Function at 0x100b2560
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x10
mov edx, dword [esp + 0x14]
push ebx
push ebp
push esi
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x14], eax
push edi
cmp byte [ecx + 9], 2
lea ebp, [ecx + 0x12]
movzx eax, word [ecx + 6]
movzx ebx, byte [eax*2 + 0x1013c200]
movzx edi, byte [eax*2 + 0x1013c201]
jne 0x100b2643
mov al, byte [ecx + 8]
mov esi, dword [esp + 0x34]
and al, 8
movzx eax, al
neg eax
mov dword [esp + 0x10], 0
sbb eax, eax
add eax, 0x12
dec eax
mov dword [esp + 0x14], eax
cmp esi, ebx
jb 0x100b2808
push ebx
push edx
call fcn.100afb80
mov ecx, dword [esp + 0x18]
add esp, 8
mov edx, dword [esp + 0x24]
inc ecx
mov byte [ebp], al
sub esi, ebx
mov eax, dword [esp + 0x14]
inc ebp
mov dword [esp + 0x10], ecx
test eax, eax
jne 0x100b25b8
mov ebp, dword [esp + 0x28]
mov eax, 0x12
add ecx, eax
mov ebx, edx
add ecx, ebp
mov dword [esp + 0x28], ecx
nop dword [eax]
dec eax
mov dword [esp + 0x24], eax
cmp esi, edi
jb 0x100b2808
push edi
push ebx
call fcn.100afb80
mov edx, dword [esp + 0x30]
add esp, 8
mov ecx, dword [esp + 0x10]
sub esi, edi
inc ecx
mov dword [esp + 0x10], ecx
mov byte [edx], al
inc edx
mov eax, dword [esp + 0x24]
mov dword [esp + 0x28], edx
test eax, eax
jne 0x100b2600
mov word [ecx + ebp + 0x12], ax
mov byte [ecx + ebp + 0x14], al
jmp 0x100b27ea
test byte [esp + 0x30], 8
je 0x100b267e
mov esi, dword [esp + 0x2c]
movzx eax, byte [esi + 0x12]
mov byte [ebp], al
movzx eax, byte [esi + 0x13]
mov byte [ecx + 0x13], al
movzx eax, byte [esi + 0x14]
mov byte [ecx + 0x14], al
movzx eax, byte [esi + 0x15]
mov byte [ecx + 0x15], al
movzx eax, byte [esi + 0x16]
mov byte [ecx + 0x16], al
movzx eax, byte [esi + 0x17]
mov esi, dword [esp + 0x34]
mov byte [ecx + 0x17], al
jmp 0x100b26bd
mov esi, dword [esp + 0x34]
mov dword [esp + 0x10], 0
nop word [eax + eax]
cmp esi, ebx
jb 0x100b2808
push ebx
push edx
call fcn.100afb80
mov ecx, dword [esp + 0x18]
add esp, 8
mov edx, dword [esp + 0x24]
sub esi, ebx
mov byte [ecx + ebp], al
inc ecx
mov dword [esp + 0x10], ecx
cmp ecx, 6
jb 0x100b2690
mov ecx, dword [esp + 0x28]
test byte [esp + 0x30], 4
je 0x100b26ed
mov edx, dword [esp + 0x2c]
movzx eax, byte [edx + 0x18]
mov byte [ecx + 0x18], al
movzx eax, byte [edx + 0x19]
mov byte [ecx + 0x19], al
movzx eax, byte [edx + 0x1a]
mov byte [ecx + 0x1a], al
movzx eax, byte [edx + 0x1b]
mov byte [ecx + 0x1b], al
movzx eax, byte [edx + 0x1c]
mov byte [ecx + 0x1c], al
jmp 0x100b2726
mov dword [esp + 0x10], 6
cmp esi, ebx
jb 0x100b2808
push ebx
push edx
call fcn.100afb80
mov ecx, dword [esp + 0x18]
add esp, 8
mov edx, dword [esp + 0x24]
sub esi, ebx
mov byte [ecx + ebp], al
inc ecx
mov dword [esp + 0x10], ecx
cmp ecx, 0xb
jb 0x100b26f5
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
test byte [esp + 0x30], 2
mov ebx, dword [esp + 0x24]
je 0x100b2756
movzx eax, byte [edx + 0x1d]
mov byte [ecx + 0x1d], al
movzx eax, byte [edx + 0x1e]
mov byte [ecx + 0x1e], al
movzx eax, byte [edx + 0x1f]
mov byte [ecx + 0x1f], al
movzx eax, byte [edx + 0x20]
mov byte [ecx + 0x20], al
movzx eax, byte [edx + 0x21]
mov byte [ecx + 0x21], al
jmp 0x100b278d
mov dword [esp + 0x10], 0xb
nop
cmp esi, edi
jb 0x100b2808
push edi
push ebx
call fcn.100afb80
mov ecx, dword [esp + 0x18]
add esp, 8
sub esi, edi
mov byte [ecx + ebp], al
inc ecx
mov dword [esp + 0x10], ecx
cmp ecx, 0x10
jb 0x100b2760
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
test byte [esp + 0x30], 1
je 0x100b27b9
movzx eax, byte [edx + 0x22]
mov byte [ecx + 0x22], al
movzx eax, byte [edx + 0x23]
mov byte [ecx + 0x23], al
movzx eax, byte [edx + 0x24]
mov byte [ecx + 0x24], al
movzx eax, byte [edx + 0x25]
mov byte [ecx + 0x25], al
movzx eax, byte [edx + 0x26]
mov byte [ecx + 0x26], al
jmp 0x100b27e6
mov dword [esp + 0x24], 0x10
cmp esi, edi
jb 0x100b2808
push edi
push ebx
call fcn.100afb80
mov ecx, dword [esp + 0x2c]
add esp, 8
sub esi, edi
mov byte [ecx + ebp], al
inc ecx
mov dword [esp + 0x24], ecx
cmp ecx, 0x15
jb 0x100b27c1
mov ecx, dword [esp + 0x28]
mov byte [ecx + 0x27], 0
lea eax, [esp + 0x18]
push ebx
push eax
call fcn.100afb40
mov ecx, dword [esp + 0x40]
add esp, 8
pop edi
pop esi
pop ebp
mov dword [ecx], eax
xor eax, eax
pop ebx
add esp, 0x10
ret
pop edi
pop esi
pop ebp
mov eax, 0x234
pop ebx
add esp, 0x10
ret