Function at 0x10020df0
Capabilities:
Enumerate pe sections

Disassembly:
push esi
mov esi, ecx
mov eax, dword [esi + 4]
mov eax, dword [eax + 8]
cmp dword [eax], 0
jg 0x10021031
push ebx
push edi
lea ebx, [esi + 0x20]
mov edi, 1
push ebx
call fcn.1002ec20
mov eax, dword [esi + 4]
mov eax, dword [eax + 8]
cmp dword [eax], 0
jg 0x10020fe7
test di, di
je 0x10020fe7
movzx eax, di
lea edi, [eax*8 + 0x1016a828]
mov cl, byte [edi + 4]
cmp cl, 0x7f
jae 0x10020e49
cmp byte [esi + 0x24], 0
jne 0x10020e49
movzx eax, cl
cmp eax, dword [ebx]
je 0x10020e61
cmp cl, 0xff
je 0x10020e61
cmp cl, 0xfe
jne 0x10020f15
cmp byte [esi + 0x24], 0
je 0x10020f3e
mov eax, dword [esi + 4]
mov eax, dword [eax + 4]
test eax, eax
je 0x10020e79
push str.scan
push eax
call fcn.1010e490
add esp, 8
push dword [edi]
mov ecx, esi
call fcn.1002ec20
test al, al
je 0x10020fe7
cmp byte [edi + 6], 0
je 0x10020ef8
inc dword [esi + 0x134]
mov ecx, dword [esi + 0x134]
cmp ecx, 0x64
jl 0x10020eef
mov eax, dword [esi + 4]
mov eax, dword [eax + 8]
cmp dword [eax], 0
jg 0x10020ee3
mov dword [eax], 0x10200
mov eax, dword [esi + 4]
mov ecx, dword [eax + 0xc]
test ecx, ecx
je 0x10020ee3
mov eax, dword [esi + 0x14]
mov dword [ecx], eax
mov eax, dword [esi + 4]
mov ecx, dword [eax + 0xc]
mov eax, dword [esi + 0x18]
mov dword [ecx + 4], eax
xor ecx, ecx
mov eax, dword [esi + 4]
mov eax, dword [eax + 0xc]
mov word [eax + 8], cx
mov eax, dword [esi + 4]
mov eax, dword [eax + 0xc]
mov word [eax + 0x28], cx
dec dword [esi + 0x134]
mov ecx, dword [esi + 0x134]
movzx eax, byte [edi + 6]
mov word [esi + ecx*2 + 0x6c], ax
cmp byte [edi + 7], 0
je 0x10020f06
push ebx
mov ecx, esi
call fcn.1002ec20
mov al, byte [edi + 5]
cmp al, 0xff
je 0x10020f7a
movzx edi, al
jmp 0x10020fd8
cmp cl, 0xfd
jne 0x10020f30
cmp byte [esi + 0x24], 0
je 0x10020f3e
mov eax, dword [ebx]
cmp eax, 0x50
je 0x10020e61
cmp eax, 0x70
jmp 0x10020f38
cmp cl, 0xfc
jne 0x10020f3e
cmp dword [ebx], 0xffffffff
je 0x10020e61
mov al, cl
add al, 0x80
cmp al, 0x6f
ja 0x10020f72
cmp byte [esi + 0x24], 0
jne 0x10020f72
mov eax, dword [ebx]
cmp eax, 0xffffffff
je 0x10020f72
push eax
movzx eax, cl
lea ecx, [esi - 0x4928]
imul eax, eax, 0x98
add ecx, eax
call fcn.1002ec20
test al, al
jne 0x10020e61
add edi, 8
jmp 0x10020e34
mov eax, dword [esi + 0x134]
movzx edi, word [esi + eax*2 + 0x6c]
add eax, 0xffffffff
mov dword [esi + 0x134], eax
jns 0x10020fd8
mov eax, dword [esi + 4]
mov eax, dword [eax + 8]
cmp dword [eax], 0
jg 0x10020fd2
mov dword [eax], 0x10200
mov eax, dword [esi + 4]
mov ecx, dword [eax + 0xc]
test ecx, ecx
je 0x10020fd2
mov eax, dword [esi + 0x14]
mov dword [ecx], eax
mov eax, dword [esi + 4]
mov ecx, dword [eax + 0xc]
mov eax, dword [esi + 0x18]
mov dword [ecx + 4], eax
xor ecx, ecx
mov eax, dword [esi + 4]
mov eax, dword [eax + 0xc]
mov word [eax + 8], cx
mov eax, dword [esi + 4]
mov eax, dword [eax + 0xc]
mov word [eax + 0x28], cx
inc dword [esi + 0x134]
mov eax, dword [esi + 4]
mov eax, dword [eax + 8]
cmp dword [eax], 0
jle 0x10020e21
mov eax, dword [esi + 4]
pop edi
pop ebx
mov ecx, dword [eax + 8]
cmp dword [ecx], 0
jg 0x10021031
cmp dword [eax + 0x58], 0
jne 0x10021031
mov dword [ecx], 0x10203
mov eax, dword [esi + 4]
mov ecx, dword [eax + 0xc]
test ecx, ecx
je 0x10021031
mov eax, dword [esi + 0x14]
mov dword [ecx], eax
mov eax, dword [esi + 4]
mov ecx, dword [eax + 0xc]
mov eax, dword [esi + 0x18]
mov dword [ecx + 4], eax
xor ecx, ecx
mov eax, dword [esi + 4]
mov eax, dword [eax + 0xc]
mov word [eax + 8], cx
mov eax, dword [esi + 4]
mov eax, dword [eax + 0xc]
mov word [eax + 0x28], cx
pop esi
ret