Function at 0x101c29e0
Capabilities:
Enumerate pe sections

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, eax
test ebx, ebx
jne 0x101c2a4c
mov eax, dword [esi + 0xb288]
push eax
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
push 0x24
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
add esp, 8
mov dword [esi + 0xb288], eax
test eax, eax
jne 0x101c2a28
push 0x101de948
lea ecx, [ebp + 0xc]
push ecx
mov dword [ebp + 0xc], 0x8007000e
call sub.msvcrt.dll__CxxThrowException
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], ecx
mov dword [eax + 0x18], ecx
pop esi
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x20], ecx
pop ebx
mov esp, ebp
pop ebp
ret 8
push ebx
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [esi + 0xb288], eax
test eax, eax
jne 0x101c2a74
push 0x101de948
lea edx, [ebp + 0xc]
push edx
mov dword [ebp + 0xc], 0x8007000e
call sub.msvcrt.dll__CxxThrowException
mov ecx, dword [ebp + 8]
push edi
push ebx
push ecx
push eax
call sub.msvcrt.dll_memcpy
mov edi, dword [esi + 0xb288]
mov edx, dword [edi + 0x10]
add edx, edi
mov dword [esi + 0xb28c], edx
mov eax, dword [edi + 0x14]
add eax, edi
mov dword [esi + 0xb290], eax
mov ecx, dword [edi + 0x18]
add ecx, edi
add esp, 0xc
mov dword [esi + 0xb294], ecx
cmp dword [edi], 0xffff
mov dword [ebp - 4], edi
jbe 0x101c2acb
push 0x10096734
call fcn.101c3320
add esp, 4
inc dword [esi + 0x14]
mov dword [edi], 0xffff
cmp dword [edi + 4], 0xffff
jbe 0x101c2aeb
push 0x10096764
call fcn.101c3320
add esp, 4
inc dword [esi + 0x14]
mov dword [edi + 4], 0xffff
cmp dword [edi + 0xc], 0x100
jbe 0x101c2b0b
push 0x10096790
call fcn.101c3320
add esp, 4
inc dword [esi + 0x14]
mov dword [edi + 0xc], pe_nt_image_headers32
cmp dword [edi + 4], 0
jne 0x101c2b21
push 0x100967c8
call fcn.101c3320
add esp, 4
inc dword [esi + 0x14]
mov eax, dword [esi + 0xb290]
mov edx, dword [esi + 0xb28c]
mov ecx, dword [esi + 0xb294]
mov dword [ebp - 8], eax
mov eax, dword [edi + 0x10]
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x1c], edx
mov dword [ebp + 8], ecx
cmp eax, ebx
ja 0x101c2b55
mov edx, dword [edi]
shl edx, 4
add edx, eax
cmp edx, ebx
jbe 0x101c2b72
push 0x100967f8
call fcn.101c3320
add esp, 4
inc dword [esi + 0x14]
mov dword [edi + 0x10], 0
mov dword [edi], 0
mov ecx, dword [edi + 0x14]
cmp ecx, ebx
ja 0x101c2b86
mov eax, dword [edi + 4]
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
cmp ecx, ebx
jbe 0x101c2b9e
push 0x10096830
call fcn.101c3320
inc dword [esi + 0x14]
add esp, 4
xor eax, eax
mov dword [edi + 0x14], eax
mov dword [edi + 4], eax
mov eax, dword [edi + 0x18]
cmp eax, ebx
ja 0x101c2bb1
mov edx, dword [edi + 8]
shl edx, 4
add edx, eax
cmp edx, ebx
jbe 0x101c2bc9
push 0x10096864
call fcn.101c3320
inc dword [esi + 0x14]
add esp, 4
xor eax, eax
mov dword [edi + 0x18], eax
mov dword [edi + 8], eax
cmp dword [edi + 8], 0
mov dword [ebp - 0xc], 0
jbe 0x101c2ce3
mov ebx, dword [ebp + 8]
add ebx, 4
cmp dword [ebx], 0
jne 0x101c2bf9
mov eax, dword [ebp - 0xc]
push eax
push 0x1009689c
call fcn.101c3320
add esp, 8
inc dword [esi + 0x14]
mov edx, dword [ebx + 4]
mov eax, dword [ebp + 0xc]
mov edi, dword [ebx + 8]
cmp edx, eax
ja 0x101c2c2b
mov ecx, dword [ebx]
lea edx, [edx + ecx*2]
cmp edx, eax
ja 0x101c2c2b
cmp edi, eax
ja 0x101c2c2b
lea edx, [edi + ecx*4]
cmp edx, eax
ja 0x101c2c2b
cmp ecx, 0xffff
ja 0x101c2c2b
cmp dword [ebx - 4], 0x100
jbe 0x101c2c48
push 0x10096830
call fcn.101c3320
add esp, 4
inc dword [esi + 0x14]
mov dword [ebx + 4], 0
mov dword [ebx], 0
mov eax, dword [ebx + 4]
add eax, dword [ebp - 4]
cmp dword [ebx], 0
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0
jbe 0x101c2cc7
mov dword [ebp + 8], eax
mov ecx, dword [ebp + 8]
movzx edx, word [ecx]
mov eax, dword [ebp - 4]
cmp edx, dword [eax + 4]
jb 0x101c2c7e
push 0x10096830
call fcn.101c3320
add esp, 4
inc dword [esi + 0x14]
mov eax, dword [ebp - 0x10]
xor edi, edi
test eax, eax
jbe 0x101c2cbb
jmp 0x101c2c90
mov ecx, dword [ebp - 0x18]
mov dx, word [ecx + edi*2]
mov ecx, dword [ebp + 8]
cmp dx, word [ecx]
jne 0x101c2cb6
mov edx, dword [ebp - 0xc]
push edx
push 0x100968d8
call fcn.101c3320
mov eax, dword [ebp - 0x10]
add esp, 8
inc dword [esi + 0x14]
inc edi
cmp edi, eax
jb 0x101c2c90
add dword [ebp + 8], 2
inc eax
mov dword [ebp - 0x10], eax
cmp eax, dword [ebx]
jb 0x101c2c60
mov eax, dword [ebx - 4]
add dword [ebp - 0x14], eax
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
inc eax
add ebx, 0x10
mov dword [ebp - 0xc], eax
cmp eax, dword [ecx + 8]
jb 0x101c2be0
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
cmp edx, dword [eax + 0xc]
je 0x101c2cfe
push 0x10096924
call fcn.101c3320
add esp, 4
inc dword [esi + 0x14]
mov ecx, dword [ebp - 4]
xor eax, eax
mov dword [ebp + 8], eax
cmp dword [ecx + 4], eax
jbe 0x101c2da8
mov ebx, dword [ebp - 8]
add ebx, 6
cmp word [ebx - 2], 0
mov edi, dword [ebx - 6]
jne 0x101c2d3b
mov edx, 0x1000
cmp word [ebx], dx
ja 0x101c2d3b
mov ecx, 0x80
cmp word [ebx + 2], cx
ja 0x101c2d3b
cmp word [ebx + 4], 0x10
jbe 0x101c2d4c
push eax
push 0x10096960
call fcn.101c3320
add esp, 8
inc dword [esi + 0x14]
mov eax, dword [ebp + 0xc]
cmp edi, eax
jb 0x101c2d5a
push 0x100969a4
jmp 0x101c2d87
mov edx, dword [ebp - 4]
lea ecx, [edi + edx]
sub eax, edi
test ecx, ecx
je 0x101c2d82
cmp eax, 0x7fffffff
ja 0x101c2d82
test eax, eax
je 0x101c2d82
cmp byte [ecx], 0
je 0x101c2d7e
inc ecx
sub eax, 1
jne 0x101c2d71
jmp 0x101c2d82
test eax, eax
jne 0x101c2d92
push 0x100969dc
call fcn.101c3320
add esp, 4
inc dword [esi + 0x14]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
inc eax
add ebx, 0xc
mov dword [ebp + 8], eax
cmp eax, dword [ecx + 4]
jb 0x101c2d15
mov edx, dword [ebp - 4]
cmp dword [edx], 0
mov dword [ebp - 0x14], 0
jbe 0x101c2f69
mov edi, dword [ebp - 0x1c]
add edi, 8
mov dword [ebp - 0xc], edi
movzx eax, word [edi - 4]
mov ecx, dword [ebp - 4]
mov ebx, dword [edi - 8]
mov dword [ebp - 0x18], ebx
cmp eax, dword [ecx + 4]
jb 0x101c2deb
push 0x10096a10
call fcn.101c3320
add esp, 4
inc dword [esi + 0x14]
jmp 0x101c2f08
movzx edx, word [edi - 2]
mov ecx, 0xffff
mov byte [ebp + 0xb], 0
cmp dx, cx
jbe 0x101c2e01
mov byte [ebp + 0xb], 1
movzx ecx, word [edi]
mov ebx, 0xffff
cmp cx, bx
jne 0x101c2e26
mov ecx, ebx
cmp word [edi + 2], cx
jne 0x101c2e5b
mov ebx, dword [ebp - 8]
lea ecx, [eax + eax*2]
cmp word [ebx + ecx*4 + 6], 0
je 0x101c2e5f
jmp 0x101c2e5b
cmp cx, 0xe
jae 0x101c2e5b
movzx ecx, word [edi + 2]
mov ebx, 0x1000
cmp cx, bx
jae 0x101c2e5b
mov ebx, dword [ebp - 8]
lea edi, [eax + eax*2]
movzx edi, word [ebx + edi*4 + 6]
movzx ebx, dx
imul edi, ebx
movzx ecx, cx
add edi, ecx
cmp edi, 0x1000
mov edi, dword [ebp - 0xc]
jle 0x101c2e5f
mov byte [ebp + 0xb], 1
movzx ecx, word [edi + 4]
mov ebx, 0xffff
cmp cx, bx
jne 0x101c2e7d
mov ebx, dword [ebp - 8]
lea ecx, [eax + eax*2]
cmp word [ebx + ecx*4 + 8], 0
je 0x101c2eac
jmp 0x101c2ea8
mov ebx, 0x80
cmp cx, bx
jae 0x101c2ea8
mov ebx, dword [ebp - 8]
lea edi, [eax + eax*2]
movzx edi, word [ebx + edi*4 + 8]
movzx ebx, dx
imul edi, ebx
movzx ecx, cx
add edi, ecx
cmp edi, 0x80
mov edi, dword [ebp - 0xc]
jle 0x101c2eac
mov byte [ebp + 0xb], 1
movzx ecx, word [edi + 6]
mov ebx, 0xffff
cmp cx, bx
jne 0x101c2eca
lea edx, [eax + eax*2]
mov eax, dword [ebp - 8]
cmp word [eax + edx*4 + 0xa], 0
jne 0x101c2ef1
jmp 0x101c2eeb
cmp cx, 0x10
jae 0x101c2ef1
mov ebx, dword [ebp - 8]
lea eax, [eax + eax*2]
movzx eax, word [ebx + eax*4 + 0xa]
movzx edx, dx
imul eax, edx
movzx ecx, cx
add eax, ecx
cmp eax, 0x10
jg 0x101c2ef1
cmp byte [ebp + 0xb], 0
je 0x101c2f05
mov edx, dword [ebp - 0x14]
push edx
push 0x10096a50
call fcn.101c3320
add esp, 8
inc dword [esi + 0x14]
mov ebx, dword [ebp - 0x18]
mov eax, dword [ebp + 0xc]
cmp ebx, eax
jb 0x101c2f16
push 0x10096a9c
jmp 0x101c2f46
mov ecx, dword [ebp - 4]
add ecx, ebx
sub eax, ebx
test ecx, ecx
je 0x101c2f41
cmp eax, 0x7fffffff
ja 0x101c2f41
test eax, eax
je 0x101c2f41
lea esp, [esp]
cmp byte [ecx], 0
je 0x101c2f3d
inc ecx
sub eax, 1
jne 0x101c2f30
jmp 0x101c2f41
test eax, eax
jne 0x101c2f51
push 0x10096ad8
call fcn.101c3320
add esp, 4
inc dword [esi + 0x14]
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
inc eax
add edi, 0x10
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xc], edi
cmp eax, dword [edx]
jb 0x101c2dc4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8