Function at 0xc29cec8
Capabilities:
Enumerate pe sections

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ecx
push esi
mov esi, dword [ebp + 0x10]
push edi
xor edi, edi
mov dword [ebp - 4], 1
test esi, esi
jne 0xc29cee7
xor eax, eax
jmp 0xc29d450
mov ecx, dword [ebp + 0xc]
push ebx
push 8
pop ebx
cmp esi, 4
jb 0xc29cf10
cmp dword [ecx], 0x79616c70
jne 0xc29cf10
cmp esi, ebx
jae 0xc29cf06
xor eax, eax
jmp 0xc29d44f
movzx edx, word [ecx + 4]
movzx edi, word [ecx + 6]
jmp 0xc29cf13
push 0xa
pop edx
mov eax, 0x666
cmp edx, eax
ja case.0xc29cf39.20
je case.0xc29cf39.20
lea eax, [edx - 1]
cmp eax, 0x37
ja case.0xc29cf39.20
movzx eax, byte [eax + 0xc29d4c4]
jmp dword [eax*4 + 0xc29d458]
cmp esi, ebx
jb case.0xc29cf39.20
sub esi, ebx
cmp esi, ebx
jmp 0xc29d446
cmp esi, 0x30
jb case.0xc29cf39.20
mov eax, dword [ecx + 0x1c]
lea edx, [eax + 0x30]
cmp edx, 0x30
jb case.0xc29cf39.20
cmp esi, edx
jb case.0xc29cf39.20
mov edx, dword [ecx + 0x2c]
lea edi, [edx + 0x30]
cmp edi, edx
jb case.0xc29cf39.20
sub esi, eax
add edx, 0x30
cmp edx, esi
ja case.0xc29cf39.20
mov edx, dword [ecx + 0x18]
cmp edx, dword [ecx + 0x24]
ja case.0xc29cf39.20
mov edx, dword [ecx + 0x28]
sub edx, eax
cmp dword [ecx + 0x20], edx
jbe 0xc29d44c
jmp case.0xc29cf39.20
cmp esi, 0x1c
jmp 0xc29d446
cmp esi, 0x1c
jb case.0xc29cf39.20
mov eax, dword [ecx + 0x10]
mov edx, dword [ecx + 0x14]
lea edi, [eax + edx]
cmp edi, eax
jb case.0xc29cf39.20
lea edi, [eax + edx + 0x1c]
cmp edi, 0x1c
jb case.0xc29cf39.20
cmp esi, edi
jb case.0xc29cf39.20
mov ecx, dword [ecx + 0xc]
cmp ecx, 0x1c
jb case.0xc29cf39.20
mov edi, esi
sub edi, eax
cmp ecx, edi
ja case.0xc29cf39.20
cmp esi, 0x10001b
ja case.0xc29cf39.20
mov ecx, 0xfffff
cmp eax, ecx
ja case.0xc29cf39.20
cmp edx, ecx
jmp 0xc29cfa0
cmp esi, 0x20
jb case.0xc29cf39.20
mov ecx, dword [ecx + 0x18]
test ecx, ecx
je 0xc29d44c
cmp ecx, 0x20
jb case.0xc29cf39.20
add esi, 0xfffffffe
cmp ecx, esi
jmp 0xc29cfa0
mov dword [ebp - 4], 1
jmp 0xc29d44c
cmp edi, 1
je case.0xc29cf39.20
cmp esi, 0xc
jmp 0xc29d446
cmp esi, 0x18
jb case.0xc29cf39.20
mov eax, dword [ecx + 0x10]
lea edx, [eax + 0x18]
cmp edx, 0x18
jb case.0xc29cf39.20
cmp esi, edx
jb case.0xc29cf39.20
mov ecx, dword [ecx + 0x14]
cmp ecx, 0x18
jb case.0xc29cf39.20
sub esi, eax
jmp 0xc29d037
cmp esi, 0x18
jb case.0xc29cf39.20
mov eax, dword [ecx + 0x10]
test eax, eax
je 0xc29d0af
cmp eax, 0x18
jb case.0xc29cf39.20
lea edx, [esi - 2]
cmp eax, edx
ja case.0xc29cf39.20
mov ecx, dword [ecx + 0x14]
test ecx, ecx
je 0xc29d44c
cmp ecx, 0x18
jmp 0xc29d02e
cmp esi, 0x64
jb case.0xc29cf39.20
mov eax, dword [ecx + 0xc]
test eax, eax
je 0xc29d0e6
cmp eax, 0x64
jb case.0xc29cf39.20
lea edx, [esi - 2]
cmp eax, edx
ja case.0xc29cf39.20
mov ecx, dword [ecx + 0x10]
test ecx, ecx
je 0xc29d44c
cmp ecx, 0x64
jmp 0xc29d02e
cmp edi, 7
jb case.0xc29cf39.8
cmp esi, 0x1c
jb case.0xc29cf39.20
mov eax, dword [ecx + 0x18]
xor edi, edi
cmp eax, edi
je 0xc29d121
lea ebx, [esi - 2]
cmp eax, ebx
jbe 0xc29d121
mov dword [ebp - 4], edi
jmp 0xc29d44c
xor edi, edi
cmp esi, 0x1c
jb 0xc29d117
mov eax, dword [ecx + 0x14]
cmp eax, 0x1c
jb 0xc29d117
cmp eax, esi
ja 0xc29d117
add esi, 0xffffffe4
add ecx, 0x1c
cmp edx, 9
jne 0xc29d142
push 1
push edi
jmp 0xc29d145
push edi
push 1
push esi
push ecx
push dword [ebp + 8]
call fcn.0c29ce47
mov dword [ebp - 4], eax
jmp 0xc29d44c
cmp esi, 0x14
jmp 0xc29d446
cmp esi, 0x5c
jb case.0xc29cf39.20
mov ecx, dword [ecx + 0x58]
test ecx, ecx
je 0xc29d44c
cmp ecx, 0x5c
jmp 0xc29d02e
cmp esi, 0x30
jb case.0xc29cf39.20
mov eax, dword [ecx + 0x24]
test eax, eax
je 0xc29d19c
cmp eax, 0x30
jb case.0xc29cf39.20
cmp eax, esi
ja case.0xc29cf39.20
mov ecx, dword [ecx + 0x28]
test ecx, ecx
je 0xc29d44c
cmp ecx, 0x30
jb case.0xc29cf39.20
jmp 0xc29d037
mov eax, esi
shr eax, 4
cmp esi, 0x24
jb case.0xc29cf39.20
mov ebx, dword [ecx + 8]
cmp ebx, eax
ja case.0xc29cf39.20
mov edi, dword [ecx + 0xc]
cmp edi, eax
ja case.0xc29cf39.20
mov edx, dword [ecx + 0x14]
cmp edx, eax
ja case.0xc29cf39.20
add ebx, edi
lea eax, [ebx + edx]
cmp eax, 0xfffffff
ja case.0xc29cf39.20
shl eax, 4
push 0x24
lea edx, [eax + 0x24]
pop ebx
mov dword [ebp + 8], edx
cmp edx, ebx
jb case.0xc29cf39.20
cmp esi, edx
jb case.0xc29cf39.20
mov edx, dword [ecx + 0x10]
cmp edx, ebx
jb case.0xc29cf39.20
mov edi, esi
sub edi, eax
cmp edx, edi
ja case.0xc29cf39.20
mov edi, dword [ecx + 0x20]
test edi, edi
je 0xc29d241
cmp edi, ebx
jb case.0xc29cf39.20
lea edx, [esi - 2]
cmp edi, edx
ja case.0xc29cf39.20
mov edx, dword [ecx + 0x18]
test edx, edx
je 0xc29d25b
cmp edx, ebx
jb case.0xc29cf39.20
lea ebx, [esi - 2]
cmp edx, ebx
ja case.0xc29cf39.20
mov ecx, dword [ecx + 0x1c]
test ecx, ecx
je 0xc29d276
cmp ecx, 0x24
jb case.0xc29cf39.20
lea ebx, [esi - 2]
cmp ecx, ebx
ja case.0xc29cf39.20
test edi, edi
jne 0xc29d286
test edx, edx
jne 0xc29d286
test ecx, ecx
je 0xc29d44c
add eax, 0x26
cmp eax, dword [ebp + 8]
jb case.0xc29cf39.20
cmp esi, eax
jmp 0xc29d446
push 0x30
pop edi
xor edx, edx
push 0x24
mov eax, esi
pop ebx
div edi
cmp esi, ebx
jb case.0xc29cf39.20
mov edi, dword [ecx + 8]
cmp edi, eax
ja case.0xc29cf39.20
mov edx, dword [ecx + 0xc]
cmp edx, eax
ja case.0xc29cf39.20
lea eax, [edi + edx]
cmp eax, 0x5555555
ja case.0xc29cf39.20
imul eax, eax, 0x30
lea edx, [eax + 0x24]
mov dword [ebp + 8], edx
cmp edx, ebx
jb case.0xc29cf39.20
cmp esi, edx
jb case.0xc29cf39.20
mov edx, dword [ecx + 0x10]
cmp edx, ebx
jb case.0xc29cf39.20
mov edi, esi
sub edi, eax
cmp edx, edi
ja case.0xc29cf39.20
mov edi, dword [ecx + 0x20]
test edi, edi
je 0xc29d31b
cmp edi, ebx
jb case.0xc29cf39.20
lea edx, [esi - 2]
cmp edi, edx
ja case.0xc29cf39.20
mov edx, dword [ecx + 0x18]
test edx, edx
je 0xc29d335
cmp edx, ebx
jb case.0xc29cf39.20
lea ebx, [esi - 2]
cmp edx, ebx
ja case.0xc29cf39.20
mov ecx, dword [ecx + 0x1c]
test ecx, ecx
je 0xc29d350
cmp ecx, 0x24
jb case.0xc29cf39.20
lea ebx, [esi - 2]
cmp ecx, ebx
ja case.0xc29cf39.20
test edi, edi
jne 0xc29d360
test edx, edx
jne 0xc29d360
test ecx, ecx
je 0xc29d44c
add eax, 0x26
cmp eax, dword [ebp + 8]
jmp 0xc29d28c
cmp esi, 0x14
jb case.0xc29cf39.20
mov eax, dword [ecx + 0x10]
cmp eax, 0x14
jb case.0xc29cf39.20
cmp eax, esi
ja case.0xc29cf39.20
sub esi, eax
push esi
add eax, ecx
push eax
push dword [ebp + 8]
call fcn.0c29cec8
jmp 0xc29d14f
cmp esi, 0x10
jb case.0xc29cf39.20
mov eax, dword [ecx + 8]
lea edx, [eax + 0x10]
cmp edx, 0x10
jb case.0xc29cf39.20
cmp esi, edx
jb case.0xc29cf39.20
mov ecx, dword [ecx + 0xc]
cmp ecx, 0x10
jmp 0xc29d081
cmp esi, 0x14
jb case.0xc29cf39.20
mov eax, dword [ecx + 0xc]
lea edx, [eax + 0x14]
cmp edx, 0x14
jb case.0xc29cf39.20
cmp esi, edx
jb case.0xc29cf39.20
mov ecx, dword [ecx + 0x10]
cmp ecx, 0x14
jmp 0xc29d081
cmp esi, 0x18
jb case.0xc29cf39.20
mov edx, dword [ecx + 0x10]
mov eax, dword [ecx + 8]
lea edi, [edx + eax]
cmp edi, edx
jb case.0xc29cf39.20
lea edi, [eax + edx + 0x18]
cmp edi, 0x18
jb case.0xc29cf39.20
cmp esi, edi
jb case.0xc29cf39.20
mov edi, dword [ecx + 0xc]
cmp edi, 0x18
jb case.0xc29cf39.20
mov ebx, esi
sub ebx, eax
cmp edi, ebx
ja case.0xc29cf39.20
mov ecx, dword [ecx + 0x14]
cmp ecx, 0x18
jb case.0xc29cf39.20
sub esi, edx
jmp 0xc29d037
cmp esi, 0x18
jb case.0xc29cf39.20
mov ecx, dword [ecx + 0x14]
jmp 0xc29d0ba
cmp esi, 0x18
jb case.0xc29cf39.20
mov ecx, dword [ecx + 0x14]
lea eax, [ecx + 0x18]
cmp eax, 0x18
jmp 0xc29d28c
cmp esi, 0x10
jae 0xc29d44c
and dword [ebp - 4], 0
mov eax, dword [ebp - 4]
pop ebx
pop edi
pop esi
leave
ret 0xc