Function at 0x1002d6b0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x20], ecx
mov ecx, dword [ebp + 8]
push ebx
mov ebx, dword [eax + 4]
mov dword [esp + 0x20], edx
mov byte [eax + 0xa], 0
mov dl, byte [ecx]
push esi
push edi
cmp dl, 0x80
jae 0x1002d6df
movzx esi, dl
mov dl, 1
jmp 0x1002d6f4
lea edx, [esp + 0x24]
call fcn.10009cb0
mov esi, dword [esp + 0x24]
mov dl, al
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov edi, esi
movzx edx, dl
mov dword [esp + 0x24], esi
xor esi, esi
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], edi
mov dword [esp + 0x20], esi
cmp edx, edi
jae 0x1002da36
mov dword [esp + 0x14], 4
nop dword [eax + eax]
cmp edi, dword [esp + 0x28]
ja 0x1002da3c
cmp byte [edx + ecx], 0x80
lea esi, [edx + ecx]
movzx ecx, byte [esi]
jae 0x1002d73a
mov al, 1
jmp 0x1002d78c
movzx edx, byte [esi + 1]
test dl, dl
js 0x1002d74e
and ecx, 0x7f
mov al, 2
shl ecx, 7
or ecx, edx
jmp 0x1002d788
movzx eax, byte [esi + 2]
shl ecx, 0xe
or eax, ecx
test al, al
js 0x1002d76e
mov ecx, edx
and eax, 0x1fc07f
and ecx, 0x7f
shl ecx, 7
or ecx, eax
mov al, 3
jmp 0x1002d788
lea edx, [esp + 0x30]
mov ecx, esi
call fcn.10009b00
mov ecx, dword [esp + 0x30]
xor edx, edx
cmp edx, dword [esp + 0x34]
je 0x1002d788
or ecx, 0xffffffff
mov edx, dword [esp + 0x1c]
add edi, dword [ebp + 8]
movzx eax, al
add edx, eax
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x2c]
mov al, byte [edx + 4]
mov byte [ebx + 0xa], al
mov eax, dword [edx + 0xc]
mov dword [ebx + 0x20], eax
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x10], 0
cmp ecx, 0xb
ja case.default.0x1002d7bf
jmp dword [ecx*4 + 0x1002da78]
mov dword [ebx + 0xc], 0
mov eax, 0x4001
mov dword [ebx], 0
xor edx, edx
jmp 0x1002da02
mov eax, 1
xor edx, edx
jmp 0x1002da02
movsx eax, byte [edi]
cdq
mov dword [ebx], eax
mov eax, dword [esp + 0x14]
mov dword [ebx + 4], edx
mov edx, 1
jmp 0x1002da02
movsx eax, byte [edi]
movzx ecx, byte [edi + 1]
shl eax, 8
or eax, ecx
cdq
mov dword [ebx], eax
mov eax, dword [esp + 0x14]
mov dword [ebx + 4], edx
mov edx, 2
jmp 0x1002da02
movzx eax, byte [edi + 1]
movsx ecx, byte [edi]
shl eax, 8
shl ecx, 0x10
or eax, ecx
movzx ecx, byte [edi + 2]
or eax, ecx
cdq
mov dword [ebx], eax
mov eax, dword [esp + 0x14]
mov dword [ebx + 4], edx
mov edx, 3
jmp 0x1002da02
movzx eax, byte [edi + 1]
movzx ecx, byte [edi + 2]
shl eax, 8
or eax, ecx
movsx ecx, byte [edi]
shl eax, 8
shl ecx, 0x18
or eax, ecx
movzx ecx, byte [edi + 3]
or eax, ecx
cdq
mov dword [ebx], eax
mov eax, dword [esp + 0x14]
mov dword [ebx + 4], edx
mov edx, 4
jmp 0x1002da02
movzx eax, byte [edi + 2]
mov ecx, dword [esp + 0x18]
cdq
mov esi, eax
mov edi, edx
mov eax, dword [ebp + 8]
shld edi, esi, 8
shl esi, 8
movzx eax, byte [ecx + eax + 3]
cdq
or esi, eax
or edi, edx
mov eax, dword [ebp + 8]
shld edi, esi, 8
shl esi, 8
movzx eax, byte [ecx + eax + 4]
cdq
or esi, eax
or edi, edx
mov eax, dword [ebp + 8]
shld edi, esi, 8
shl esi, 8
movzx eax, byte [ecx + eax + 5]
cdq
or edi, edx
or esi, eax
mov edx, dword [ebp + 8]
movsx eax, byte [ecx + edx]
movzx ecx, byte [ecx + edx + 1]
shl eax, 8
or eax, ecx
add esi, 0
cdq
adc edi, eax
mov dword [ebx], esi
mov eax, dword [esp + 0x14]
mov edx, 6
mov dword [ebx + 4], edi
jmp 0x1002da02
movzx eax, byte [edi]
cdq
mov esi, edx
shld esi, eax, 8
shl eax, 8
mov dword [esp + 0x10], eax
movzx eax, byte [edi + 1]
cdq
or dword [esp + 0x10], eax
or esi, edx
mov eax, dword [esp + 0x10]
shld esi, eax, 8
shl eax, 8
mov dword [esp + 0x10], eax
movzx eax, byte [edi + 2]
cdq
or dword [esp + 0x10], eax
or esi, edx
mov eax, dword [esp + 0x10]
shld esi, eax, 8
shl eax, 8
mov dword [esp + 0x10], eax
movzx eax, byte [edi + 3]
cdq
or dword [esp + 0x10], eax
movzx eax, byte [edi + 4]
cdq
mov esi, eax
mov edi, edx
mov edx, dword [ebp + 8]
mov eax, dword [esp + 0x18]
shld edi, esi, 8
shl esi, 8
movzx eax, byte [eax + edx + 5]
cdq
or esi, eax
or edi, edx
mov edx, dword [ebp + 8]
mov eax, dword [esp + 0x18]
shld edi, esi, 8
shl esi, 8
movzx eax, byte [eax + edx + 6]
cdq
or esi, eax
or edi, edx
mov edx, dword [ebp + 8]
mov eax, dword [esp + 0x18]
shld edi, esi, 8
shl esi, 8
movzx eax, byte [eax + edx + 7]
cdq
or edi, edx
or esi, eax
mov eax, dword [esp + 0x10]
xor edx, edx
add edx, esi
mov dword [ebx], edx
adc eax, edi
mov dword [ebx + 4], eax
cmp ecx, 6
jne 0x1002d9ab
lea eax, [ecx - 2]
lea edx, [ecx + 2]
jmp 0x1002da02
mov ecx, eax
and ecx, 0x7ff00000
cmp ecx, 0x7ff00000
jne 0x1002d9c9
and eax, 0xfffff
or edx, eax
mov eax, 1
jne 0x1002d9ce
mov eax, 8
movzx eax, ax
mov edx, 8
jmp 0x1002da02
mov eax, dword [esp + 0x14]
add ecx, 0xfffffff8
mov dword [ebx], ecx
xor edx, edx
mov dword [ebx + 4], 0
jmp 0x1002da02
lea edx, [ecx - 0xc]
mov dword [ebx + 0x10], edi
shr edx, 1
and ecx, 1
mov dword [ebx + 0xc], edx
mov ax, word [ecx*2 + 0x10118284]
mov esi, dword [esp + 0x20]
mov edi, dword [esp + 0x18]
inc esi
mov word [ebx + 8], ax
add edi, edx
mov eax, dword [ebp + 0xc]
add ebx, 0x28
mov dword [esp + 0x18], edi
mov dword [esp + 0x20], esi
cmp si, word [eax + 8]
jae 0x1002da36
mov edx, dword [esp + 0x1c]
mov ecx, dword [ebp + 8]
cmp edx, dword [esp + 0x24]
jb 0x1002d720
cmp edi, dword [esp + 0x28]
jbe 0x1002da6b
test si, si
je 0x1002da6b
mov ecx, 0x2400
test word [ebx - 0x20], cx
je 0x1002da62
lea ecx, [ebx - 0x28]
call fcn.10027d00
mov eax, dword [ebp + 0xc]
mov word [eax + 8], si
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, 1
mov word [ebx - 0x20], cx
pop edi
mov word [eax + 8], si
pop esi
pop ebx
mov esp, ebp
pop ebp
ret