Function at 0x1002bdb0
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x2bc
mov eax, dword [0x101366b4]
xor eax, esp
mov dword [esp + 0x2b8], eax
mov eax, dword [esp + 0x2cc]
mov ecx, dword [esp + 0x2c4]
mov edx, dword [esp + 0x2d4]
push ebx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x2d4]
push ebp
push esi
mov dword [esp + 0x30], edx
xor ebp, ebp
mov ebx, dword [eax + 0x60]
xor esi, esi
mov edx, dword [ecx]
lea eax, [ecx + 0xc]
push edi
mov edi, eax
mov dword [esp + 0x20], ecx
add edx, ecx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x28], eax
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], edx
cmp edi, edx
jae 0x1002bf3f
mov eax, dword [esp + 0x34]
test byte [eax + 0x88], 8
je 0x1002be75
cmp word [esp + 0x2d8], 1
jne 0x1002be75
cmp dword [ebx + 0x30], esi
je 0x1002be75
cmp word [edi + 0xa], 0xa
jne 0x1002be5b
push 5
lea eax, [edi + 0xc]
push eax
push 0x1000304c
call fcn.10116290
add esp, 0xc
test eax, eax
je 0x1002bf5c
mov edx, dword [esp + 0x14]
add edi, dword [edi]
cmp edi, edx
jb 0x1002be35
mov eax, dword [esp + 0x20]
mov edi, dword [esp + 0x28]
mov dword [esp + 0x10], edi
mov ecx, dword [eax]
add ecx, eax
mov dword [esp + 0x14], ecx
mov dx, word [esp + 0x2d8]
lea ecx, [ecx]
cmp word [edi + 4], dx
jne 0x1002bf2b
mov eax, dword [edi]
lea ebx, [edi + 6]
movzx ecx, word [ebx + 4]
add eax, edi
mov dword [esp + 0x1c], eax
lea eax, [ecx + 2]
cmp eax, 0x200
ja 0x1002c28f
push ecx
lea eax, [ebx + 6]
push eax
lea eax, [esp + 0xd0]
push eax
call fcn.101180b0
movzx eax, word [ebx + 4]
add esp, 0xc
and eax, 0xfffffffe
cmp eax, 0x200
jae 0x1002c299
xor ecx, ecx
mov word [esp + eax + 0xc8], cx
movzx eax, word [ebx]
add ebx, eax
cmp word [edi + 4], cx
je 0x1002c12a
mov eax, dword [esp + 0x34]
imul edi, dword [eax + 8], 0x34
mov esi, dword [eax + 4]
add edi, esi
cmp esi, edi
jae 0x1002bf1f
mov eax, dword [esi + 0x18]
test eax, eax
je 0x1002bf18
lea ecx, [esp + 0xc8]
push ecx
push eax
call fcn.10116230
add esp, 8
test eax, eax
je 0x1002c122
add esi, 0x34
cmp esi, edi
jb 0x1002bef8
mov dx, word [esp + 0x2d8]
mov edi, dword [esp + 0x10]
test ebp, ebp
js 0x1002bf3f
add edi, dword [edi]
mov dword [esp + 0x10], edi
cmp edi, dword [esp + 0x14]
jb 0x1002be80
mov eax, ebp
mov ecx, dword [esp + 0x2c8]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10117cfd
add esp, 0x2bc
ret 0x18
cmp edi, dword [esp + 0x14]
jae 0x1002be61
mov eax, dword [edi]
lea ecx, [edi + 6]
add eax, edi
mov dword [esp + 0x30], eax
movzx eax, word [ecx]
add ecx, eax
mov dword [esp + 0x14], ecx
lea ebx, [ebx]
movsx eax, byte [ecx + 3]
mov ebx, dword [ebx + 0x28]
mov dword [esp + 0x40], eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x14]
mov dword [esp + 0x20], ebx
push eax
movzx eax, word [ecx + 4]
push eax
push dword [esp + 0x2c]
call fcn.1002c670
mov ebp, eax
test ebp, ebp
js 0x1002bf3f
mov edi, dword [esp + 0x2c]
lea eax, [esp + 0x44]
push edi
push dword [esp + 0x14]
push eax
call fcn.101180b0
and edi, 0xfffffffe
add esp, 0xc
cmp edi, 0x82
jae 0x1002c299
xor eax, eax
mov word [esp + edi + 0x44], ax
mov eax, dword [esp + 0x14]
lea edx, [eax + 6]
movsx eax, byte [eax + 2]
or eax, 2
mov dword [esp + 0x10], edx
cmp dword [ebx + 0x4c], 0
mov dword [esp + 0x3c], eax
jne 0x1002c08d
mov eax, dword [esp + 0x38]
mov ecx, dword [eax + 0x30]
mov eax, dword [eax + 0x34]
lea eax, [eax + eax*4]
lea ebx, [ecx + eax*4]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x18], ebx
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x2c]
mov eax, dword [eax + 0x4fc]
mov dword [esp + 0x1c], eax
lea eax, [eax + eax*4]
lea edi, [ecx + eax*4]
cmp edi, ebx
jae 0x1002c102
mov ebx, dword [esp + 0x1c]
lea ecx, [edx + 2]
shl ebx, 2
lea esp, [esp]
push 0
push 1
push dword [esp + 0x44]
lea eax, [esp + 0x4c]
push eax
movzx eax, word [edx]
push 0
push eax
push ecx
lea eax, [esp + 0x60]
push eax
mov eax, dword [esp + 0x58]
mov eax, dword [eax + 0x40]
push dword [ebx + eax]
push 1
push dword [esp + 0x4c]
call fcn.1002b870
mov ebp, eax
test ebp, ebp
js 0x1002bf3f
mov edx, dword [esp + 0x10]
add edi, 0x14
add ebx, 4
lea ecx, [edx + 2]
cmp edi, dword [esp + 0x18]
jb 0x1002c040
jmp 0x1002c102
mov ecx, dword [esp + 0x34]
mov esi, dword [ecx + 4]
imul ecx, dword [ecx + 8], 0x34
add ecx, esi
mov dword [esp + 0x18], ecx
cmp esi, ecx
jae 0x1002c102
cmp byte [esi + 0xd], 5
jne 0x1002c0fb
xor ebx, ebx
xor edi, edi
cmp bx, word [esi + 0x20]
jge 0x1002c0fb
lea ebx, [edx + 2]
push 0
push 1
push eax
lea eax, [esp + 0x4c]
push eax
movzx eax, word [edx]
push 0
push eax
push ebx
lea eax, [esp + 0x60]
push eax
mov eax, dword [esi + 0x1c]
push dword [eax + edi*4]
push 1
push dword [esp + 0x4c]
call fcn.1002b870
mov ebp, eax
test ebp, ebp
js 0x1002bf3f
movsx eax, word [esi + 0x20]
inc edi
mov edx, dword [esp + 0x10]
cmp edi, eax
mov eax, dword [esp + 0x3c]
jl 0x1002c0b5
mov ecx, dword [esp + 0x18]
add esi, 0x34
cmp esi, ecx
jb 0x1002c0a2
mov ecx, dword [esp + 0x14]
movzx eax, word [ecx]
add ecx, eax
mov dword [esp + 0x14], ecx
cmp ecx, dword [esp + 0x30]
jae 0x1002be61
mov ebx, dword [esp + 0x38]
jmp 0x1002bf80
cmp esi, edi
jae 0x1002bf1f
mov ebp, dword [esp + 0x28]
lea ecx, [ebp + 6]
mov dword [esp + 0x2c], ecx
jmp 0x1002c144
mov ebp, dword [esp + 0x28]
movsx eax, byte [ebx + 3]
movzx edx, word [ebx + 4]
mov dword [esp + 0x20], eax
mov eax, ecx
test dx, dx
je 0x1002c17b
mov edi, dword [ebp]
add edi, ebp
lea esp, [esp]
movzx ecx, word [eax]
add edx, 0xffff
add eax, 2
add eax, ecx
cmp eax, edi
ja 0x1002c285
test dx, dx
jne 0x1002c160
mov ecx, dword [ebp]
add ecx, ebp
cmp eax, ecx
ja 0x1002c285
movzx edi, word [eax]
lea ecx, [eax + 2]
xor ebp, ebp
lea eax, [edi + 2]
cmp eax, 0x82
ja 0x1002c28f
push edi
push ecx
lea eax, [esp + 0x4c]
push eax
call fcn.101180b0
and edi, 0xfffffffe
add esp, 0xc
cmp edi, 0x82
jae 0x1002c299
mov dx, word [esp + 0x2d8]
xor eax, eax
mov word [esp + edi + 0x44], ax
movsx eax, byte [ebx + 2]
or eax, 2
mov dword [esp + 0x30], eax
test dx, dx
jne 0x1002c20a
push ebp
push 1
push eax
lea eax, [esp + 0x2c]
push eax
movzx eax, word [ebx + 6]
push ebp
push eax
lea eax, [ebx + 8]
push eax
lea eax, [esp + 0x60]
push eax
push ebp
push ebp
push dword [esp + 0x4c]
call fcn.1002b870
mov ebp, eax
test ebp, ebp
js 0x1002bf3f
jmp 0x1002c265
xor ecx, ecx
xor edi, edi
cmp cx, word [esi + 0x20]
jge 0x1002c26d
movzx edx, dx
lea ecx, [ebx + 8]
mov dword [esp + 0x18], edx
mov edi, edi
push 0
push 1
push eax
lea eax, [esp + 0x2c]
push eax
movzx eax, word [ebx + 6]
push 0
push eax
push ecx
lea eax, [esp + 0x60]
push eax
mov eax, dword [esi + 0x1c]
push dword [eax + edi*4]
push edx
push dword [esp + 0x4c]
call fcn.1002b870
mov ebp, eax
test ebp, ebp
js 0x1002bf3f
movsx eax, word [esi + 0x20]
lea ecx, [ebx + 8]
mov edx, dword [esp + 0x18]
inc edi
cmp edi, eax
mov eax, dword [esp + 0x30]
jl 0x1002c220
mov dx, word [esp + 0x2d8]
movzx eax, word [ebx]
mov ecx, dword [esp + 0x2c]
add ebx, eax
cmp ebx, dword [esp + 0x1c]
jb 0x1002c140
jmp 0x1002bf27
mov ebp, 0xfffffb4a
jmp 0x1002bf3f
mov eax, 0xfffffbf2
jmp 0x1002bf41
call fcn.10117992
int3