Function at 0x6a17c5a8
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x134
mov ecx, dword [esp + 0x150]
mov ebx, dword [esp + 0x14c]
lea esi, [esp + 0x34]
mov dword [esp + 0x10], 0
mov edi, ecx
nop
movzx eax, byte [edi]
movzx edx, byte [ebx]
sub eax, edx
movzx edx, byte [edi + 1]
movzx ecx, byte [ebx + 1]
mov ebp, edx
sub ebp, ecx
add ebp, eax
mov dword [esp], ebp
sub ecx, edx
add ecx, eax
mov dword [esp + 4], ecx
movzx eax, byte [edi + 2]
movzx edx, byte [ebx + 2]
sub eax, edx
movzx edx, byte [edi + 3]
movzx ecx, byte [ebx + 3]
mov ebp, edx
sub ebp, ecx
add ebp, eax
mov dword [esp + 0x14], ebp
sub ecx, edx
add ecx, eax
mov dword [esp + 0x18], ecx
movzx eax, byte [edi + 4]
movzx edx, byte [ebx + 4]
sub eax, edx
movzx edx, byte [edi + 5]
movzx ecx, byte [ebx + 5]
mov ebp, edx
sub ebp, ecx
add ebp, eax
mov dword [esp + 8], ebp
sub ecx, edx
add ecx, eax
mov dword [esp + 0xc], ecx
movzx edx, byte [edi + 6]
movzx eax, byte [ebx + 6]
sub edx, eax
movzx ecx, byte [edi + 7]
movzx ebp, byte [ebx + 7]
mov eax, ecx
sub eax, ebp
add eax, edx
mov dword [esp + 0x20], eax
sub ebp, ecx
add ebp, edx
mov dword [esp + 0x24], ebp
mov eax, dword [esp]
add eax, dword [esp + 0x14]
mov dword [esp + 0x1c], eax
mov edx, dword [esp]
sub edx, dword [esp + 0x14]
mov dword [esp], edx
mov edx, dword [esp + 4]
add edx, dword [esp + 0x18]
mov ecx, dword [esp + 4]
sub ecx, dword [esp + 0x18]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 8]
add ecx, dword [esp + 0x20]
mov ebp, dword [esp + 8]
sub ebp, dword [esp + 0x20]
mov dword [esp + 8], ebp
mov eax, dword [esp + 0xc]
add eax, dword [esp + 0x24]
mov ebp, dword [esp + 0xc]
sub ebp, dword [esp + 0x24]
mov dword [esp + 0xc], ebp
mov ebp, dword [esp + 0x1c]
add ebp, ecx
mov dword [esi], ebp
mov ebp, dword [esp + 0x1c]
sub ebp, ecx
mov dword [esi + 0x10], ebp
lea ecx, [edx + eax]
mov dword [esi + 4], ecx
sub edx, eax
mov dword [esi + 0x14], edx
mov eax, dword [esp]
add eax, dword [esp + 8]
mov dword [esi + 8], eax
mov eax, dword [esp]
sub eax, dword [esp + 8]
mov dword [esi + 0x18], eax
mov eax, dword [esp + 4]
add eax, dword [esp + 0xc]
mov dword [esi + 0xc], eax
mov eax, dword [esp + 4]
sub eax, dword [esp + 0xc]
mov dword [esi + 0x1c], eax
inc dword [esp + 0x10]
add edi, dword [esp + 0x154]
add ebx, dword [esp + 0x154]
add esi, 0x20
cmp dword [esp + 0x10], 8
jne 0x6a17c5d0
mov ebx, dword [esp + 0x34]
mov eax, dword [esp + 0x54]
lea edi, [ebx + eax]
sub ebx, eax
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x94]
lea esi, [ecx + eax]
sub ecx, eax
mov ebp, dword [esp + 0xb4]
mov eax, dword [esp + 0xd4]
lea edx, [ebp + eax]
sub ebp, eax
mov dword [esp], ebp
mov ebp, dword [esp + 0xf4]
mov eax, dword [esp + 0x114]
add eax, ebp
sub ebp, dword [esp + 0x114]
mov dword [esp + 4], ebp
lea ebp, [edi + esi]
mov dword [esp + 8], ebp
sub edi, esi
mov dword [esp + 0xc], edi
lea esi, [ebx + ecx]
mov dword [esp + 0x10], esi
sub ebx, ecx
mov dword [esp + 0x14], ebx
lea ebp, [edx + eax]
mov dword [esp + 0x18], ebp
sub edx, eax
mov dword [esp + 0x1c], edx
mov eax, dword [esp]
add eax, dword [esp + 4]
mov dword [esp + 0x20], eax
mov edx, dword [esp]
sub edx, dword [esp + 4]
mov dword [esp], edx
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x58]
lea edi, [edx + eax]
sub edx, eax
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x78]
mov eax, dword [esp + 0x98]
lea esi, [ebx + eax]
sub ebx, eax
mov eax, dword [esp + 0xb8]
mov edx, dword [esp + 0xd8]
lea ecx, [eax + edx]
sub eax, edx
mov edx, dword [esp + 0xf8]
add edx, dword [esp + 0x118]
mov ebp, dword [esp + 0xf8]
sub ebp, dword [esp + 0x118]
mov dword [esp + 0x30], ebp
lea ebp, [edi + esi]
mov dword [esp + 0x24], ebp
sub edi, esi
mov dword [esp + 0x28], edi
mov edi, dword [esp + 4]
add edi, ebx
mov esi, dword [esp + 4]
sub esi, ebx
mov dword [esp + 4], esi
lea esi, [ecx + edx]
sub ecx, edx
mov dword [esp + 0x2c], ecx
mov edx, dword [esp + 0x30]
add edx, eax
sub eax, dword [esp + 0x30]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 8]
add eax, dword [esp + 0x18]
js 0x6a17ced8
mov ecx, dword [esp + 8]
sub ecx, dword [esp + 0x18]
js 0x6a17cee8
add eax, ecx
mov ecx, dword [esp + 0x10]
add ecx, dword [esp + 0x20]
js 0x6a17cefa
mov ebx, dword [esp + 0x10]
sub ebx, dword [esp + 0x20]
js 0x6a17cf0a
add ecx, ebx
add eax, ecx
mov ebp, dword [esp + 0xc]
add ebp, dword [esp + 0x1c]
js 0x6a17cf1e
mov ecx, dword [esp + 0xc]
sub ecx, dword [esp + 0x1c]
js 0x6a17cf2e
add ebp, ecx
add eax, ebp
mov ebp, dword [esp + 0x14]
add ebp, dword [esp]
js 0x6a17cf41
mov ebx, dword [esp + 0x14]
sub ebx, dword [esp]
js 0x6a17cf50
add ebx, ebp
add eax, ebx
mov ecx, dword [esp + 0x24]
add ecx, esi
js 0x6a17cf62
mov ebx, dword [esp + 0x24]
sub ebx, esi
js 0x6a17cf70
add ecx, ebx
mov ebx, edi
add ebx, edx
js 0x6a17cf7e
sub edi, edx
js 0x6a17cf88
add edi, ebx
add ecx, edi
mov edx, dword [esp + 0x28]
add edx, dword [esp + 0x2c]
js 0x6a17cf9c
mov edi, dword [esp + 0x28]
sub edi, dword [esp + 0x2c]
js 0x6a17cfac
add edx, edi
add ecx, edx
mov esi, dword [esp + 4]
add esi, dword [esp + 0x30]
js 0x6a17cfc0
mov edx, dword [esp + 4]
sub edx, dword [esp + 0x30]
js 0x6a17cfd0
add esi, edx
lea edx, [ecx + esi]
add edx, eax
mov dword [esp + 0xc], edx
mov esi, dword [esp + 0x3c]
mov eax, dword [esp + 0x5c]
lea ebp, [esi + eax]
sub esi, eax
mov ebx, dword [esp + 0x7c]
mov eax, dword [esp + 0x9c]
lea edi, [ebx + eax]
sub ebx, eax
mov edx, dword [esp + 0xbc]
mov eax, dword [esp + 0xdc]
lea ecx, [edx + eax]
sub edx, eax
mov dword [esp + 8], edx
mov edx, dword [esp + 0xfc]
add edx, dword [esp + 0x11c]
mov eax, dword [esp + 0xfc]
sub eax, dword [esp + 0x11c]
mov dword [esp + 0x10], eax
lea eax, [ebp + edi]
mov dword [esp], eax
sub ebp, edi
mov dword [esp + 4], ebp
lea edi, [esi + ebx]
mov ebp, esi
sub ebp, ebx
lea ebx, [ecx + edx]
mov dword [esp + 0x14], ebx
sub ecx, edx
mov edx, dword [esp + 8]
add edx, dword [esp + 0x10]
mov eax, dword [esp + 8]
sub eax, dword [esp + 0x10]
mov esi, dword [esp]
add esi, ebx
js 0x6a17d168
mov ebx, dword [esp]
sub ebx, dword [esp + 0x14]
mov dword [esp], ebx
js 0x6a17d15c
add esi, dword [esp]
mov ebx, edi
add ebx, edx
js 0x6a17d154
sub edi, edx
js 0x6a17d14c
add edi, ebx
add esi, edi
mov edx, dword [esp + 4]
add edx, ecx
js 0x6a17d144
mov ebx, dword [esp + 4]
sub ebx, ecx
mov ecx, ebx
js 0x6a17d13c
add edx, ecx
add esi, edx
mov edx, ebp
add edx, eax
js 0x6a17d134
sub ebp, eax
js 0x6a17d12c
add ebp, edx
lea edx, [esi + ebp]
add edx, dword [esp + 0xc]
mov dword [esp + 0xc], edx
mov esi, dword [esp + 0x40]
mov eax, dword [esp + 0x60]
lea ebp, [esi + eax]
sub esi, eax
mov ebx, dword [esp + 0x80]
mov eax, dword [esp + 0xa0]
lea edi, [ebx + eax]
sub ebx, eax
mov edx, dword [esp + 0xc0]
mov eax, dword [esp + 0xe0]
lea ecx, [edx + eax]
sub edx, eax
mov dword [esp + 8], edx
mov edx, dword [esp + 0x100]
add edx, dword [esp + 0x120]
mov eax, dword [esp + 0x100]
sub eax, dword [esp + 0x120]
mov dword [esp + 0x10], eax
lea eax, [ebp + edi]
mov dword [esp], eax
sub ebp, edi
mov dword [esp + 4], ebp
lea edi, [esi + ebx]
mov ebp, esi
sub ebp, ebx
lea ebx, [ecx + edx]
mov dword [esp + 0x14], ebx
sub ecx, edx
mov edx, dword [esp + 8]
add edx, dword [esp + 0x10]
mov eax, dword [esp + 8]
sub eax, dword [esp + 0x10]
mov esi, dword [esp]
add esi, ebx
js 0x6a17d124
mov ebx, dword [esp]
sub ebx, dword [esp + 0x14]
mov dword [esp], ebx
js 0x6a17d118
add esi, dword [esp]
mov ebx, edi
add ebx, edx
js 0x6a17d110
sub edi, edx
js 0x6a17d108
add edi, ebx
add esi, edi
mov edx, dword [esp + 4]
add edx, ecx
js 0x6a17d100
mov ebx, dword [esp + 4]
sub ebx, ecx
mov ecx, ebx
js 0x6a17d0f8
add edx, ecx
add esi, edx
mov edx, ebp
add edx, eax
js 0x6a17d0f0
sub ebp, eax
js 0x6a17d0e8
add ebp, edx
lea edx, [esi + ebp]
add edx, dword [esp + 0xc]
mov dword [esp + 0xc], edx
mov esi, dword [esp + 0x44]
mov eax, dword [esp + 0x64]
lea ebp, [esi + eax]
sub esi, eax
mov ebx, dword [esp + 0x84]
mov eax, dword [esp + 0xa4]
lea edi, [ebx + eax]
sub ebx, eax
mov edx, dword [esp + 0xc4]
mov eax, dword [esp + 0xe4]
lea ecx, [edx + eax]
sub edx, eax
mov dword [esp + 8], edx
mov edx, dword [esp + 0x104]
add edx, dword [esp + 0x124]
mov eax, dword [esp + 0x104]
sub eax, dword [esp + 0x124]
mov dword [esp + 0x10], eax
lea eax, [ebp + edi]
mov dword [esp], eax
sub ebp, edi
mov dword [esp + 4], ebp
lea edi, [esi + ebx]
mov ebp, esi
sub ebp, ebx
lea ebx, [ecx + edx]
mov dword [esp + 0x14], ebx
sub ecx, edx
mov edx, dword [esp + 8]
add edx, dword [esp + 0x10]
mov eax, dword [esp + 8]
sub eax, dword [esp + 0x10]
mov esi, dword [esp]
add esi, ebx
js 0x6a17d0e0
mov ebx, dword [esp]
sub ebx, dword [esp + 0x14]
mov dword [esp], ebx
js 0x6a17d0d4
add esi, dword [esp]
mov ebx, edi
add ebx, edx
js 0x6a17d0cc
sub edi, edx
js 0x6a17d0c4
add edi, ebx
add esi, edi
mov edx, dword [esp + 4]
add edx, ecx
js 0x6a17d0bc
mov ebx, dword [esp + 4]
sub ebx, ecx
mov ecx, ebx
js 0x6a17d0b4
add edx, ecx
add esi, edx
mov edx, ebp
add edx, eax
js 0x6a17d0ac
sub ebp, eax
js 0x6a17d0a4
add ebp, edx
lea edx, [esi + ebp]
add edx, dword [esp + 0xc]
mov dword [esp + 0xc], edx
mov esi, dword [esp + 0x48]
mov eax, dword [esp + 0x68]
lea ebp, [esi + eax]
sub esi, eax
mov ebx, dword [esp + 0x88]
mov eax, dword [esp + 0xa8]
lea edi, [ebx + eax]
sub ebx, eax
mov edx, dword [esp + 0xc8]
mov eax, dword [esp + 0xe8]
lea ecx, [edx + eax]
sub edx, eax
mov dword [esp + 8], edx
mov edx, dword [esp + 0x108]
add edx, dword [esp + 0x128]
mov eax, dword [esp + 0x108]
sub eax, dword [esp + 0x128]
mov dword [esp + 0x10], eax
lea eax, [ebp + edi]
mov dword [esp], eax
sub ebp, edi
mov dword [esp + 4], ebp
lea edi, [esi + ebx]
mov ebp, esi
sub ebp, ebx
lea ebx, [ecx + edx]
mov dword [esp + 0x14], ebx
sub ecx, edx
mov edx, dword [esp + 8]
add edx, dword [esp + 0x10]
mov eax, dword [esp + 8]
sub eax, dword [esp + 0x10]
mov esi, dword [esp]
add esi, ebx
js 0x6a17d09c
mov ebx, dword [esp]
sub ebx, dword [esp + 0x14]
mov dword [esp], ebx
js 0x6a17d090
add esi, dword [esp]
mov ebx, edi
add ebx, edx
js 0x6a17d088
sub edi, edx
js 0x6a17d080
add edi, ebx
add esi, edi
mov edx, dword [esp + 4]
add edx, ecx
js 0x6a17d078
mov ebx, dword [esp + 4]
sub ebx, ecx
mov ecx, ebx
js 0x6a17d070
add edx, ecx
add esi, edx
mov edx, ebp
add edx, eax
js 0x6a17d068
sub ebp, eax
js 0x6a17d060
add ebp, edx
lea edx, [esi + ebp]
add edx, dword [esp + 0xc]
mov dword [esp + 0xc], edx
mov esi, dword [esp + 0x4c]
mov eax, dword [esp + 0x6c]
lea ebp, [esi + eax]
sub esi, eax
mov ebx, dword [esp + 0x8c]
mov eax, dword [esp + 0xac]
lea edi, [ebx + eax]
sub ebx, eax
mov edx, dword [esp + 0xcc]
mov eax, dword [esp + 0xec]
lea ecx, [edx + eax]
sub edx, eax
mov dword [esp + 8], edx
mov edx, dword [esp + 0x10c]
add edx, dword [esp + 0x12c]
mov eax, dword [esp + 0x10c]
sub eax, dword [esp + 0x12c]
mov dword [esp + 0x10], eax
lea eax, [ebp + edi]
mov dword [esp], eax
sub ebp, edi
mov dword [esp + 4], ebp
lea edi, [esi + ebx]
mov ebp, esi
sub ebp, ebx
lea ebx, [ecx + edx]
mov dword [esp + 0x14], ebx
sub ecx, edx
mov edx, dword [esp + 8]
add edx, dword [esp + 0x10]
mov eax, dword [esp + 8]
sub eax, dword [esp + 0x10]
mov esi, dword [esp]
add esi, ebx
js 0x6a17d058
mov ebx, dword [esp]
sub ebx, dword [esp + 0x14]
mov dword [esp], ebx
js 0x6a17d04c
add esi, dword [esp]
mov ebx, edi
add ebx, edx
js 0x6a17d044
sub edi, edx
js 0x6a17d03c
add edi, ebx
add esi, edi
mov edx, dword [esp + 4]
add edx, ecx
js 0x6a17d034
mov ebx, dword [esp + 4]
sub ebx, ecx
mov ecx, ebx
js 0x6a17d02c
add edx, ecx
add esi, edx
mov edx, ebp
add edx, eax
js 0x6a17d024
sub ebp, eax
js 0x6a17d01c
add ebp, edx
lea edx, [esi + ebp]
add edx, dword [esp + 0xc]
mov dword [esp + 0xc], edx
mov esi, dword [esp + 0x50]
mov eax, dword [esp + 0x70]
lea ebp, [esi + eax]
sub esi, eax
mov ebx, dword [esp + 0x90]
mov eax, dword [esp + 0xb0]
lea edi, [ebx + eax]
sub ebx, eax
mov edx, dword [esp + 0xd0]
mov eax, dword [esp + 0xf0]
lea ecx, [edx + eax]
sub edx, eax
mov dword [esp + 8], edx
mov edx, dword [esp + 0x110]
add edx, dword [esp + 0x130]
mov eax, dword [esp + 0x110]
sub eax, dword [esp + 0x130]
mov dword [esp + 0x10], eax
lea eax, [ebp + edi]
mov dword [esp], eax
sub ebp, edi
mov dword [esp + 4], ebp
lea edi, [esi + ebx]
mov ebp, esi
sub ebp, ebx
lea ebx, [ecx + edx]
mov dword [esp + 0x14], ebx
sub ecx, edx
mov edx, dword [esp + 8]
add edx, dword [esp + 0x10]
mov esi, dword [esp + 8]
sub esi, dword [esp + 0x10]
add eax, ebx
js 0x6a17d014
mov ebx, dword [esp]
sub ebx, dword [esp + 0x14]
mov dword [esp], ebx
js 0x6a17d008
add eax, dword [esp]
mov ebx, edi
add ebx, edx
js 0x6a17d000
sub edi, edx
js 0x6a17cff8
add edi, ebx
add eax, edi
mov edx, dword [esp + 4]
add edx, ecx
js 0x6a17cff0
mov ebx, dword [esp + 4]
sub ebx, ecx
mov ecx, ebx
js 0x6a17cfe8
add edx, ecx
add eax, edx
mov edx, ebp
add edx, esi
js 0x6a17cfe0
sub ebp, esi
js 0x6a17cfd8
add ebp, edx
add eax, ebp
add eax, dword [esp + 0xc]
add esp, 0x134
pop ebx
pop esi
pop edi
pop ebp
ret
neg eax
mov ecx, dword [esp + 8]
sub ecx, dword [esp + 0x18]
jns 0x6a17c843
neg ecx
add eax, ecx
mov ecx, dword [esp + 0x10]
add ecx, dword [esp + 0x20]
jns 0x6a17c853
neg ecx
mov ebx, dword [esp + 0x10]
sub ebx, dword [esp + 0x20]
jns 0x6a17c861
neg ebx
add ecx, ebx
add eax, ecx
mov ebp, dword [esp + 0xc]
add ebp, dword [esp + 0x1c]
jns 0x6a17c873
neg ebp
mov ecx, dword [esp + 0xc]
sub ecx, dword [esp + 0x1c]
jns 0x6a17c881
neg ecx
add ebp, ecx
add eax, ebp
mov ebp, dword [esp + 0x14]
add ebp, dword [esp]
jns 0x6a17c892
neg ebp
mov ebx, dword [esp + 0x14]
sub ebx, dword [esp]
jns 0x6a17c89f
neg ebx
add ebx, ebp
add eax, ebx
mov ecx, dword [esp + 0x24]
add ecx, esi
jns 0x6a17c8af
neg ecx
mov ebx, dword [esp + 0x24]
sub ebx, esi
jns 0x6a17c8bb
neg ebx
add ecx, ebx
mov ebx, edi
add ebx, edx
jns 0x6a17c8c7
neg ebx
sub edi, edx
jns 0x6a17c8cf
neg edi
add edi, ebx
add ecx, edi
mov edx, dword [esp + 0x28]
add edx, dword [esp + 0x2c]
jns 0x6a17c8e1
neg edx
mov edi, dword [esp + 0x28]
sub edi, dword [esp + 0x2c]
jns 0x6a17c8ef
neg edi
add edx, edi
add ecx, edx
mov esi, dword [esp + 4]
add esi, dword [esp + 0x30]
jns 0x6a17c901
neg esi
mov edx, dword [esp + 4]
sub edx, dword [esp + 0x30]
jns 0x6a17c90f
neg edx
jmp 0x6a17c90f
neg ebp
jmp 0x6a17cec5
neg edx
jmp 0x6a17cebd
neg ecx
jmp 0x6a17ceaf
neg edx
jmp 0x6a17cea1
neg edi
jmp 0x6a17ce91
neg ebx
jmp 0x6a17ce89
neg ebx
mov dword [esp], ebx
jmp 0x6a17ce7c
neg eax
jmp 0x6a17ce6c
neg ebp
jmp 0x6a17cdd3
neg edx
jmp 0x6a17cdcb
neg ecx
jmp 0x6a17cdbd
neg edx
jmp 0x6a17cdaf
neg edi
jmp 0x6a17cd9f
neg ebx
jmp 0x6a17cd97
neg ebx
mov dword [esp], ebx
jmp 0x6a17cd8a
neg esi
jmp 0x6a17cd7a
neg ebp
jmp 0x6a17ccde
neg edx
jmp 0x6a17ccd6
neg ecx
jmp 0x6a17ccc8
neg edx
jmp 0x6a17ccba
neg edi
jmp 0x6a17ccaa
neg ebx
jmp 0x6a17cca2
neg ebx
mov dword [esp], ebx
jmp 0x6a17cc95
neg esi
jmp 0x6a17cc85
neg ebp
jmp 0x6a17cbe9
neg edx
jmp 0x6a17cbe1
neg ecx
jmp 0x6a17cbd3
neg edx
jmp 0x6a17cbc5
neg edi
jmp 0x6a17cbb5
neg ebx
jmp 0x6a17cbad
neg ebx
mov dword [esp], ebx
jmp 0x6a17cba0
neg esi
jmp 0x6a17cb90
neg ebp
jmp 0x6a17caf4
neg edx
jmp 0x6a17caec
neg ecx
jmp 0x6a17cade
neg edx
jmp 0x6a17cad0
neg edi
jmp 0x6a17cac0
neg ebx
jmp 0x6a17cab8
neg ebx
mov dword [esp], ebx
jmp 0x6a17caab
neg esi
jmp 0x6a17ca9b
neg ebp
jmp 0x6a17c9ff
neg edx
jmp 0x6a17c9f7
neg ecx
jmp 0x6a17c9e9
neg edx
jmp 0x6a17c9db
neg edi
jmp 0x6a17c9cb
neg ebx
jmp 0x6a17c9c3
neg ebx
mov dword [esp], ebx
jmp 0x6a17c9b6
neg esi
jmp 0x6a17c9a6