Function at 0x1000dc40
Capabilities:
Enumerate pe sections
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x54
mov eax, dword [0x1003200c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
push esi
push edi
movlpd qword [ebp - 0x50], xmm0
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x40], 0x800
mov dword [ebp - 0x10], 0x800
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 8], 0xc3050f
call fcn.10001f10
mov ebx, eax
mov esi, edx
mov ecx, ebx
mov dword [ebp - 0x3c], ebx
or ecx, esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], esi
je 0x1000dee8
push 4
push 0x3000
lea eax, [ebp - 0x10]
push eax
push 0
lea eax, [ebp - 0x24]
push eax
push 0xffffffffffffffff
call fcn.1000ee9f
add esp, 0x18
test eax, eax
jne 0x1000dee8
mov edi, dword [ebp - 0x24]
mov ecx, ebx
add ecx, 0x800
mov dword [ebp - 0x34], edi
mov eax, esi
adc eax, 0
test eax, eax
ja 0x1000dcf4
jb 0x1000dce9
cmp ecx, 0xffffffff
jae 0x1000dcf4
mov ecx, 0x200
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
jmp 0x1000dd0d
push 0
push dword [ebp - 0x40]
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push 0
push dword [ebp - 0x34]
call [0x1002f484]
add esp, 0x18
cmp dword [ebp - 0x24], 0
je 0x1000dd81
mov eax, dword [ebp - 0x24]
mov ecx, 0x5a4d
mov dword [ebp - 0x44], eax
cmp word [eax], cx
jne 0x1000dd81
mov esi, dword [eax + 0x3c]
add esi, eax
xor eax, eax
cmp dword [esi], 0x4550
jne 0x1000dd83
xor edi, edi
cmp ax, word [esi + 6]
jae 0x1000dd81
xor ebx, ebx
nop dword [eax]
movzx edx, word [esi + 0x14]
add edx, 0x18
add edx, ebx
add edx, esi
mov eax, edx
mov dword [ebp - 0x40], edx
lea ecx, [eax + 1]
mov dword [ebp - 0x34], ecx
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1000dd56
sub eax, dword [ebp - 0x34]
lea ecx, [eax - 1]
call fcn.10004a60
not eax
cmp eax, 0xa21c1ea3
je 0x1000de0d
movzx eax, word [esi + 6]
inc edi
add ebx, 0x28
cmp edi, eax
jb 0x1000dd40
xor eax, eax
test eax, eax
je 0x1000de97
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x1000de97
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x1000de97
cdq
mov edi, eax
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x24]
mov ebx, edx
cdq
push 4
sub edi, eax
lea eax, [ebp - 0x28]
push 0x3000
push eax
sbb ebx, edx
lea eax, [ebp - 0x2c]
add edi, dword [ebp - 0x3c]
push 0
adc ebx, dword [ebp - 0xc]
push eax
push 0xffffffffffffffff
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x34], ebx
call fcn.1000ee9f
add esp, 0x18
test eax, eax
jne 0x1000de97
mov ecx, dword [ebp - 0x28]
mov edx, ecx
mov esi, dword [ebp - 0x2c]
add edx, edi
mov dword [ebp - 0xc], ecx
adc eax, ebx
mov dword [ebp - 0x3c], esi
test eax, eax
ja 0x1000de29
jb 0x1000de00
cmp edx, 0xffffffff
jae 0x1000de29
push ecx
push edi
push esi
call fcn.100138b0
add esp, 0xc
jmp 0x1000de42
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx + 0xc]
add eax, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x18], eax
mov eax, 1
jmp 0x1000dd83
push 0
push dword [ebp - 0xc]
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push 0
push dword [ebp - 0x3c]
call [0x1002f484]
add esp, 0x18
mov edx, dword [ebp - 0x28]
lea eax, [ebp - 8]
mov ebx, dword [ebp - 0x2c]
mov ecx, ebx
push 0
push 3
push eax
lea edx, [edx - 4]
call fcn.1000d470
add esp, 0xc
test eax, eax
je 0x1000de97
push 0
lea ecx, [ebp - 8]
mov edx, 0xffc
push 3
push ecx
lea ecx, [eax + 0x289]
call fcn.1000d470
add esp, 0xc
test eax, eax
je 0x1000de97
cdq
mov ecx, eax
mov esi, edx
mov eax, ebx
cdq
sub ecx, eax
sbb esi, edx
add ecx, edi
mov dword [ebp - 0x50], ecx
adc esi, dword [ebp - 0x44]
mov dword [ebp - 0x4c], esi
cmp dword [ebp - 0x24], 0
je 0x1000deb4
push 0x8000
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x24]
push eax
push 0xffffffffffffffff
call fcn.1000eeaa
add esp, 0x10
cmp dword [ebp - 0x2c], 0
je 0x1000ded1
push 0x8000
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0xffffffffffffffff
call fcn.1000eeaa
add esp, 0x10
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000f090
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
xor edx, edx
pop ebx
call fcn.1000f090
mov esp, ebp
pop ebp
ret