Function at 0x1002bc10
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x2bc
mov eax, dword [0x1013567c]
xor eax, esp
mov dword [esp + 0x2b8], eax
mov eax, dword [esp + 0x2cc]
mov ecx, dword [esp + 0x2c4]
mov edx, dword [esp + 0x2d4]
push ebx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x2d4]
push ebp
push esi
mov dword [esp + 0x30], edx
xor ebp, ebp
mov ebx, dword [eax + 0x60]
xor esi, esi
mov edx, dword [ecx]
lea eax, [ecx + 0xc]
push edi
mov edi, eax
mov dword [esp + 0x20], ecx
add edx, ecx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x28], eax
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], edx
cmp edi, edx
jae 0x1002bd9f
mov eax, dword [esp + 0x34]
test byte [eax + 0x88], 8
je 0x1002bcd5
cmp word [esp + 0x2d8], 1
jne 0x1002bcd5
cmp dword [ebx + 0x30], esi
je 0x1002bcd5
cmp word [edi + 0xa], 0xa
jne 0x1002bcbb
push 5
lea eax, [edi + 0xc]
push eax
push 0x1000300c
call fcn.101155f0
add esp, 0xc
test eax, eax
je 0x1002bdbc
mov edx, dword [esp + 0x14]
add edi, dword [edi]
cmp edi, edx
jb 0x1002bc95
mov eax, dword [esp + 0x20]
mov edi, dword [esp + 0x28]
mov dword [esp + 0x10], edi
mov ecx, dword [eax]
add ecx, eax
mov dword [esp + 0x14], ecx
mov dx, word [esp + 0x2d8]
lea ecx, [ecx]
cmp word [edi + 4], dx
jne 0x1002bd8b
mov eax, dword [edi]
lea ebx, [edi + 6]
movzx ecx, word [ebx + 4]
add eax, edi
mov dword [esp + 0x1c], eax
lea eax, [ecx + 2]
cmp eax, 0x200
ja 0x1002c0ef
push ecx
lea eax, [ebx + 6]
push eax
lea eax, [esp + 0xd0]
push eax
call fcn.10117410
movzx eax, word [ebx + 4]
add esp, 0xc
and eax, 0xfffffffe
cmp eax, 0x200
jae 0x1002c0f9
xor ecx, ecx
mov word [esp + eax + 0xc8], cx
movzx eax, word [ebx]
add ebx, eax
cmp word [edi + 4], cx
je 0x1002bf8a
mov eax, dword [esp + 0x34]
imul edi, dword [eax + 8], 0x34
mov esi, dword [eax + 4]
add edi, esi
cmp esi, edi
jae 0x1002bd7f
mov eax, dword [esi + 0x18]
test eax, eax
je 0x1002bd78
lea ecx, [esp + 0xc8]
push ecx
push eax
call fcn.10115590
add esp, 8
test eax, eax
je 0x1002bf82
add esi, 0x34
cmp esi, edi
jb 0x1002bd58
mov dx, word [esp + 0x2d8]
mov edi, dword [esp + 0x10]
test ebp, ebp
js 0x1002bd9f
add edi, dword [edi]
mov dword [esp + 0x10], edi
cmp edi, dword [esp + 0x14]
jb 0x1002bce0
mov eax, ebp
mov ecx, dword [esp + 0x2c8]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.1011705d
add esp, 0x2bc
ret 0x18
cmp edi, dword [esp + 0x14]
jae 0x1002bcc1
mov eax, dword [edi]
lea ecx, [edi + 6]
add eax, edi
mov dword [esp + 0x30], eax
movzx eax, word [ecx]
add ecx, eax
mov dword [esp + 0x14], ecx
lea ebx, [ebx]
movsx eax, byte [ecx + 3]
mov ebx, dword [ebx + 0x28]
mov dword [esp + 0x40], eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x14]
mov dword [esp + 0x20], ebx
push eax
movzx eax, word [ecx + 4]
push eax
push dword [esp + 0x2c]
call fcn.1002c4d0
mov ebp, eax
test ebp, ebp
js 0x1002bd9f
mov edi, dword [esp + 0x2c]
lea eax, [esp + 0x44]
push edi
push dword [esp + 0x14]
push eax
call fcn.10117410
and edi, 0xfffffffe
add esp, 0xc
cmp edi, 0x82
jae 0x1002c0f9
xor eax, eax
mov word [esp + edi + 0x44], ax
mov eax, dword [esp + 0x14]
lea edx, [eax + 6]
movsx eax, byte [eax + 2]
or eax, 2
mov dword [esp + 0x10], edx
cmp dword [ebx + 0x4c], 0
mov dword [esp + 0x3c], eax
jne 0x1002beed
mov eax, dword [esp + 0x38]
mov ecx, dword [eax + 0x30]
mov eax, dword [eax + 0x34]
lea eax, [eax + eax*4]
lea ebx, [ecx + eax*4]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x18], ebx
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x2c]
mov eax, dword [eax + 0x4fc]
mov dword [esp + 0x1c], eax
lea eax, [eax + eax*4]
lea edi, [ecx + eax*4]
cmp edi, ebx
jae 0x1002bf62
mov ebx, dword [esp + 0x1c]
lea ecx, [edx + 2]
shl ebx, 2
lea esp, [esp]
push 0
push 1
push dword [esp + 0x44]
lea eax, [esp + 0x4c]
push eax
movzx eax, word [edx]
push 0
push eax
push ecx
lea eax, [esp + 0x60]
push eax
mov eax, dword [esp + 0x58]
mov eax, dword [eax + 0x40]
push dword [ebx + eax]
push 1
push dword [esp + 0x4c]
call fcn.1002b6d0
mov ebp, eax
test ebp, ebp
js 0x1002bd9f
mov edx, dword [esp + 0x10]
add edi, 0x14
add ebx, 4
lea ecx, [edx + 2]
cmp edi, dword [esp + 0x18]
jb 0x1002bea0
jmp 0x1002bf62
mov ecx, dword [esp + 0x34]
mov esi, dword [ecx + 4]
imul ecx, dword [ecx + 8], 0x34
add ecx, esi
mov dword [esp + 0x18], ecx
cmp esi, ecx
jae 0x1002bf62
cmp byte [esi + 0xd], 5
jne 0x1002bf5b
xor ebx, ebx
xor edi, edi
cmp bx, word [esi + 0x20]
jge 0x1002bf5b
lea ebx, [edx + 2]
push 0
push 1
push eax
lea eax, [esp + 0x4c]
push eax
movzx eax, word [edx]
push 0
push eax
push ebx
lea eax, [esp + 0x60]
push eax
mov eax, dword [esi + 0x1c]
push dword [eax + edi*4]
push 1
push dword [esp + 0x4c]
call fcn.1002b6d0
mov ebp, eax
test ebp, ebp
js 0x1002bd9f
movsx eax, word [esi + 0x20]
inc edi
mov edx, dword [esp + 0x10]
cmp edi, eax
mov eax, dword [esp + 0x3c]
jl 0x1002bf15
mov ecx, dword [esp + 0x18]
add esi, 0x34
cmp esi, ecx
jb 0x1002bf02
mov ecx, dword [esp + 0x14]
movzx eax, word [ecx]
add ecx, eax
mov dword [esp + 0x14], ecx
cmp ecx, dword [esp + 0x30]
jae 0x1002bcc1
mov ebx, dword [esp + 0x38]
jmp 0x1002bde0
cmp esi, edi
jae 0x1002bd7f
mov ebp, dword [esp + 0x28]
lea ecx, [ebp + 6]
mov dword [esp + 0x2c], ecx
jmp 0x1002bfa4
mov ebp, dword [esp + 0x28]
movsx eax, byte [ebx + 3]
movzx edx, word [ebx + 4]
mov dword [esp + 0x20], eax
mov eax, ecx
test dx, dx
je 0x1002bfdb
mov edi, dword [ebp]
add edi, ebp
lea esp, [esp]
movzx ecx, word [eax]
add edx, 0xffff
add eax, 2
add eax, ecx
cmp eax, edi
ja 0x1002c0e5
test dx, dx
jne 0x1002bfc0
mov ecx, dword [ebp]
add ecx, ebp
cmp eax, ecx
ja 0x1002c0e5
movzx edi, word [eax]
lea ecx, [eax + 2]
xor ebp, ebp
lea eax, [edi + 2]
cmp eax, 0x82
ja 0x1002c0ef
push edi
push ecx
lea eax, [esp + 0x4c]
push eax
call fcn.10117410
and edi, 0xfffffffe
add esp, 0xc
cmp edi, 0x82
jae 0x1002c0f9
mov dx, word [esp + 0x2d8]
xor eax, eax
mov word [esp + edi + 0x44], ax
movsx eax, byte [ebx + 2]
or eax, 2
mov dword [esp + 0x30], eax
test dx, dx
jne 0x1002c06a
push ebp
push 1
push eax
lea eax, [esp + 0x2c]
push eax
movzx eax, word [ebx + 6]
push ebp
push eax
lea eax, [ebx + 8]
push eax
lea eax, [esp + 0x60]
push eax
push ebp
push ebp
push dword [esp + 0x4c]
call fcn.1002b6d0
mov ebp, eax
test ebp, ebp
js 0x1002bd9f
jmp 0x1002c0c5
xor ecx, ecx
xor edi, edi
cmp cx, word [esi + 0x20]
jge 0x1002c0cd
movzx edx, dx
lea ecx, [ebx + 8]
mov dword [esp + 0x18], edx
mov edi, edi
push 0
push 1
push eax
lea eax, [esp + 0x2c]
push eax
movzx eax, word [ebx + 6]
push 0
push eax
push ecx
lea eax, [esp + 0x60]
push eax
mov eax, dword [esi + 0x1c]
push dword [eax + edi*4]
push edx
push dword [esp + 0x4c]
call fcn.1002b6d0
mov ebp, eax
test ebp, ebp
js 0x1002bd9f
movsx eax, word [esi + 0x20]
lea ecx, [ebx + 8]
mov edx, dword [esp + 0x18]
inc edi
cmp edi, eax
mov eax, dword [esp + 0x30]
jl 0x1002c080
mov dx, word [esp + 0x2d8]
movzx eax, word [ebx]
mov ecx, dword [esp + 0x2c]
add ebx, eax
cmp ebx, dword [esp + 0x1c]
jb 0x1002bfa0
jmp 0x1002bd87
mov ebp, 0xfffffb4a
jmp 0x1002bd9f
mov eax, 0xfffffbf2
jmp 0x1002bda1
call fcn.10116cf2
int3