Function at 0x100b2478
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x110
push ebx
push ebp
push esi
mov esi, ecx
mov ebp, edx
push edi
mov dword [esp + 0x10], ebp
mov edi, dword [esi]
cmp word [edi], 1
je 0x100b2570
mov ebx, dword [edi + 4]
mov ecx, dword [esp + 0x124]
movzx eax, byte [ebx]
cmp eax, ecx
jne 0x100b24c9
movzx eax, word [edi + 2]
xor edx, edx
push eax
movzx eax, byte [ebx + 1]
mov ecx, ebp
push eax
call fcn.100b2800
mov ecx, esi
mov dword [esi + 8], ebx
call fcn.100b1700
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x110
ret 4
mov ebp, edi
mov dword [esi + 0x14], 0
movzx edx, byte [ebx + 1]
movzx edi, word [ebp]
dec edi
jmp 0x100b24e0
movzx eax, byte [ebx + 6]
add ebx, 6
cmp eax, ecx
je 0x100b2546
movzx eax, byte [ebx + 1]
add edx, eax
dec edi
jne 0x100b24e0
mov eax, dword [esi + 8]
lea edi, [esp + 0x20]
mov ecx, 0x40
movzx eax, byte [eax]
movzx eax, byte [eax + esi + 0x388]
mov dword [esi + 0x1c], eax
or eax, 0xffffffff
rep stosd dword es:[edi], eax
movzx eax, byte [ebx]
mov edi, ebp
movzx ecx, word [edi]
mov byte [esp + eax + 0x20], 0
dec ecx
movzx eax, byte [ebx - 6]
lea ebx, [ebx - 6]
mov byte [esp + eax + 0x20], 0
dec ecx
jne 0x100b2521
movzx eax, word [edi + 2]
mov ecx, dword [esp + 0x10]
push eax
sub eax, edx
push eax
call fcn.100b2800
jmp 0x100b2641
movzx eax, word [ebp + 2]
mov ecx, dword [esp + 0x10]
push eax
movzx eax, byte [ebx + 1]
push eax
call fcn.100b2800
mov ecx, esi
mov dword [esi + 8], ebx
call fcn.100b1680
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x110
ret 4
mov eax, dword [esi + 8]
mov ecx, dword [esi]
lea ebx, [ecx + 2]
movzx eax, byte [eax]
movzx edi, byte [eax + esi + 0x388]
mov dword [esi + 0x1c], edi
movzx eax, byte [ebx]
movzx edx, byte [eax + esi + 0x388]
movzx eax, byte [ecx + 3]
shl eax, 5
add edx, eax
mov eax, dword [ecx + 8]
mov ecx, dword [esi + 0x20]
sar ecx, 0x1a
and ecx, 0x20
movzx eax, word [eax]
movzx eax, byte [eax + esi + 0x287]
add eax, edi
lea eax, [eax + edx*2]
add eax, 0x526
add ecx, eax
movzx eax, byte [ebx]
add ecx, dword [esi + 0x14]
lea edi, [esi + ecx*2]
mov ecx, ebp
movzx edx, word [edi]
cmp eax, dword [esp + 0x124]
jne 0x100b2601
call fcn.100b28b0
movzx ecx, word [edi]
lea eax, [ecx + 0x20]
sar eax, 7
sub ecx, eax
sub ecx, 0xffffff80
mov word [edi], cx
mov ecx, esi
mov dword [esi + 8], ebx
call fcn.100b17a0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x110
ret 4
call fcn.100b2950
movzx ecx, word [edi]
lea eax, [ecx + 0x20]
sar eax, 7
sub ecx, eax
movzx eax, cx
mov word [edi], cx
mov ecx, 0x40
shr eax, 0xa
lea edi, [esp + 0x20]
movzx eax, byte [eax + 0x100d9b20]
mov dword [esi + 0x10], eax
or eax, 0xffffffff
rep stosd dword es:[edi], eax
movzx eax, byte [ebx]
mov dword [esi + 0x14], 0
mov byte [esp + eax + 0x20], 0
mov eax, dword [esi]
movzx edx, word [eax]
mov eax, dword [esi]
inc dword [esi + 0xc]
mov eax, dword [eax + 8]
test eax, eax
je 0x100b2729
mov dword [esi], eax
movzx eax, word [eax]
cmp eax, edx
je 0x100b2646
lea eax, [esp + 0x14]
mov ecx, esi
push eax
call fcn.100b15d0
mov ecx, dword [esi]
xor edi, edi
mov dword [esp + 0x18], eax
mov edx, dword [ecx + 4]
movzx ebp, word [ecx]
lea esp, [esp]
movzx ebx, byte [edx]
cmp ebx, dword [esp + 0x124]
je 0x100b26ca
movzx ecx, byte [edx + 1]
add edx, 6
movsx eax, byte [esp + ebx + 0x20]
and ecx, eax
mov byte [esp + ebx + 0x20], 0
add edi, ecx
dec ebp
jne 0x100b2680
mov ecx, dword [esp + 0x14]
mov edx, edi
lea eax, [edi + ecx]
push eax
push ecx
mov ecx, dword [esp + 0x18]
call fcn.100b2800
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
add eax, edi
add word [ecx], ax
jmp 0x100b2641
mov dword [esp + 0x1c], edi
mov ebx, edx
movzx eax, byte [edx]
lea edx, [edx + 6]
movsx ecx, byte [esp + eax + 0x20]
movzx eax, byte [edx - 5]
and ecx, eax
add edi, ecx
dec ebp
jne 0x100b26d0
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
add eax, edi
mov ecx, dword [esp + 0x10]
push eax
movzx eax, byte [ebx + 1]
push eax
call fcn.100b2800
mov edx, dword [esp + 0x18]
mov cl, byte [edx + 2]
cmp cl, 7
jae 0x100b271f
dec byte [edx + 3]
jne 0x100b271f
shl word [edx], 1
mov al, 3
shl al, cl
inc cl
mov byte [edx + 3], al
mov byte [edx + 2], cl
mov ecx, esi
mov dword [esi + 8], ebx
call fcn.100b1770
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x110
ret 4