Function at 0x7b8940
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x6c
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x60], ecx
mov dword [esp + 0x64], ecx
add ecx, 0xfffffffc
add ecx, dword [esp + 0x74]
cmp dword [esp + 0x74], 4
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x68], ecx
ja 0x7b897a
mov eax, 0xffffffba
add esp, 0x6c
ret
mov eax, dword [esp + 0x7c]
push ebx
push ebp
mov ebp, dword [esp + 0x9c]
push esi
push edi
movzx eax, byte [eax + ebp - 1]
push eax
push dword [esp + 0x8c]
lea eax, [esp + 0x60]
push eax
call fcn.007b5e10
mov eax, dword [esp + 0xa0]
movzx eax, byte [eax + ebp - 1]
push eax
push dword [esp + 0xa0]
lea eax, [esp + 0x4c]
push eax
call fcn.007b5e10
mov esi, dword [esp + 0xb4]
movzx eax, byte [esi + ebp - 1]
push eax
push dword [esp + 0xb4]
lea eax, [esp + 0x68]
push eax
call fcn.007b5e10
movzx eax, byte [esi + ebp - 1]
add esp, 0x24
mov edx, dword [esp + 0x8c]
movzx ebx, byte [eax + 0x942f00]
mov eax, dword [esp + 0xa0]
mov esi, ebx
movzx edi, word [eax + ebp*8 - 4]
lea ecx, [eax + ebp*8]
mov eax, dword [esp + 0x80]
and edi, dword [ebx*4 + 0x942e50]
shr esi, 3
mov dword [esp + 0x84], ecx
mov dword [eax], edi
lea ebp, [esi + eax]
mov eax, dword [esp + 0xa4]
cmp ebp, dword [esp + 0x78]
cmova ebp, dword [esp + 0x78]
and ebx, 7
movzx eax, byte [edx + eax - 1]
movzx edx, byte [eax + 0x942f70]
movzx eax, word [ecx - 2]
mov ecx, dword [edx*4 + 0x942e50]
and ecx, eax
mov dword [esp + 0x80], ecx
mov ecx, ebx
mov eax, dword [esp + 0x80]
shl eax, cl
lea ecx, [esi*8]
shr edi, cl
lea esi, [edx + ebx]
mov ebx, dword [esp + 0x78]
or eax, edi
mov edx, dword [esp + 0x94]
mov ecx, esi
shr ecx, 3
mov dword [ebp], eax
add ebp, ecx
cmp ebp, ebx
cmova ebp, ebx
shl ecx, 3
shr eax, cl
and esi, 7
cmp dword [esp + 0xa8], 0
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x80], eax
movzx edi, byte [edx + ecx - 1]
je 0x7b8b06
mov edx, dword [esp + 0x84]
mov ecx, 0x18
cmp edi, ecx
cmovb ecx, edi
mov dword [esp + 0x2c], ecx
sub edi, ecx
je 0x7b8af2
mov eax, dword [edi*4 + 0x942e50]
mov ecx, esi
and eax, dword [edx - 8]
add esi, edi
shl eax, cl
mov ecx, esi
or eax, dword [esp + 0x80]
shr ecx, 3
mov dword [ebp], eax
add ebp, ecx
cmp ebp, ebx
cmova ebp, ebx
shl ecx, 3
shr eax, cl
and esi, 7
mov edx, dword [edx - 8]
mov ecx, edi
mov edi, dword [esp + 0x2c]
shr edx, cl
and edx, dword [edi*4 + 0x942e50]
jmp 0x7b8b17
mov ecx, dword [esp + 0x84]
mov edx, dword [edi*4 + 0x942e50]
and edx, dword [ecx - 8]
mov ecx, esi
add esi, edi
shl edx, cl
mov ecx, esi
or edx, eax
shr ecx, 3
mov dword [ebp], edx
add ebp, ecx
cmp ebp, ebx
cmova ebp, ebx
shl ecx, 3
shr edx, cl
and esi, 7
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x80], ebp
mov dword [esp + 0x1c], esi
mov dword [esp + 0x28], edx
lea eax, [ecx - 2]
mov dword [esp + 0x84], eax
cmp eax, ecx
jae 0x7b8e8a
mov edx, dword [esp + 0x94]
mov ebx, dword [esp + 0x9c]
mov edi, dword [esp + 0x38]
sub ebx, edx
sub dword [esp + 0x8c], edx
lea ecx, [eax + edx]
mov dword [esp + 0x9c], ebx
mov eax, dword [esp + 0x58]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], eax
nop dword [eax + eax]
movzx ebx, byte [ecx + ebx]
movzx ebp, byte [ecx]
mov dword [esp + 0x24], ebp
movzx eax, byte [ebx + 0x942f00]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x8c]
movzx eax, byte [eax + ecx]
movzx ecx, byte [eax + 0x942f70]
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x40]
mov ecx, dword [ecx + ebp*8 + 4]
add ecx, edi
shr ecx, 0x10
mov edx, dword [ecx*4 + 0x942e50]
and edx, edi
lea edi, [ecx + esi]
mov esi, dword [esp + 0x14]
sar esi, cl
mov ecx, dword [esp + 0x40]
add esi, dword [ecx + ebp*8]
mov ecx, dword [esp + 0x3c]
movzx esi, word [ecx + esi*2]
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x14], esi
mov esi, dword [ecx + eax*8]
mov eax, dword [ecx + eax*8 + 4]
mov ecx, edi
add eax, dword [esp + 0x10]
shr eax, 0x10
add edi, eax
mov ebp, dword [eax*4 + 0x942e50]
and ebp, dword [esp + 0x10]
shl ebp, cl
mov ecx, dword [esp + 0x1c]
shl edx, cl
mov ecx, eax
mov eax, dword [esp + 0x10]
or ebp, edx
mov edx, dword [esp + 0x80]
or ebp, dword [esp + 0x28]
sar eax, cl
mov ecx, dword [esp + 0x5c]
add eax, esi
movzx eax, word [ecx + eax*2]
mov ecx, edi
mov dword [edx], ebp
shr ecx, 3
add edx, ecx
mov dword [esp + 0x10], eax
cmp edx, dword [esp + 0x78]
mov eax, dword [esp + 0x50]
cmova edx, dword [esp + 0x78]
and edi, 7
mov dword [esp + 0x80], edx
shl ecx, 3
mov edx, dword [eax + ebx*8 + 4]
add edx, dword [esp + 0x18]
shr edx, 0x10
shr ebp, cl
mov ecx, edi
mov eax, dword [edx*4 + 0x942e50]
lea esi, [edi + edx]
and eax, dword [esp + 0x18]
shl eax, cl
mov ecx, edx
or ebp, eax
mov edi, dword [esp + 0x78]
mov eax, dword [esp + 0x18]
mov edx, esi
sar eax, cl
mov ecx, dword [esp + 0x50]
shr edx, 3
add eax, dword [ecx + ebx*8]
mov ecx, dword [esp + 0x4c]
movzx eax, word [ecx + eax*2]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x80]
mov dword [eax], ebp
add eax, edx
cmp eax, edi
cmova eax, edi
mov ebx, dword [esp + 0x30]
and esi, 7
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x84]
lea ecx, [eax*8]
mov eax, dword [esp + 0xa0]
add eax, ecx
mov dword [esp + 0x34], ecx
mov ecx, dword [ebx*4 + 0x942e50]
mov dword [esp + 0x28], eax
movzx eax, word [eax + 4]
and ecx, eax
mov dword [esp + 0x1c], ecx
mov ecx, esi
mov eax, dword [esp + 0x1c]
shl eax, cl
lea ecx, [edx*8]
shr ebp, cl
lea edx, [esi + ebx]
mov esi, dword [esp + 0x20]
or eax, ebp
mov ebp, dword [esp + 0x80]
mov dword [esp + 0x1c], eax
lea eax, [esi + ebx]
mov ebx, dword [esp + 0x1c]
cmp eax, 0x18
jbe 0x7b8d48
mov ecx, edx
mov dword [ebp], ebx
shr ecx, 3
add ebp, ecx
cmp ebp, edi
cmova ebp, edi
shl ecx, 3
and edx, 7
shr ebx, cl
mov eax, dword [esp + 0x28]
mov ecx, edx
mov esi, dword [esi*4 + 0x942e50]
movzx eax, word [eax + 6]
and esi, eax
mov eax, dword [esp + 0x20]
shl esi, cl
add eax, edx
or esi, ebx
mov ecx, eax
mov ebx, dword [esp + 0x24]
shr ecx, 3
mov dword [ebp], esi
add ebp, ecx
cmp ebp, edi
cmova ebp, edi
shl ecx, 3
and eax, 7
shr esi, cl
cmp dword [esp + 0xa8], 0
je 0x7b8e0c
mov ecx, 0x18
cmp ebx, ecx
cmovb ecx, ebx
mov dword [esp + 0x80], ecx
sub ebx, ecx
je 0x7b8dde
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x84]
mov edx, dword [ecx + edx*8]
mov ecx, eax
and edx, dword [ebx*4 + 0x942e50]
add eax, ebx
shl edx, cl
or esi, edx
mov edx, eax
shr edx, 3
mov dword [ebp], esi
add ebp, edx
cmp ebp, edi
cmova ebp, edi
lea ecx, [edx*8]
shr esi, cl
and eax, 7
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0xa0]
mov edx, dword [edx + ecx*8]
mov ecx, ebx
mov ebx, dword [esp + 0x80]
shr edx, cl
mov ecx, eax
and edx, dword [ebx*4 + 0x942e50]
shl edx, cl
or edx, esi
lea esi, [ebx + eax]
jmp 0x7b8e2e
mov ecx, dword [esp + 0xa0]
mov edi, dword [esp + 0x34]
mov edx, dword [ebx*4 + 0x942e50]
and edx, dword [ecx + edi]
mov ecx, eax
mov edi, dword [esp + 0x78]
shl edx, cl
or edx, esi
lea esi, [eax + ebx]
mov eax, dword [esp + 0x84]
mov ecx, esi
mov ebx, dword [esp + 0x9c]
shr ecx, 3
mov dword [ebp], edx
add ebp, ecx
cmp ebp, edi
cmova ebp, edi
mov edi, dword [esp + 0x14]
shl ecx, 3
dec eax
shr edx, cl
and esi, 7
mov ecx, dword [esp + 0x2c]
dec ecx
mov dword [esp + 0x80], ebp
mov dword [esp + 0x1c], esi
mov dword [esp + 0x28], edx
mov dword [esp + 0x84], eax
mov dword [esp + 0x2c], ecx
cmp eax, dword [esp + 0xa4]
jb 0x7b8ba0
mov ebx, dword [esp + 0x78]
jmp 0x7b8ea2
mov eax, dword [esp + 0x58]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x64]
mov ecx, esi
add esi, eax
mov edi, dword [eax*4 + 0x942e50]
and edi, dword [esp + 0x10]
shl edi, cl
mov ecx, esi
shr ecx, 3
or edi, edx
mov edx, dword [esp + 0x44]
mov dword [ebp], edi
add ebp, ecx
cmp ebp, ebx
mov eax, dword [edx*4 + 0x942e50]
cmova ebp, ebx
and eax, dword [esp + 0x14]
and esi, 7
shl ecx, 3
shr edi, cl
mov ecx, esi
shl eax, cl
add esi, edx
mov edx, dword [esp + 0x54]
or edi, eax
mov dword [ebp], edi
mov ecx, esi
shr ecx, 3
add ebp, ecx
mov eax, dword [edx*4 + 0x942e50]
cmp ebp, ebx
cmova ebp, ebx
and eax, dword [esp + 0x18]
shl ecx, 3
and esi, 7
shr edi, cl
mov ecx, esi
shl eax, cl
or edi, eax
lea eax, [esi + edx]
mov dword [ebp], edi
mov ecx, eax
shr ecx, 3
add ebp, ecx
cmp ebp, ebx
cmova ebp, ebx
and eax, 7
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x68]
shl ecx, 3
shr edi, cl
push eax
mov dword [esp + 0x78], ebp
mov dword [esp + 0x6c], edi
call fcn.007b86f0
add esp, 4
mov ecx, 0xffffffba
test eax, eax
cmove eax, ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x6c
ret