Function at 0x1002b730
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x34
push ebx
mov ebx, edx
mov edx, dword [ecx]
mov ecx, dword [ecx + 0x10]
push ebp
push esi
mov eax, dword [edx + 0x200]
xor esi, esi
add eax, dword [edx + 0x1fc]
movzx ebp, byte [ecx + 7]
mov dword [esp + 0x20], eax
movzx eax, byte [ecx + 6]
shl eax, 8
or ebp, eax
mov dword [esp + 0x3c], ebx
and ebp, 0xfffffffe
mov dword [esp + 0x24], edx
mov eax, ebp
mov dword [esp + 0x28], ebp
shr eax, 1
push edi
mov edi, dword [ebx]
mov dword [esp + 0x18], eax
je 0x1002b958
mov bl, byte [esp + 0x48]
lea eax, [edi + 1]
test bl, bl
cmove eax, edi
cmp eax, 0xffff
ja 0x1002b958
lea edx, [ecx + 0x10]
mov dword [esp + 0x14], esi
add edx, ebp
cmp dword [esp + 0x18], esi
jbe 0x1002b942
lea edi, [edx - 2]
add ecx, 0xd
mov dword [esp + 0x1c], edi
lea edi, [ebp - 2]
add edi, edx
mov edx, 1
sub edx, ebp
mov dword [esp + 0x3c], edx
movzx ebp, byte [ecx + 1]
add ecx, 2
movzx edx, byte [edx + edi + 2]
add edi, 2
mov dword [esp + 0x38], ecx
shl ebp, 8
movzx ecx, byte [ecx]
or ebp, ecx
mov dword [esp + 0x10], edi
mov ecx, dword [esp + 0x1c]
add ecx, 2
mov dword [esp + 0x30], ebp
mov dword [esp + 0x1c], ecx
movzx ecx, byte [ecx]
shl ecx, 8
or edx, ecx
mov dword [esp + 0x20], edx
cmp eax, edx
jae 0x1002b808
test bl, bl
je 0x1002b94c
mov eax, edx
cmp eax, ebp
ja 0x1002b927
movzx ecx, byte [edi]
shl cx, 8
movsx ecx, cx
mov dword [esp + 0x34], ecx
nop
movzx ebx, byte [edi + 1]
add edi, dword [esp + 0x2c]
or ebx, ecx
mov ebp, dword [esp + 0x30]
movzx ecx, byte [edi]
movzx edx, byte [edi + 1]
shl ecx, 8
or edx, ecx
mov ecx, dword [esp + 0x18]
dec ecx
cmp dword [esp + 0x14], ecx
jb 0x1002b898
cmp dword [esp + 0x20], 0xffff
jne 0x1002b898
cmp ebp, 0xffff
jne 0x1002b898
test edx, edx
je 0x1002b86b
lea ecx, [edi + 2]
add ecx, edx
cmp ecx, dword [esp + 0x24]
jbe 0x1002b898
mov ebx, 1
cmp byte [esp + 0x48], 0
lea ecx, [ebx + eax]
movzx esi, cx
je 0x1002b94c
mov edx, dword [esp + 0x28]
cmp esi, dword [edx + 0x10]
jb 0x1002b8e0
xor esi, esi
lea edx, [ebx + ebp]
test ecx, ecx
jns 0x1002b8fe
test edx, edx
js 0x1002b906
mov eax, ebx
neg eax
jmp 0x1002b8e4
cmp edx, 0xffff
je 0x1002b91f
test edx, edx
je 0x1002b86b
mov ecx, eax
sub ecx, dword [esp + 0x20]
lea ecx, [edx + ecx*2]
mov dl, byte [esp + 0x48]
add edi, ecx
test dl, dl
je 0x1002b8bd
cmp edi, dword [esp + 0x24]
ja 0x1002b917
movzx esi, byte [edi]
movzx ecx, byte [edi + 1]
shl esi, 8
or esi, ecx
je 0x1002b8dc
lea ecx, [ebx + esi]
mov ebx, dword [esp + 0x28]
movzx ecx, cx
cmp ecx, dword [ebx + 0x10]
sbb esi, esi
and esi, ecx
test dl, dl
je 0x1002b94c
test esi, esi
jne 0x1002b946
cmp eax, 0xffff
jae 0x1002b946
mov edi, dword [esp + 0x10]
inc eax
mov ecx, dword [esp + 0x34]
cmp eax, ebp
jbe 0x1002b820
jmp 0x1002b923
cmp ecx, 0x10000
jge 0x1002b91f
cmp edx, 0x10000
jl 0x1002b91f
mov eax, 0x10000
sub eax, ebx
jmp 0x1002b8e4
mov edi, dword [esp + 0x10]
mov bl, dl
jmp 0x1002b927
mov edi, dword [esp + 0x10]
mov bl, byte [esp + 0x48]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x3c]
inc ecx
cmp ecx, dword [esp + 0x18]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x38]
jb 0x1002b7c0
test bl, bl
je 0x1002b94c
mov ecx, dword [esp + 0x40]
mov dword [ecx], eax
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x34
ret 4
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x34
ret 4