Function at 0x100e2d00
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
push esi
push edi
mov edi, dword [esp + 0x10]
xor ebp, ebp
mov esi, dword [edi + 0x2c]
test esi, esi
je 0x100e2f5f
push ebx
mov cl, byte [esi + 5]
or byte [esi + 4], 4
mov eax, dword [esi + 0xc]
mov dword [edi + 0x2c], eax
cmp cl, 0xb
jne 0x100e2d65
push esi
push edi
call fcn.100e3130
add esp, 8
test eax, eax
jle 0x100e2d39
and byte [esi + 4], 0xfb
mov eax, dword [esi + 0x1c]
test eax, eax
je 0x100e2d55
lea eax, [eax + eax*2]
lea ecx, [eax*8 + 0x38]
mov eax, dword [esi + 0x18]
lea eax, [ecx + eax*8]
jmp 0x100e2f51
mov eax, dword [esi + 0x18]
mov ecx, 0x20
lea eax, [ecx + eax*8]
jmp 0x100e2f51
cmp cl, 8
jne 0x100e2e2c
mov eax, dword [esi + 8]
test byte [eax + 4], 3
je 0x100e2d81
push eax
push edi
call fcn.100e2950
add esp, 8
cmp byte [esi + 6], 0
jne 0x100e2dd2
mov eax, dword [esi + 0x10]
test byte [eax - 0x3c], 3
je 0x100e2d9d
add eax, 0xffffffc0
push eax
push edi
call fcn.100e2950
add esp, 8
mov cl, byte [esi + 7]
xor ebx, ebx
test cl, cl
je 0x100e2e0b
lea edx, [esi + 0x14]
nop dword [eax]
mov eax, dword [edx]
test byte [eax + 4], 3
je 0x100e2dc2
push eax
push edi
call fcn.100e2950
add esp, 8
mov cl, byte [esi + 7]
inc ebx
movzx eax, cl
add edx, 4
cmp ebx, eax
jb 0x100e2db0
jmp 0x100e2e0b
mov cl, byte [esi + 7]
xor ebx, ebx
test cl, cl
je 0x100e2e0b
lea edx, [esi + 0x18]
nop
mov eax, dword [edx + 4]
add eax, 4
cmp eax, 0xfffffff6
jbe 0x100e2dfd
mov eax, dword [edx]
test byte [eax + 4], 3
je 0x100e2dfd
push eax
push edi
call fcn.100e2950
add esp, 8
mov cl, byte [esi + 7]
inc ebx
movzx eax, cl
add edx, 8
cmp ebx, eax
jb 0x100e2de0
cmp byte [esi + 6], 0
movzx eax, cl
jne 0x100e2e20
lea eax, [eax*4 + 0x14]
jmp 0x100e2f51
lea eax, [eax*8 + 0x18]
jmp 0x100e2f51
cmp cl, 7
jne 0x100e2e8e
mov eax, dword [esi + 0x28]
and byte [eax + 4], 0xfc
mov edx, dword [esi + 0x18]
neg edx
jns 0x100e2e5d
shl edx, 2
mov eax, dword [esi + 0x10]
mov eax, dword [edx + eax]
test byte [eax + 4], 3
je 0x100e2e58
push eax
push edi
call fcn.100e2950
add esp, 8
add edx, 4
js 0x100e2e42
movzx eax, word [esi + 0x26]
test ax, ax
je 0x100e2e86
mov ecx, eax
mov eax, dword [edi + 0x280]
mov ecx, dword [eax + ecx*4]
mov al, byte [ecx + 4]
test al, 3
je 0x100e2e86
and al, 0xfc
mov byte [ecx + 4], al
mov eax, dword [edi + 0x2c]
mov dword [ecx + 0xc], eax
mov dword [edi + 0x2c], ecx
mov eax, dword [esi + 0x20]
jmp 0x100e2f51
cmp cl, 6
jne 0x100e2f2e
mov eax, dword [edi + 0x30]
mov dword [esi + 0xc], eax
mov dword [edi + 0x30], esi
and byte [esi + 4], 0xfb
mov edx, dword [esi + 0x1c]
mov ebx, dword [esi + 0x14]
add edx, 8
cmp edx, ebx
jae 0x100e2ed5
mov eax, dword [edx + 4]
add eax, 4
cmp eax, 0xfffffff6
jbe 0x100e2ece
mov eax, dword [edx]
test byte [eax + 4], 3
je 0x100e2ece
push eax
push edi
call fcn.100e2950
add esp, 8
add edx, 8
cmp edx, ebx
jb 0x100e2eb1
cmp byte [edi + 0x1d], 2
jne 0x100e2efe
mov ecx, dword [esi + 0x2c]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*8]
cmp edx, eax
jae 0x100e2efe
nop dword [eax + eax]
mov dword [edx + 4], 0xffffffff
add edx, 8
cmp edx, eax
jb 0x100e2ef0
mov eax, dword [esi + 0x24]
test byte [eax + 4], 3
je 0x100e2f11
push eax
push edi
call fcn.100e2950
add esp, 8
push esi
push edi
call fcn.100e3010
push eax
push esi
call fcn.100e1d00
mov eax, dword [esi + 0x2c]
add esp, 0x10
lea eax, [eax*8 + 0x30]
jmp 0x100e2f51
push esi
push edi
call fcn.100e32a0
mov ecx, dword [esi + 8]
add esp, 8
movzx eax, word [esi + 6]
sub ecx, dword [esi + 0x14]
lea eax, [eax + eax*2]
lea eax, [eax + ecx*2]
add eax, 0x14
add eax, dword [esi + 0x18]
shl eax, 2
mov esi, dword [edi + 0x2c]
add ebp, eax
test esi, esi
jne 0x100e2d15
pop ebx
pop edi
pop esi
mov eax, ebp
pop ebp
ret