Function at 0xa2ced6
Capabilities:
Enumerate pe sections

Disassembly:
cmp eax, 0x66
je 0xa3c0c7
cmp eax, 0x76
je 0xa3c126
cmp eax, 0x74
je 0xa3c18d
cmp eax, 0x73
jne 0xa2d12d
mov byte [esp + 0xe], 1
jmp 0xa2d12d
mov byte [0xa45044], 1
jmp 0xa2d12d
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x64
push ebx
push esi
push edi
mov edi, ecx
xor ebx, ebx
mov ecx, 0x4006
mov dword [esp + 0x10], edi
mov esi, 0xa54840
mov dword [esp + 0x24], ebx
mov byte [esp + 0xe], bl
call fcn.00a213cb
mov dword [esp + 0x1c], eax
test eax, eax
je 0xa3bfcd
mov al, byte [0xa45044]
mov byte [esp + 0xf], al
push 0x2f
pop edx
mov ecx, esi
call fcn.00a22200
mov esi, eax
test esi, esi
je 0xa2d102
lea ebx, [esi + 2]
movzx eax, word [ebx]
push eax
call dword [sym.imp.msvcrt.dll_towlower]
movzx eax, ax
pop ecx
test ax, ax
je 0xa2d102
cmp eax, 0x3f
je 0xa3c25c
cmp eax, 0x71
je 0xa3c03a
push 0x6b
pop ecx
cmp eax, 0x63
je 0xa2cfc9
cmp ax, cx
je 0xa304f2
cmp eax, 0x72
je 0xa2cfc9
cmp eax, 0x75
je 0xa3c049
cmp eax, 0x61
je 0xa3c055
cmp eax, 0x78
je 0xa2bd2e
cmp eax, 0x79
je 0xa3c061
cmp eax, 0x65
je 0xa3c06d
cmp eax, 0x64
jne 0xa2b8f0
mov edx, dword [ebp + 0xc]
lea eax, [esi + 4]
push eax
mov eax, esi
mov ecx, esi
sub eax, 0xa54840
sar eax, 1
sub edx, eax
call fcn.00a21417
xor eax, eax
mov dword [edi], eax
mov dword [edi + 4], eax
jmp 0xa2cf18
cmp ax, cx
je 0xa304f2
mov dword [0xa450ac], 1
lea ebx, [esi + 4]
xor edi, edi
mov edx, ebx
lea ecx, [edx + 2]
mov ax, word [edx]
add edx, 2
cmp ax, di
jne 0xa2cfe6
sub edx, ecx
sar edx, 1
lea eax, [edx + 2]
lea ecx, [eax + eax]
mov dword [esp + 0x18], eax
call fcn.00a213cb
mov edi, eax
test edi, edi
je 0xa3bfcd
mov edx, dword [esp + 0x18]
mov ecx, edi
push ebx
call fcn.00a21417
xor eax, eax
mov ecx, edi
mov word [esi], ax
call fcn.00a247e5
cmp byte [esp + 0xe], 0
mov esi, eax
push 0x22
pop ebx
jne 0xa2d51e
cmp word [esi], bx
jne 0xa2d0de
mov edi, 0x4000
mov ecx, edi
call fcn.00a213cb
mov ebx, eax
mov ecx, edi
mov dword [esp + 0x14], ebx
call fcn.00a213cb
mov dword [esp + 0x20], eax
test ebx, ebx
je 0xa3bfe2
test eax, eax
je 0xa3bfe2
push 0x48
xor ebx, ebx
lea eax, [esp + 0x2c]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea ecx, [esi + 2]
push 0x22
pop edx
call fcn.00a22200
test eax, eax
je 0xa2d0a2
lea edi, [eax + 2]
push 0x22
pop edx
mov ecx, edi
call fcn.00a22200
test eax, eax
je 0xa2d525
push 0x22
pop edx
cmp word [esi], dx
jne 0xa2d0de
add esi, 2
mov edi, esi
lea ecx, [edi + 2]
mov ax, word [edi]
add edi, 2
cmp ax, bx
jne 0xa2d0b2
sub edi, ecx
mov ecx, esi
sar edi, 1
call fcn.00a22aea
test eax, eax
je 0xa2d0de
xor ecx, ecx
mov edx, edi
mov word [eax], cx
add eax, 2
push eax
mov ecx, esi
call fcn.00a22c30
mov ecx, esi
xor ebx, ebx
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0xa2d0e5
sub ecx, edx
sar ecx, 1
push 0xa
pop eax
mov word [esi + ecx*2], ax
mov eax, dword [esp + 0x10]
mov dword [eax + 8], esi
mov ecx, dword [esp + 0x1c]
call fcn.00a2107b
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov edx, dword [ebp + 0xc]
lea eax, [esi + 4]
push eax
mov eax, esi
mov ecx, esi
sub eax, 0xa54840
sar eax, 1
sub edx, eax
call fcn.00a21417
jmp 0xa2cf18
mov ax, word [ecx]
add ecx, 2
cmp ax, word [esp + 0x24]
jne 0xa2d4b0
sub ecx, edx
mov eax, 0x2000
sar ecx, 1
cmp ecx, eax
jae 0xa3c23a
mov ecx, dword [esp + 0x14]
mov edx, eax
push esi
call fcn.00a21417
push 0xa22060
mov edx, 0x2000
mov ecx, ebx
call fcn.00a21417
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x28]
mov edx, dword [esp + 0x1c]
push 0x2003
mov word [edi], ax
call fcn.00a22fdc
mov ecx, dword [esp + 0x14]
mov edi, eax
call fcn.00a2107b
mov ecx, ebx
call fcn.00a2107b
test edi, edi
jne 0xa3c24e
xor ebx, ebx
jmp 0xa2d0a2
movzx ebx, word [edi]
xor eax, eax
push 0x26
pop edx
mov ecx, esi
mov dword [esp + 0x18], ebx
mov word [edi], ax
call fcn.00a22200
test eax, eax
jne 0xa34cb5
push 0x3c
pop edx
mov ecx, esi
call fcn.00a22200
test eax, eax
jne 0xa34cb5
push 0x3e
pop edx
mov ecx, esi
call fcn.00a22200
test eax, eax
jne 0xa34cb5
push 0x40
pop edx
mov ecx, esi
call fcn.00a22200
test eax, eax
jne 0xa34cb5
push 0x5e
pop edx
mov ecx, esi
call fcn.00a22200
test eax, eax
jne 0xa34cb5
push 0x7c
pop edx
mov ecx, esi
call fcn.00a22200
test eax, eax
jne 0xa34cb5
mov ebx, esi
cmp word [esi], ax
je 0xa2d5bb
movzx eax, word [ebx]
push eax
call dword [sym.imp.msvcrt.dll_iswspace]
pop ecx
test eax, eax
jne 0xa2d5c7
add ebx, 2
cmp word [ebx], ax
jne 0xa2d5a4
mov eax, dword [esp + 0x18]
mov word [edi], ax
jmp 0xa2d51e
mov eax, dword [esp + 0x14]
xor ecx, ecx
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x5c], ecx
mov ecx, esi
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], ebx
lea edx, [ecx + 2]
jmp 0xa2d4b0
mov dword [0xa450b0], 1
jmp 0xa2cfdc
mov word [edi], bx
jmp 0xa2d51e
push ebx
push 0x4000239e
call fcn.00a2e4e8
pop ecx
pop ecx
mov byte [0xa60858], bl
mov dword [0xa60b68], ebx
xor ecx, ecx
inc ecx
jmp 0xa3bfe8
xor eax, eax
push eax
push dword [0xa450e4]
call fcn.00a2e452
pop ecx
pop ecx
mov ecx, dword [0xa450e4]
call fcn.00a2bc91
int3
push eax
call dword [sym.imp.msvcrt.dll_towlower]
pop ecx
movzx eax, ax
push 0x57
mov edx, dword [ebp + 0xc]
pop ecx
sub eax, ecx
mov ecx, edi
or word [0xa45054], ax
mov eax, esi
sub eax, 0xa54840
sar eax, 1
push ebx
sub edx, eax
call fcn.00a21417
mov edx, dword [ebp + 0xc]
mov eax, esi
sub eax, 0xa54840
sar eax, 1
push edi
sub edx, eax
mov ecx, esi
call fcn.00a21417
mov edi, dword [esp + 0x10]
jmp 0xa2cf18
mov dword [0xa60a9c], 1
jmp 0xa2d12d
mov byte [0xa60852], 1
jmp 0xa2d12d
xor eax, eax
mov byte [0xa60852], al
jmp 0xa2d12d
xor eax, eax
mov byte [0xa45044], al
jmp 0xa2d12d
mov edi, dword [ebp + 0xc]
mov eax, esi
sub eax, 0xa54840
mov ecx, esi
sar eax, 1
sub edi, eax
lea eax, [esi + 4]
push eax
mov edx, edi
call fcn.00a21417
push 0x3a
pop eax
cmp word [esi], ax
jne 0xa3c0bb
push 3
push 0xa38704
push ebx
call dword [sym.imp.msvcrt.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0xa3c0bb
mov byte [0xa45044], al
jmp 0xa3c0b3
xor eax, eax
mov byte [0xa45043], al
lea eax, [esi + 8]
jmp 0xa3c185
mov byte [0xa45044], 1
jmp 0xa3c169
mov edi, dword [ebp + 0xc]
mov eax, esi
sub eax, 0xa54840
mov ecx, esi
sar eax, 1
sub edi, eax
lea eax, [esi + 4]
push eax
mov edx, edi
call fcn.00a21417
push 0x3a
pop eax
cmp word [esi], ax
jne 0xa3c112
push 3
push 0xa38704
push ebx
call dword [sym.imp.msvcrt.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0xa3c112
push 0x20
pop ebx
mov word [0xa45050], bx
mov word [0xa4504c], bx
jmp 0xa3c0b3
push 6
pop eax
push 4
mov word [0xa45050], ax
pop eax
mov word [0xa4504c], ax
jmp 0xa3c169
mov edi, dword [ebp + 0xc]
mov eax, esi
sub eax, 0xa54840
mov ecx, esi
sar eax, 1
sub edi, eax
lea eax, [esi + 4]
push eax
mov edx, edi
call fcn.00a21417
push 0x3a
pop eax
cmp word [esi], ax
jne 0xa3c162
push 3
push 0xa38704
push ebx
call dword [sym.imp.msvcrt.dll__wcsnicmp]
add esp, 0xc
test eax, eax
je 0xa3c0ac
mov byte [0xa45043], 1
push 3
push 0xa3c304
push esi
call dword [sym.imp.msvcrt.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0xa3c031
lea eax, [esi + 6]
push eax
mov edx, edi
jmp 0xa3c02a
cmp byte [0xa45044], 0
je 0xa2b90b
push 0x3a
lea edi, [esi + 4]
pop eax
cmp word [edi], ax
jne 0xa3c01b
movzx eax, word [esi + 6]
push eax
call dword [sym.imp.msvcrt.dll_iswxdigit]
pop ecx
test eax, eax
je 0xa3c01b
movzx eax, word [esi + 8]
push eax
call dword [sym.imp.msvcrt.dll_iswxdigit]
pop ecx
test eax, eax
je 0xa3c01b
lea ebx, [esi + 0xa]
movzx eax, word [ebx]
push eax
call dword [sym.imp.msvcrt.dll_iswxdigit]
pop ecx
test eax, eax
jne 0xa3c01b
movzx eax, word [esi + 6]
push eax
call dword [sym.imp.msvcrt.dll_iswdigit]
pop ecx
test eax, eax
je 0xa3c1ff
mov ax, word [esi + 6]
push 0x30
jmp 0xa3c20d
movzx eax, word [esi + 6]
push eax
call dword [sym.imp.msvcrt.dll_towlower]
pop ecx
push 0x57
pop ecx
sub ax, cx
shl ax, 4
mov word [0xa45054], ax
movzx eax, word [esi + 8]
push eax
call dword [sym.imp.msvcrt.dll_iswdigit]
test eax, eax
movzx eax, word [esi + 8]
pop ecx
je 0xa3bfee
push 0x30
jmp 0xa3bffb
xor eax, eax
push eax
push 0x400023df
call fcn.00a2e452
pop ecx
pop ecx
jmp 0xa3bfcd
cmp edi, 3
je 0xa3bfd2
jmp 0xa2d0de
call 0xa43155
xor ebx, ebx
cmp dword [0xa45164], ebx
jne 0xa3bfc1
push ebx
push 0x40002399
call fcn.00a2e4e8
pop ecx
pop ecx
cmp dword [0xa45164], ebx
jne 0xa3bfc1
push ebx
push 0x4000239a
call fcn.00a2e4e8
pop ecx
pop ecx
cmp byte [esp + 0xf], bl
jne 0xa3c2a7
cmp byte [0xa45044], bl
je 0xa3bfc1
cmp dword [0xa45164], ebx
jne 0xa3bfc1
push ebx
push 0x4000239b
call fcn.00a2e4e8
pop ecx
pop ecx
cmp dword [0xa45164], ebx
jne 0xa3bfc1
push ebx
push 0x4000239c
call fcn.00a2e4e8
pop ecx
pop ecx
cmp dword [0xa45164], ebx
jne 0xa3bfc1
push ebx
push 0x4000239d
call fcn.00a2e4e8
pop ecx
pop ecx
cmp dword [0xa45164], ebx
jne 0xa3bfc1
jmp 0xa3bfb4