Function at 0x10bb505
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
lea ebp, [esp - 0x74]
sub esp, 0xa4
push ebx
mov ebx, dword [ebp + 0x7c]
push esi
push edi
mov edi, dword [ebx + 0x54]
mov esi, dword [edi + 0x398]
xor eax, eax
mov ax, word [esi]
cmp word [edi + 0x39c], ax
jae 0x10bb543
push eax
push edi
call fcn.010bb2c0
test ax, ax
jne 0x10bb730
mov esi, dword [edi + 0x398]
movzx eax, word [esi]
add eax, esi
mov dword [edi + 0x398], eax
mov ax, word [esi]
sub word [edi + 0x39c], ax
lea eax, [ebp + 0x20]
push eax
push 8
push dword [ebx + 0x60]
call fcn.01082c67
mov eax, dword [ebx + 0x74]
mov dword [ebp + 0x20], eax
mov ax, word [esi + 6]
mov word [ebp + 0x46], ax
xor eax, eax
mov al, byte [esi + 8]
xor ecx, ecx
lea edx, [esi + 2]
and eax, 1
mov word [ebp + 0x30], ax
xor eax, eax
mov al, byte [esi + 8]
and eax, 4
mov word [ebp + 0x4e], ax
mov al, byte [esi + 0x20]
mov byte [ebp + 0x24], al
mov al, byte [esi + 0x21]
mov byte [ebp + 0x25], al
mov dword [ebp + 0x48], ecx
mov word [ebp + 0x4c], cx
mov eax, dword [esi + 0xc]
mov dword [ebp + 0x40], eax
mov eax, dword [esi + 0x14]
mov dword [ebp + 0x28], eax
mov eax, dword [esi + 0x18]
mov dword [ebp + 0x2c], eax
movzx ax, byte [esi + 0x22]
mov word [ebp + 0x44], ax
mov edx, dword [edx]
mov eax, 0x1011b3c
cmp edx, dword [eax]
jne 0x10bb619
lea eax, [esi + 0x24]
mov edx, dword [eax + 5]
mov dword [ebp + 0x34], edx
and byte [ebp + 0x37], cl
or byte [ebp + 0x37], 1
movzx edx, word [eax + 0xb]
add edx, esi
push ecx
mov dword [ebp + 0x50], edx
mov dx, word [eax + 9]
push eax
lea eax, [ebp + 0x10]
push eax
mov word [ebp + 0x54], dx
call fcn.01090aec
lea eax, [ebp + 0x10]
mov dword [ebp + 0x60], eax
xor eax, eax
lea edi, [ebp]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp]
mov dword [ebp + 0x58], eax
lea eax, [ebp]
mov dword [ebp + 0x5c], eax
lea eax, [ebp]
jmp 0x10bb719
mov cl, byte [edi + 0x3b4]
cmp cl, 1
jne 0x10bb62c
mov eax, dword [ebp + 0x68]
lea ebx, [esi + 0x24]
jmp 0x10bb635
mov ebx, dword [ebp + 0x7c]
lea eax, [esi + 0x24]
mov dword [ebp + 0x68], eax
cmp cl, 1
jne 0x10bb65e
mov ecx, dword [ebx + 0x14]
and ecx, 0xfffffff9
mov dword [ebp + 0x34], ecx
mov edx, dword [ebx + 0x14]
and edx, 2
shl edx, 0xf
or ecx, edx
mov dword [ebp + 0x34], ecx
mov edx, dword [ebx + 0x14]
and edx, 4
shl edx, 0xf
or ecx, edx
jmp 0x10bb661
mov ecx, dword [eax + 0x14]
mov dword [ebp + 0x34], ecx
cmp byte [edi + 0x3b4], 1
push 0
lea edi, [ebp + 0x6c]
jne 0x10bb697
movzx eax, word [ebx + 0x1a]
add eax, esi
mov dword [ebp + 0x50], eax
mov ax, word [ebx + 0x18]
mov word [ebp + 0x54], ax
lea esi, [ebx + 5]
lea eax, [ebp + 0x6c]
movsd dword es:[edi], dword [esi]
push eax
lea eax, [ebp - 0x30]
push eax
movsb byte es:[edi], byte [esi]
call fcn.01090aec
jmp 0x10bb6bd
movzx ecx, word [eax + 0x1a]
add ecx, esi
mov dword [ebp + 0x50], ecx
mov cx, word [eax + 0x18]
lea esi, [eax + 5]
mov word [ebp + 0x54], cx
lea eax, [ebp + 0x6c]
movsd dword es:[edi], dword [esi]
push eax
lea eax, [ebp - 0x30]
push eax
movsb byte es:[edi], byte [esi]
call fcn.01090aec
mov ebx, dword [ebp + 0x68]
push 0
lea eax, [ebp + 0x6c]
mov esi, ebx
lea edi, [ebp + 0x6c]
push eax
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x20]
push eax
movsb byte es:[edi], byte [esi]
call fcn.01090aec
push 0
lea eax, [ebp + 0x6c]
lea esi, [ebx + 0xa]
lea edi, [ebp + 0x6c]
push eax
movsd dword es:[edi], dword [esi]
lea eax, [ebp + 0x10]
push eax
movsb byte es:[edi], byte [esi]
call fcn.01090aec
push 0
lea eax, [ebp + 0x6c]
lea esi, [ebx + 0xf]
lea edi, [ebp + 0x6c]
push eax
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x10]
push eax
movsb byte es:[edi], byte [esi]
call fcn.01090aec
mov ebx, dword [ebp + 0x7c]
lea eax, [ebp - 0x30]
mov dword [ebp + 0x58], eax
lea eax, [ebp - 0x20]
mov dword [ebp + 0x5c], eax
lea eax, [ebp + 0x10]
mov dword [ebp + 0x60], eax
lea eax, [ebp - 0x10]
mov ebx, dword [ebx + 0x60]
lea ecx, [ebp + 0x20]
push ecx
mov dword [ebp + 0x64], eax
mov eax, dword [ebx + 0x1c]
push ebx
call dword [eax + 0x10c]
xor ax, ax
pop edi
pop esi
pop ebx
add ebp, 0x74
leave
ret 4