Function at 0x1002ecfb
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006e324
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x1e4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 8]
test eax, eax
je 0x1002ee31
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xb8], 0x66c6
mov dword [ebp - 0xd0], 0x10008578
cmp dword [ebp - 0xb8], 0x69bf
jle 0x1002edc0
and dword [ebp - 0x5c], 0
jmp 0x1002ed74
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x7893
jge 0x1002edc0
and dword [ebp - 0x4c], 0
jmp 0x1002ed8a
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x787e
jge 0x1002edbe
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x4c]
cdq
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x100], edx
push dword [ebp - 0x100]
push dword [ebp - 0x104]
mov ecx, 0x10615778
call fcn.1000f4d4
jmp 0x1002ed83
jmp 0x1002ed6d
push 0x2029
push dword [ebp - 0xd4]
push dword [ebp - 0xcc]
push 0x4fa6
push 1
push dword [ebp - 0xf8]
call fcn.1002f778
add esp, 0x18
and dword [ebp - 4], 0
cmp dword [ebp - 0xb8], 0x634d
jge 0x1002ee06
mov edx, dword [ebp - 0xd0]
mov ecx, 0x10615778
call fcn.1001223d
jmp 0x1002ee22
or dword [ebp - 4], 0xffffffff
jmp 0x1002ee2c
jmp 0x1002f767
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xdc], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xc8]
movzx eax, byte [eax]
test eax, eax
je 0x1002ee90
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x74]
mov dword [ecx], eax
jmp 0x1002f767
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x28], 0xfffffffa
mov dword [ebp - 0x2c], 0xfffffffa
mov dword [ebp - 0x54], 2
mov dword [ebp - 0x15c], 9
push 3
lea ecx, [ebp - 0x134]
call fcn.1000f72c
mov dword [ebp - 4], 2
mov dword [ebp - 0x154], 0xffffffff
mov dword [ebp - 0x58], 0
jmp 0x1002eefe
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x1002ef1a
push dword [ebp - 0x58]
lea ecx, [ebp - 0x134]
call fcn.1000f7aa
mov dword [eax], 0xc9d94031
jmp 0x1002eef7
mov byte [ebp - 0x21], 0
push 0
lea eax, [ebp - 0x21]
push eax
call fcn.10030f9b
pop ecx
pop ecx
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x28]
je 0x1002ef3c
mov dword [ebp - 0x80], 1
jmp 0x1002ef40
and dword [ebp - 0x80], 0
mov dword [ebp - 0x2c], 1
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x80]
je 0x1002f087
mov dword [ebp - 0x114], 0xfffffffa
mov dword [ebp - 0x110], 0xfffffffa
mov dword [ebp - 0x10c], 0xfffffffa
mov dword [ebp - 0x108], 0xfffffffa
mov dword [ebp - 0x170], 0xaff63588
mov dword [ebp - 0x178], 0xfffffff7
mov dword [ebp - 0x19c], 0x11e043ee
mov dword [ebp - 0x1b4], 0x8451f1e2
mov dword [ebp - 0x18c], 0x9f196e6c
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x28], 0
jmp 0x1002efc7
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffea
jne 0x1002f082
mov dword [ebp - 0x150], 0xfffffffc
mov dword [ebp - 0x144], 0x753589fe
mov dword [ebp - 0x158], 0x9ca3191b
mov dword [ebp - 0x160], 0x31aa08
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xffffffff
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x2c], 0
jmp 0x1002f027
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xb
jle 0x1002f067
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x30], 0
jmp 0x1002f044
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jg 0x1002f065
mov eax, dword [ebp - 0x30]
mov ecx, 0x735b263d
sub ecx, dword [ebp + eax*4 - 0x114]
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x114], ecx
jmp 0x1002f03d
jmp 0x1002f020
lea eax, [ebp - 0x134]
push eax
push 0
push 0x7abd
call fcn.100302de
add esp, 0xc
jmp 0x1002efc0
jmp 0x1002f147
mov dword [ebp - 0x64], 0x983c
mov dword [ebp - 0xe4], 0xbf5ee879
mov dword [ebp - 0x54], 0xfffffff4
jmp 0x1002f0a8
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xfffffff2
jle 0x1002f129
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x128], 0xfffffff7
mov dword [ebp - 0x124], 0xfffffff7
mov dword [ebp - 0x120], 0xfffffff7
mov dword [ebp - 0x11c], 0xfffffff7
lea ecx, [ebp - 0x6d]
call fcn.1000f80c
push eax
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0x1d8]
call fcn.1000f80f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1d0]
call fcn.1000f768
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
lea ecx, [ebp - 0x1d0]
call fcn.1000f78e
jmp 0x1002f0a1
push 0
push 0x57d8
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1002d295
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x134]
call fcn.1000f78e
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 4]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x60]
mov ecx, dword [ecx]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x18], eax
and dword [ebp - 0x6c], 0
jmp 0x1002f18d
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x18]
add eax, 0x28
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x6c], eax
jge 0x1002f767
push 0x7261
push 0
call fcn.100353bf
pop ecx
pop ecx
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0x10], 0
jne 0x1002f301
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0xd4f2887c
mov dword [ebp - 0x44], 0
jmp 0x1002f1d8
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x1002f1ee
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x1f4], 0xfffffff7
jmp 0x1002f1d1
push 0x46c4
push 0
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x38]
push eax
push 0x7344
push 0x5450
call fcn.1002c6c7
add esp, 0x18
mov dword [ebp - 0x34], 0
jmp 0x1002f21f
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x26
jle 0x1002f27e
mov dword [ebp - 0x38], 0
jmp 0x1002f235
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jg 0x1002f24b
push 0x336c
push 0
call fcn.100306a2
pop ecx
pop ecx
jmp 0x1002f22e
push 0x3a0c
push 0x773a
push 0x1921
push 0x4fea
push 1
push 1
push 0x6c58
push 0x5e1
push 0x426f
push 0
call fcn.10033e98
add esp, 0x28
jmp 0x1002f218
push 0x340a
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x68]
push eax
push 0x2c1d
lea eax, [ebp - 0x18]
push eax
push 0
call fcn.1002cea2
add esp, 0x1c
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
jmp 0x1002f2bf
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x1002f2d5
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x1e8], 0
jmp 0x1002f2b8
mov dword [ebp - 0x3c], 0
jmp 0x1002f2e5
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jg 0x1002f2fc
mov eax, dword [ebp - 0x3c]
cmp dword [ebp + eax*4 - 0x1e8], 0
je 0x1002f2fa
jmp 0x1002f2fc
jmp 0x1002f2de
jmp 0x1002f17d
mov dword [ebp - 0xac], 0xd33a4a9b
mov dword [ebp - 0xa8], 0xd33a4a9b
mov dword [ebp - 0xa4], 0xd33a4a9b
mov dword [ebp - 0xa0], 0xd33a4a9b
mov dword [ebp - 0x20], 0xd97a888a
mov dword [ebp - 0x194], 0x128f3b8c
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x20], 0
jmp 0x1002f37c
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jg 0x1002f665
mov dword [ebp - 0x14], 0x7f2fb5a5
mov dword [ebp - 0x98], 0xefdb7b24
push 3
lea ecx, [ebp - 0x140]
call fcn.1000f72c
mov dword [ebp - 4], 3
mov dword [ebp - 0x1c], 0
jmp 0x1002f3bb
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1002f3d7
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x140]
call fcn.1000f7aa
mov dword [eax], 0xfffffffa
jmp 0x1002f3b4
mov dword [ebp - 0x1c], 0
jmp 0x1002f3e7
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x1002f3fd
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1c4], 1
jmp 0x1002f3e0
mov dword [ebp - 0x14], 3
jmp 0x1002f40d
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1002f42f
mov dword [ebp - 0xc0], 0x4d8a94b2
lea eax, [ebp - 0xc0]
push eax
push 0
call fcn.10033d7e
pop ecx
pop ecx
jmp 0x1002f406
mov dword [ebp - 0x14], 3
jmp 0x1002f43f
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1002f651
mov dword [ebp - 0x198], 0xffffffff
mov dword [ebp - 0x17c], 0xfffffffa
mov dword [ebp - 0x9c], 0xffffffff
mov dword [ebp - 0x148], 0xfffffffc
mov byte [ebp - 0x22], 0
push 0x3ee6
push 0x64d0
lea eax, [ebp - 0x22]
push eax
push 0
push 0x679a
push 0x7038
push 0x1866
call fcn.10032143
add esp, 0x1c
cmp dword [ebp - 0x98], 0x3758
je 0x1002f4b4
mov dword [ebp - 0xd8], 1
jmp 0x1002f4bb
and dword [ebp - 0xd8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xac]
mov dword [ebp - 0x14c], eax
push 2
lea ecx, [ebp - 0x140]
call fcn.1000f7aa
and dword [eax], 0
xor eax, eax
jne 0x1002f4f2
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x1002f4f2
and dword [ebp - 0x88], 0
jmp 0x1002f4fc
mov dword [ebp - 0x88], 1
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x88], eax
jle 0x1002f516
mov dword [ebp - 0xb4], 1
jmp 0x1002f51d
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0xac]
cmp eax, dword [ebp - 0xb4]
jle 0x1002f53b
mov dword [ebp - 0xe0], 1
jmp 0x1002f542
and dword [ebp - 0xe0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c4]
dec eax
mov dword [ebp - 0xe8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe8]
mov dword [ebp + eax - 0x1c4], ecx
cmp dword [ebp - 0x9c], 0xcd58
jl 0x1002f581
mov dword [ebp - 0x90], 1
jmp 0x1002f588
and dword [ebp - 0x90], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0xac]
cmp dword [ebp - 0x90], eax
jl 0x1002f5a3
mov dword [ebp - 0x78], 1
jmp 0x1002f5a7
and dword [ebp - 0x78], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0xac]
cmp eax, dword [ebp - 0x78]
jne 0x1002f5bf
mov dword [ebp - 0x7c], 1
jmp 0x1002f5c3
and dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xac]
cmp eax, dword [ebp - 0x7c]
jg 0x1002f5de
mov dword [ebp - 0x84], 1
jmp 0x1002f5e5
and dword [ebp - 0x84], 0
cmp dword [ebp - 0x84], 0x4d0043d4
jg 0x1002f5fd
mov dword [ebp - 0x8c], 1
jmp 0x1002f604
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xac]
cmp dword [ebp - 0x8c], eax
jl 0x1002f622
mov dword [ebp - 0x94], 1
jmp 0x1002f629
and dword [ebp - 0x94], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9c], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xac]
mov ecx, dword [ebp - 0x20]
mov dword [ebp + ecx*4 - 0xac], eax
jmp 0x1002f438
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x140]
call fcn.1000f78e
jmp 0x1002f375
push 4
push 0x1000
mov eax, dword [ebp - 0x18]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xb0]
add ecx, dword [eax + 0xc]
push ecx
push 0x5a1a
push 0x46cd
call fcn.100262bb
pop ecx
pop ecx
call eax
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x18]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xf0]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x68]
call fcn.10028636
add esp, 0xc
push 4
lea ecx, [ebp - 0x188]
call fcn.1000f72c
mov dword [ebp - 4], 4
mov dword [ebp - 0x50], 8
mov dword [ebp - 0x48], 0
jmp 0x1002f6de
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x1002f6f7
push dword [ebp - 0x48]
lea ecx, [ebp - 0x188]
call fcn.1000f7aa
and dword [eax], 0
jmp 0x1002f6d7
mov dword [ebp - 0x50], 3
jmp 0x1002f707
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x1002f732
push 0x58b2
push 0x1a56
push 0x24e2
push 0x5212
push 0x7dad
push 0
call fcn.1002ca17
add esp, 0x18
jmp 0x1002f700
push 0x4d01
push 0
push 1
push 0xf2
push 0
call fcn.10032581
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.1000f78e
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x68]
mov dword [eax + 8], ecx
jmp 0x1002f17d
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret