Function at 0x100b13b0
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x14
push ebx
push ebp
mov ebp, ecx
mov eax, 0x100
push esi
push edi
mov edi, dword [esp + 0x28]
movzx ecx, byte [ebp + 2]
imul ecx, eax
movzx eax, byte [ebp + 3]
mov ebx, dword [edi + 0x60]
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], ebx
add cx, ax
xor eax, eax
cmp ax, cx
jne 0x100b13e9
mov edx, 0x10161c90
jmp 0x100b13ee
movzx edx, cx
add edx, ebp
mov eax, dword [ebx + 0x40]
lea ecx, [eax + eax*4]
mov eax, dword [ebx + 0x50]
mov esi, dword [eax + ecx*4]
movzx ecx, byte [edx]
movzx eax, byte [edx + 1]
shl ecx, 8
add ecx, eax
sub ecx, 1
je 0x100b141e
sub ecx, 1
jne 0x100b1521
push esi
mov ecx, edx
call fcn.100c6440
jmp 0x100b1426
push esi
mov ecx, edx
call fcn.100c63f0
mov dword [esp + 0x1c], eax
cmp eax, 0xffffffff
je 0x100b1521
mov dword [edi + 0xc], 8
mov eax, dword [edi + 0xa8]
cmp eax, dword [ebx + 0x40]
jbe 0x100b145b
mov dword [edi + 0xa8], 0
xor eax, eax
mov dword [edi + 0xa4], 0xffffffff
mov esi, dword [ebx + 0x40]
cmp esi, eax
jbe 0x100b14fd
lea ecx, [esi + esi*4]
shl ecx, 2
mov dword [esp + 0x18], ecx
mov ebx, dword [ebx + 0x50]
add ecx, 0xffffffec
add ebx, ecx
lea ecx, [edi + 0xc]
push ebx
push dword [edi + 8]
call fcn.100e2c80
mov edx, eax
mov dword [esp + 0x20], edx
cmp edx, 1
je 0x100b14e1
mov eax, dword [edi + 0x20]
test eax, eax
je 0x100b14a4
movzx ecx, byte [eax]
movzx eax, byte [eax + 1]
shl ecx, 8
add ecx, eax
jmp 0x100b14a6
xor ecx, ecx
mov eax, dword [edi + 0x10]
test dword [ebx + 4], eax
je 0x100b14e1
mov al, byte [edi + 0x17]
test al, al
je 0x100b14ba
cmp al, byte [ebx + 0xf]
jne 0x100b14e1
mov eax, dword [edi + 0x18]
test eax, eax
je 0x100b14dd
push dword [edi + 0x1c]
push ecx
push ebx
call eax
xor ecx, ecx
add esp, 0xc
test al, al
setne cl
cmp ecx, 1
je 0x100b152d
mov edx, dword [esp + 0x20]
jmp 0x100b14e1
test edx, edx
je 0x100b152d
mov ecx, dword [esp + 0x18]
dec esi
mov ebx, dword [esp + 0x14]
sub ecx, 0x14
mov dword [esp + 0x18], ecx
cmp esi, dword [edi + 0xa8]
ja 0x100b1470
lea ecx, [edi + 0xa4]
mov ebp, dword [ecx]
mov eax, dword [ebx + 0x40]
mov dword [edi + 0xa8], eax
cmp ebp, 0xffffffff
jne 0x100b153e
mov eax, dword [ebx + 0x40]
mov ecx, ebx
inc eax
push eax
push 0
call fcn.100fe890
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x14
ret 4
mov ebx, dword [esp + 0x14]
lea ecx, [edi + 0xa4]
lea eax, [esi - 1]
mov dword [ecx], eax
jmp 0x100b1503
mov esi, dword [esp + 0x10]
mov eax, 0x100
movzx ecx, byte [esi + 4]
movzx edx, byte [esi + 5]
imul ecx, eax
xor eax, eax
add dx, cx
cmp ax, dx
jne 0x100b1563
mov ecx, 0x10161c90
jmp 0x100b1568
movzx ecx, dx
add ecx, esi
mov edx, dword [ebx + 0x50]
lea eax, [ebp*4]
add eax, ebp
mov esi, dword [edx + eax*4]
lea eax, [edx + eax*4]
movzx edx, byte [ecx]
mov dword [esp + 0x20], eax
movzx eax, byte [ecx + 1]
shl edx, 8
add edx, eax
sub edx, 1
je 0x100b159c
sub edx, 1
jne 0x100b15a9
push esi
call fcn.100c6440
jmp 0x100b15a2
push esi
call fcn.100c63f0
mov esi, eax
cmp esi, 0xffffffff
jne 0x100b15c2
mov eax, dword [ebx + 0x40]
mov ecx, ebx
inc eax
push eax
push ebp
call fcn.100fe890
pop edi
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x14
ret 4
mov edx, dword [esp + 0x10]
mov eax, 0x100
movzx ecx, byte [edx + 0xa]
imul ecx, eax
movzx eax, byte [edx + 0xb]
add cx, ax
xor eax, eax
cmp ax, cx
jne 0x100b15e7
mov edx, 0x10161c90
jmp 0x100b15ee
movzx edx, cx
add edx, dword [esp + 0x10]
movzx eax, byte [edx]
movzx ecx, byte [edx + 1]
shl eax, 8
add ecx, eax
cmp esi, ecx
jb 0x100b1605
mov esi, 0x10161c90
jmp 0x100b162d
movzx ecx, byte [edx + esi*2 + 2]
mov eax, 0x100
imul ecx, eax
movzx eax, byte [edx + esi*2 + 3]
add cx, ax
xor eax, eax
cmp ax, cx
jne 0x100b1628
mov esi, 0x10161c90
jmp 0x100b162d
movzx esi, cx
add esi, edx
movzx ecx, byte [esi]
movzx eax, byte [esi + 1]
shl ecx, 8
add ecx, eax
je 0x100b15a9
mov eax, dword [esp + 0x20]
xor edi, edi
mov edx, dword [ebx + 0x50]
movzx eax, byte [eax + 0xe]
shr eax, 5
mov dword [esp + 0x20], eax
mov eax, dword [ebx + 0x40]
lea eax, [eax + eax*4]
mov bl, byte [edx + eax*4 + 0xe]
movzx eax, bl
mov edx, eax
shr edx, 5
mov dword [esp + 0x18], edx
mov edx, eax
and eax, 0xf
and edx, 0xf
and bl, 0x10
cmove edi, eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x28]
test eax, eax
je 0x100b16a3
cmp eax, dword [esp + 0x18]
jne 0x100b16a3
cmp dword [esp + 0x14], 0
jbe 0x100b16a3
xor eax, eax
test bl, bl
cmovne edx, eax
cmp ecx, edx
cmovbe edx, ecx
dec edx
jmp 0x100b16a6
lea edx, [ecx - 1]
mov ecx, dword [esp + 0x10]
movzx eax, byte [ecx + 6]
movzx ebx, byte [ecx + 7]
movzx ecx, byte [ecx + 8]
shl eax, 8
add ebx, eax
mov eax, 0x100
imul ecx, eax
mov eax, dword [esp + 0x10]
movzx eax, byte [eax + 9]
add cx, ax
xor eax, eax
cmp ax, cx
jne 0x100b16dc
mov ecx, 0x10161c90
jmp 0x100b16e3
movzx ecx, cx
add ecx, dword [esp + 0x10]
push ebp
push ebx
push esi
push edx
push dword [esp + 0x2c]
push edi
call fcn.100b33e0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret 4