Function at 0x10076830
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x708
mov eax, dword [0x105520d0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov ebx, ecx
mov ecx, dword [ebp + 0x14]
push edi
mov dword [ebp - 0x6dc], ecx
mov edx, dword [eax + 4]
mov ecx, 0xf
mov esi, str.Log_packet_parsing_aborted__Possible_causes_of_this_problem:
lea edi, [ebp - 0x80]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 0x13
mov esi, str._n_t_1._mftypes_tap_msg_content_structure_may_be_incorrect_for_this_waveform.
lea edi, [ebp - 0xcc]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0xf
mov esi, str._n_t_2._Log_packets_for_all_Flow_IDs_were_not_being_received.
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x14
mov esi, str._nEnable_logging_with_LOG_ASYNC_to_get_more_information_on_log_packets_received.
lea edi, [ebp - 0x11c]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [eax]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x708], esi
mov dword [ebp - 0x704], edx
mov dl, byte [eax + 0xc]
shr esi, 0x10
mov dword [ebp - 0x6d4], eax
mov byte [ebp - 0x6c9], 1
mov byte [ebp - 0x6ca], 0
mov dword [ebp - 0x700], ecx
mov byte [ebp - 0x6fc], dl
cmp esi, 0x120c
jne 0x10076b02
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0x14]
mov edi, dword [eax + 0xc]
push str.Parsed_LOG_MFLO_FTAP_PACKETRECORD_HEADER_PARAMS_C_log_packet
mov dword [ebp - 0x6f4], ecx
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x6f0], edx
mov edx, dword [eax + 0x1c]
mov al, byte [eax + 0x20]
lea esi, [ebx + 0xa5e4]
push 8
push esi
mov dword [ebp - 0x6ec], ecx
mov dword [ebp - 0x6e8], edx
mov byte [ebp - 0x6e4], al
call fcn.10115e20
movzx ecx, byte [ebp - 0x6ed]
movzx edx, byte [ebp - 0x6ee]
movzx eax, byte [ebp - 0x6ef]
push ecx
movzx ecx, byte [ebp - 0x6f0]
push edx
mov edx, dword [ebp - 0x6f4]
push eax
push ecx
push edx
push edi
push str._sysTime___d__flow_id___d__mlc_id___d__strm_id___d__system___d__trans_mode___d
push 8
push esi
call fcn.10115e20
movzx ecx, byte [ebp - 0x6e8]
mov edi, dword [ebp - 0x6e7]
movzx edx, byte [ebp - 0x6e9]
movzx eax, byte [ebp - 0x6ec]
push edi
push ecx
movzx ecx, word [ebp - 0x6eb]
push edx
push ecx
push eax
push str._rs_code___d__rssi_int_part___d__rssi_fract_part___d__rssi_value_positive___d__num_PLP_records___d
push 8
push esi
call fcn.10115e20
movzx eax, byte [ebx + 0x479cb8]
add esp, 0x50
mov dword [ebp - 0x6d0], 0
test eax, eax
jle 0x100769ce
mov ecx, dword [ebx + 0x479cb0]
jmp 0x100769b0
mov edx, dword [ecx]
cmp edx, dword [ebp - 0x6f4]
je 0x100769f6
mov edx, dword [ebp - 0x6d0]
inc edx
add ecx, 0x24
mov dword [ebp - 0x6d0], edx
cmp edx, eax
jl 0x100769b0
mov eax, dword [ebp - 0x6f4]
push eax
push str.Invalid_Flow_ID__d_in_LOG_MFLO_FTAP_PACKETRECORD_HEADER_PARAMS_C_log_packet.
push 0x10
push esi
call fcn.10115e20
mov ecx, dword [ebp - 0x6dc]
add esp, 0x10
mov dword [ecx], 5
jmp 0x10076af5
mov al, byte [ebp - 0x6ed]
mov byte [ebp - 0x6ca], 1
cmp al, 6
jb 0x10076a0b
cmp al, 0xb
jbe 0x10076a0f
cmp al, 0x50
jb 0x10076a16
mov eax, 2
jmp 0x10076a1b
mov eax, 1
movzx ecx, byte [ebp - 0x6ec]
cmp ecx, 3
ja case.default.0x10076a27
jmp dword [ecx*4 + 0x10076e98]
add eax, edi
cdq
and edx, 7
add eax, edx
sar eax, 3
sub edi, eax
jmp case.0x10076a27.0
add eax, edi
cdq
and edx, 3
add eax, edx
sar eax, 2
sub edi, eax
jmp case.0x10076a27.0
add eax, edi
cdq
sub eax, edx
sar eax, 1
sub edi, eax
jmp case.0x10076a27.0
push ecx
push str.Invalid_rs_code__d_in_LOG_MFLO_FTAP_PACKETRECORD_HEADER_PARAMS_C
push 0x10
push esi
call fcn.10115e20
mov edx, dword [ebp - 0x6dc]
mov edi, dword [ebp - 0x6d0]
add esp, 0x10
mov dword [edx], 7
mov byte [ebp - 0x6c9], 0
mov eax, dword [ebp - 0x6d0]
mov ecx, dword [ebx + 0x479cb0]
lea eax, [eax + eax*8]
add eax, eax
add eax, eax
movzx edx, word [ecx + eax + 6]
movzx ecx, word [ecx + eax + 4]
add edx, ecx
cmp edi, edx
je 0x10076afc
mov edx, dword [ebx + 0x479cb0]
movzx ecx, word [eax + edx + 6]
movzx edx, word [eax + edx + 4]
mov eax, dword [ebp - 0x6f4]
add ecx, edx
push ecx
push edi
push eax
push str.Number_of_Data_PLP_records_for_Flow_ID__d_is__d._Expected__d
push 0x10
push esi
call fcn.10115e20
push str.Log_packet_parsing_will_stop.
push 0x10
push esi
call fcn.10115e20
push str.There_may_be_a_problem_with_the_mftypes_tap_msg_content_structure_or_phone_AMSS.
push 0x10
push esi
call fcn.10115e20
mov ecx, dword [ebp - 0x6dc]
add esp, 0x30
mov dword [ecx], 8
mov byte [ebp - 0x6c9], 0
mov eax, dword [ebp - 0x6d4]
mov edx, 0x120d
cmp word [ebp - 0x706], dx
jne 0x10076e7d
lea esi, [eax + 0xc]
mov ecx, 0x16b
lea edi, [ebp - 0x6c8]
rep movsd dword es:[edi], dword [esi]
movzx edi, word [ebp - 0x6c1]
cmp edi, 0x6f
jle 0x10076b6a
push 0x6f
push edi
push str.Number_of_PLP_records_in_current_log_packet_is__d___Cannot_be_greater_than__d.
push 0x10
add ebx, 0xa5e4
push ebx
call fcn.10115e20
mov eax, dword [ebp - 0x6dc]
add esp, 0x14
pop edi
pop esi
mov dword [eax], 8
xor al, al
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10203cc8
mov esp, ebp
pop ebp
ret 0x10
push str.Parsed_LOG_MFLO_FTAP_PACKETRECORD_PARAMS_C_log_packet
lea esi, [ebx + 0xa5e4]
push 8
push esi
mov dword [ebp - 0x6d0], esi
call fcn.10115e20
movzx ecx, byte [ebp - 0x6c2]
movzx edx, word [ebp - 0x6c4]
mov eax, dword [ebp - 0x6c8]
push edi
push ecx
push edx
push eax
push str._sysTime___d__log_seq_num___d__last_packet___d__actual_num_plp_records___d
push 8
push esi
call fcn.10115e20
push str._flow_id__tdata_parity__tbase_enh__tpreRS_Eras__tpostRS_Eras__tSequenceNum__tTestSig
push 8
push esi
call fcn.10115e20
add esp, 0x34
mov dword [ebp - 0x6d4], 0
test edi, edi
jle 0x10076e7d
lea esi, [ebp - 0x6bb]
movzx edx, byte [esi + 2]
movzx eax, byte [esi + 8]
movzx ecx, byte [esi + 3]
mov edi, dword [esi + 4]
push eax
mov byte [ebp - 0x6de], dl
movzx edx, byte [esi + 1]
movzx eax, byte [ebp - 0x6de]
push edi
push ecx
mov byte [ebp - 0x6dd], dl
movzx edx, byte [esi]
movzx ecx, byte [ebp - 0x6dd]
push eax
movzx eax, dl
mov edx, dword [esi - 4]
push ecx
mov ecx, dword [ebp - 0x6d0]
push eax
push edx
push str.__7d__t_11d__t_8d__t_10d__t_11d__t_11d__t_7d
push 8
push ecx
call fcn.10115e20
movzx eax, byte [ebx + 0x479cb8]
add esp, 0x28
xor ecx, ecx
test eax, eax
jle 0x10076c45
mov edx, dword [ebx + 0x479cb0]
mov edi, dword [esi - 4]
cmp dword [edx], edi
je 0x10076cab
inc ecx
add edx, 0x24
cmp ecx, eax
jl 0x10076c36
cmp byte [ebp - 0x6ca], 0
je 0x10076db5
cmp byte [esi], 0
jne 0x10076d3c
mov edx, dword [ebx + 0x479cb0]
lea eax, [ecx + ecx*8]
add eax, eax
add eax, eax
cmp byte [esi + 1], 0
jne 0x10076d09
inc word [eax + edx + 0x18]
cmp dword [ebp + 0xc], 1
lea edx, [eax + edx + 0x18]
je 0x10076d3c
mov edx, dword [ebp + 0x10]
sub edx, 0
je 0x10076cb4
dec edx
je 0x10076c96
cmp byte [esi + 2], 1
je 0x10076c9c
cmp byte [esi + 3], 1
jne 0x10076cba
mov edx, dword [ebx + 0x479cb0]
lea eax, [eax + edx + 0x1c]
jmp 0x10076d39
mov byte [ebp - 0x6ca], 1
jmp 0x10076c52
cmp byte [esi + 2], 1
je 0x10076c9c
mov edx, dword [ebx + 0x479cb0]
mov di, word [edx + eax + 0x10]
cmp di, word [edx + eax + 4]
je 0x10076dfd
mov ecx, edx
movzx edx, word [ecx + eax + 0x10]
mov edi, dword [ecx + eax + 8]
mov ecx, dword [esi + 4]
lea edx, [edx + edx*4]
mov dword [edx + edi], ecx
mov ecx, dword [ebx + 0x479cb0]
movzx edx, word [ecx + eax + 0x10]
mov edi, dword [ecx + eax + 8]
mov cl, byte [esi + 8]
lea edx, [edx + edx*4]
mov byte [edx + edi + 4], cl
mov ecx, dword [ebx + 0x479cb0]
lea eax, [eax + ecx + 0x10]
jmp 0x10076d39
inc word [eax + edx + 0x1a]
cmp dword [ebp + 0xc], 0
lea edx, [eax + edx + 0x1a]
je 0x10076d3c
mov edx, dword [ebp + 0x10]
sub edx, 0
je 0x10076d60
dec edx
je 0x10076d29
cmp byte [esi + 2], 1
je 0x10076d2f
cmp byte [esi + 3], 1
jne 0x10076d66
mov edx, dword [ebx + 0x479cb0]
lea eax, [eax + edx + 0x1e]
inc word [eax]
mov eax, dword [ebp - 0x6d4]
movzx ecx, word [ebp - 0x6c1]
inc eax
add esi, 0xd
mov dword [ebp - 0x6d4], eax
cmp eax, ecx
jl 0x10076bd0
jmp 0x10076e7d
cmp byte [esi + 2], 1
je 0x10076d2f
mov edx, dword [ebx + 0x479cb0]
mov di, word [edx + eax + 0x12]
cmp di, word [edx + eax + 6]
je 0x10076e1e
mov ecx, edx
movzx edx, word [ecx + eax + 0x12]
mov edi, dword [ecx + eax + 0xc]
mov ecx, dword [esi + 4]
lea edx, [edx + edx*4]
mov dword [edx + edi], ecx
mov ecx, dword [ebx + 0x479cb0]
movzx edx, word [ecx + eax + 0x12]
mov edi, dword [ecx + eax + 0xc]
mov cl, byte [esi + 8]
lea edx, [edx + edx*4]
mov byte [edx + edi + 4], cl
mov ecx, dword [ebx + 0x479cb0]
lea eax, [eax + ecx + 0x12]
jmp 0x10076d39
mov eax, dword [ebp - 0x6d4]
mov ecx, dword [ebp - 0x6d0]
imul eax, eax, 0xd
mov eax, dword [ebp + eax - 0x6bf]
push eax
push str.Invalid_Flow_ID__d_received_in_LOG_MFLO_FTAP_PACKETRECORD_PARAMS_C_log_packet.
push 0x10
push ecx
call fcn.10115e20
mov edx, dword [ebp - 0x6dc]
add esp, 0x10
pop edi
pop esi
mov dword [edx], 5
xor al, al
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10203cc8
mov esp, ebp
pop ebp
ret 0x10
lea eax, [ecx + ecx*8]
movzx edx, word [edx + eax*4 + 4]
mov eax, dword [ebp - 0x6d4]
imul eax, eax, 0xd
mov eax, dword [ebp + eax - 0x6bf]
push edx
push eax
push str.Number_of_elements_in_the_array_of_Base_FTAP_Sequence_Number___FTAP_Test_Signature_pairs_for_Flow_ID__d_will_exceed__d
jmp 0x10076e3d
lea eax, [ecx + ecx*8]
movzx edx, word [edx + eax*4 + 6]
mov eax, dword [ebp - 0x6d4]
imul eax, eax, 0xd
mov eax, dword [ebp + eax - 0x6bf]
push edx
push eax
push str.Number_of_elements_in_the_array_of_Enh_FTAP_Sequence_Number___FTAP_Test_Signature_pairs_for_Flow_ID__d_will_exceed__d
mov esi, dword [ebp - 0x6d0]
push 0x10
push esi
call fcn.10115e20
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x80]
push ecx
push str._s_s_s_s
push 0x10
push esi
call fcn.10115e20
mov edx, dword [ebp - 0x6dc]
mov dword [edx], 9
add esp, 0x30
mov ecx, dword [ebp - 4]
mov al, byte [ebp - 0x6c9]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10203cc8
mov esp, ebp
pop ebp
ret 0x10