Function at 0x1002bc80
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x2bc
mov eax, dword [0x1013567c]
xor eax, esp
mov dword [esp + 0x2b8], eax
mov eax, dword [esp + 0x2cc]
mov ecx, dword [esp + 0x2c4]
mov edx, dword [esp + 0x2d4]
push ebx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x2d4]
push ebp
push esi
mov dword [esp + 0x30], edx
xor ebp, ebp
mov ebx, dword [eax + 0x60]
xor esi, esi
mov edx, dword [ecx]
lea eax, [ecx + 0xc]
push edi
mov edi, eax
mov dword [esp + 0x20], ecx
add edx, ecx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x28], eax
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], edx
cmp edi, edx
jae 0x1002be0f
mov eax, dword [esp + 0x34]
test byte [eax + 0x88], 8
je 0x1002bd45
cmp word [esp + 0x2d8], 1
jne 0x1002bd45
cmp dword [ebx + 0x30], esi
je 0x1002bd45
cmp word [edi + 0xa], 0xa
jne 0x1002bd2b
push 5
lea eax, [edi + 0xc]
push eax
push 0x1000300c
call fcn.101157a0
add esp, 0xc
test eax, eax
je 0x1002be2c
mov edx, dword [esp + 0x14]
add edi, dword [edi]
cmp edi, edx
jb 0x1002bd05
mov eax, dword [esp + 0x20]
mov edi, dword [esp + 0x28]
mov dword [esp + 0x10], edi
mov ecx, dword [eax]
add ecx, eax
mov dword [esp + 0x14], ecx
mov dx, word [esp + 0x2d8]
lea ecx, [ecx]
cmp word [edi + 4], dx
jne 0x1002bdfb
mov eax, dword [edi]
lea ebx, [edi + 6]
movzx ecx, word [ebx + 4]
add eax, edi
mov dword [esp + 0x1c], eax
lea eax, [ecx + 2]
cmp eax, 0x200
ja 0x1002c15f
push ecx
lea eax, [ebx + 6]
push eax
lea eax, [esp + 0xd0]
push eax
call fcn.101175c0
movzx eax, word [ebx + 4]
add esp, 0xc
and eax, 0xfffffffe
cmp eax, 0x200
jae 0x1002c169
xor ecx, ecx
mov word [esp + eax + 0xc8], cx
movzx eax, word [ebx]
add ebx, eax
cmp word [edi + 4], cx
je 0x1002bffa
mov eax, dword [esp + 0x34]
imul edi, dword [eax + 8], 0x34
mov esi, dword [eax + 4]
add edi, esi
cmp esi, edi
jae 0x1002bdef
mov eax, dword [esi + 0x18]
test eax, eax
je 0x1002bde8
lea ecx, [esp + 0xc8]
push ecx
push eax
call fcn.10115740
add esp, 8
test eax, eax
je 0x1002bff2
add esi, 0x34
cmp esi, edi
jb 0x1002bdc8
mov dx, word [esp + 0x2d8]
mov edi, dword [esp + 0x10]
test ebp, ebp
js 0x1002be0f
add edi, dword [edi]
mov dword [esp + 0x10], edi
cmp edi, dword [esp + 0x14]
jb 0x1002bd50
mov eax, ebp
mov ecx, dword [esp + 0x2c8]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.1011720d
add esp, 0x2bc
ret 0x18
cmp edi, dword [esp + 0x14]
jae 0x1002bd31
mov eax, dword [edi]
lea ecx, [edi + 6]
add eax, edi
mov dword [esp + 0x30], eax
movzx eax, word [ecx]
add ecx, eax
mov dword [esp + 0x14], ecx
lea ebx, [ebx]
movsx eax, byte [ecx + 3]
mov ebx, dword [ebx + 0x28]
mov dword [esp + 0x40], eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x14]
mov dword [esp + 0x20], ebx
push eax
movzx eax, word [ecx + 4]
push eax
push dword [esp + 0x2c]
call fcn.1002c540
mov ebp, eax
test ebp, ebp
js 0x1002be0f
mov edi, dword [esp + 0x2c]
lea eax, [esp + 0x44]
push edi
push dword [esp + 0x14]
push eax
call fcn.101175c0
and edi, 0xfffffffe
add esp, 0xc
cmp edi, 0x82
jae 0x1002c169
xor eax, eax
mov word [esp + edi + 0x44], ax
mov eax, dword [esp + 0x14]
lea edx, [eax + 6]
movsx eax, byte [eax + 2]
or eax, 2
mov dword [esp + 0x10], edx
cmp dword [ebx + 0x4c], 0
mov dword [esp + 0x3c], eax
jne 0x1002bf5d
mov eax, dword [esp + 0x38]
mov ecx, dword [eax + 0x30]
mov eax, dword [eax + 0x34]
lea eax, [eax + eax*4]
lea ebx, [ecx + eax*4]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x18], ebx
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x2c]
mov eax, dword [eax + 0x4fc]
mov dword [esp + 0x1c], eax
lea eax, [eax + eax*4]
lea edi, [ecx + eax*4]
cmp edi, ebx
jae 0x1002bfd2
mov ebx, dword [esp + 0x1c]
lea ecx, [edx + 2]
shl ebx, 2
lea esp, [esp]
push 0
push 1
push dword [esp + 0x44]
lea eax, [esp + 0x4c]
push eax
movzx eax, word [edx]
push 0
push eax
push ecx
lea eax, [esp + 0x60]
push eax
mov eax, dword [esp + 0x58]
mov eax, dword [eax + 0x40]
push dword [ebx + eax]
push 1
push dword [esp + 0x4c]
call fcn.1002b740
mov ebp, eax
test ebp, ebp
js 0x1002be0f
mov edx, dword [esp + 0x10]
add edi, 0x14
add ebx, 4
lea ecx, [edx + 2]
cmp edi, dword [esp + 0x18]
jb 0x1002bf10
jmp 0x1002bfd2
mov ecx, dword [esp + 0x34]
mov esi, dword [ecx + 4]
imul ecx, dword [ecx + 8], 0x34
add ecx, esi
mov dword [esp + 0x18], ecx
cmp esi, ecx
jae 0x1002bfd2
cmp byte [esi + 0xd], 5
jne 0x1002bfcb
xor ebx, ebx
xor edi, edi
cmp bx, word [esi + 0x20]
jge 0x1002bfcb
lea ebx, [edx + 2]
push 0
push 1
push eax
lea eax, [esp + 0x4c]
push eax
movzx eax, word [edx]
push 0
push eax
push ebx
lea eax, [esp + 0x60]
push eax
mov eax, dword [esi + 0x1c]
push dword [eax + edi*4]
push 1
push dword [esp + 0x4c]
call fcn.1002b740
mov ebp, eax
test ebp, ebp
js 0x1002be0f
movsx eax, word [esi + 0x20]
inc edi
mov edx, dword [esp + 0x10]
cmp edi, eax
mov eax, dword [esp + 0x3c]
jl 0x1002bf85
mov ecx, dword [esp + 0x18]
add esi, 0x34
cmp esi, ecx
jb 0x1002bf72
mov ecx, dword [esp + 0x14]
movzx eax, word [ecx]
add ecx, eax
mov dword [esp + 0x14], ecx
cmp ecx, dword [esp + 0x30]
jae 0x1002bd31
mov ebx, dword [esp + 0x38]
jmp 0x1002be50
cmp esi, edi
jae 0x1002bdef
mov ebp, dword [esp + 0x28]
lea ecx, [ebp + 6]
mov dword [esp + 0x2c], ecx
jmp 0x1002c014
mov ebp, dword [esp + 0x28]
movsx eax, byte [ebx + 3]
movzx edx, word [ebx + 4]
mov dword [esp + 0x20], eax
mov eax, ecx
test dx, dx
je 0x1002c04b
mov edi, dword [ebp]
add edi, ebp
lea esp, [esp]
movzx ecx, word [eax]
add edx, 0xffff
add eax, 2
add eax, ecx
cmp eax, edi
ja 0x1002c155
test dx, dx
jne 0x1002c030
mov ecx, dword [ebp]
add ecx, ebp
cmp eax, ecx
ja 0x1002c155
movzx edi, word [eax]
lea ecx, [eax + 2]
xor ebp, ebp
lea eax, [edi + 2]
cmp eax, 0x82
ja 0x1002c15f
push edi
push ecx
lea eax, [esp + 0x4c]
push eax
call fcn.101175c0
and edi, 0xfffffffe
add esp, 0xc
cmp edi, 0x82
jae 0x1002c169
mov dx, word [esp + 0x2d8]
xor eax, eax
mov word [esp + edi + 0x44], ax
movsx eax, byte [ebx + 2]
or eax, 2
mov dword [esp + 0x30], eax
test dx, dx
jne 0x1002c0da
push ebp
push 1
push eax
lea eax, [esp + 0x2c]
push eax
movzx eax, word [ebx + 6]
push ebp
push eax
lea eax, [ebx + 8]
push eax
lea eax, [esp + 0x60]
push eax
push ebp
push ebp
push dword [esp + 0x4c]
call fcn.1002b740
mov ebp, eax
test ebp, ebp
js 0x1002be0f
jmp 0x1002c135
xor ecx, ecx
xor edi, edi
cmp cx, word [esi + 0x20]
jge 0x1002c13d
movzx edx, dx
lea ecx, [ebx + 8]
mov dword [esp + 0x18], edx
mov edi, edi
push 0
push 1
push eax
lea eax, [esp + 0x2c]
push eax
movzx eax, word [ebx + 6]
push 0
push eax
push ecx
lea eax, [esp + 0x60]
push eax
mov eax, dword [esi + 0x1c]
push dword [eax + edi*4]
push edx
push dword [esp + 0x4c]
call fcn.1002b740
mov ebp, eax
test ebp, ebp
js 0x1002be0f
movsx eax, word [esi + 0x20]
lea ecx, [ebx + 8]
mov edx, dword [esp + 0x18]
inc edi
cmp edi, eax
mov eax, dword [esp + 0x30]
jl 0x1002c0f0
mov dx, word [esp + 0x2d8]
movzx eax, word [ebx]
mov ecx, dword [esp + 0x2c]
add ebx, eax
cmp ebx, dword [esp + 0x1c]
jb 0x1002c010
jmp 0x1002bdf7
mov ebp, 0xfffffb4a
jmp 0x1002be0f
mov eax, 0xfffffbf2
jmp 0x1002be11
call fcn.10116ea2
int3