eax, 0x7fff0000
jae 0x100077b9
or dword [ebp], 0x80000
or byte [esi + 0x306], 0x40
add dword [esi + 0x128], 2
add edi, 2
jmp 0x100077dc
movsx eax, byte [edi]
cdq
mov dword [esi + 0x310], eax
mov dword [esi + 0x314], edx
inc dword [esi + 0x128]
inc edi
shr ecx, 5
jmp dword [ecx*4 + 0x100079d4]