Function at 0xe503ce
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x654
mov eax, dword [0xe48410]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0x644], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x648], eax
mov eax, dword [ebp + 0x14]
push edi
mov dword [ebp - 0x650], eax
mov eax, dword [esi + 0x138]
push 4
add eax, 6
mov dword [ebp - 0x63c], esi
push 0x3000
push dword [esi + 0x13c]
imul ebx, eax, 0x38
push 0
add ebx, esi
call dword [0xe61004]
push dword [ebx + 0x28]
mov dword [ebp - 0x630], eax
lea ecx, [ebp - 0x62c]
mov eax, dword [ebx + 0x30]
mov dword [ebp - 0x634], eax
mov eax, dword [ebx + 0x2c]
add eax, esi
push eax
lea eax, [ebp - 0x634]
push eax
lea eax, [ebp - 0x630]
push eax
call fcn.00e4fc4b
mov edi, dword [ebx + 0x30]
add esi, 0x38
mov edx, dword [ebp - 0x630]
add edi, edx
push 0x3e
pop ecx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebx + 0x30]
lea esi, [edx + 0x18]
mov ebx, dword [ebp - 0x63c]
movzx ecx, word [eax + edx + 0x14]
add ecx, eax
mov eax, dword [ebx + 0x138]
add esi, ecx
xor ecx, ecx
mov dword [ebp - 0x640], esi
mov dword [ebp - 0x634], ecx
inc eax
je 0xe504f9
mov edi, esi
lea edx, [ebx + 0x150]
mov dword [ebp - 0x638], edi
movzx eax, word [ebx + 0x132]
push 0xa
cmp ecx, eax
pop ecx
jne 0xe504bf
sub edx, 0x38
lea esi, [ebx + 0x10]
jmp 0xe504c1
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x634]
add edx, 0x38
mov edi, dword [ebp - 0x638]
inc ecx
mov eax, dword [ebx + 0x138]
add edi, 0x28
inc eax
mov dword [ebp - 0x634], ecx
mov dword [ebp - 0x638], edi
cmp ecx, eax
jb 0xe504a9
mov edx, dword [ebp - 0x630]
mov esi, dword [ebp - 0x640]
imul eax, dword [ebx + 0x138], 0x28
mov ecx, dword [eax + esi + 0x14]
add ecx, dword [eax + esi + 0x10]
xor esi, esi
mov eax, dword [edx + 0x3c]
add eax, edx
mov dword [ebp - 0x654], ecx
xor edx, edx
mov dword [ebp - 0x64c], eax
mov dword [ebp - 0x63c], esi
cmp dx, word [eax + 6]
movzx edi, word [eax + 0x14]
mov edx, dword [ebp - 0x630]
jae 0xe5062b
lea ecx, [edi + 0x2c]
add ecx, eax
lea edi, [ebx + 0x178]
mov dword [ebp - 0x638], ecx
movzx eax, word [ebx + 0x132]
cmp esi, eax
mov esi, dword [ecx]
je 0xe505a9
mov eax, dword [edi + 8]
add esi, edx
push eax
push 0
push esi
mov dword [ebp - 0x634], eax
mov dword [ebp - 0x640], esi
call fcn.00e52840
mov eax, dword [edi + 4]
add esp, 0xc
add eax, ebx
cmp dword [edi + 0xc], 0
push dword [edi]
push eax
je 0xe5059b
lea eax, [ebp - 0x634]
push eax
lea eax, [ebp - 0x640]
push eax
lea ecx, [ebp - 0x62c]
call fcn.00e4fc4b
jmp 0xe505a4
push esi
call fcn.00e521f0
add esp, 0xc
add edi, 0x38
jmp 0xe505f1
push dword [ecx - 4]
mov eax, dword [ebp - 0x648]
add esi, edx
mov ecx, dword [ebp - 0x644]
mov eax, dword [eax + 0x34]
add eax, dword [ecx + 0xc]
push eax
push esi
call fcn.00e521f0
mov eax, dword [ebp - 0x648]
mov ecx, dword [ebp - 0x644]
mov eax, dword [eax + 0x88]
sub eax, dword [ecx + 0xc]
add eax, esi
push eax
mov eax, dword [ebx + 0x134]
neg eax
push eax
push esi
call fcn.00e496d0
add esp, 0x18
mov eax, dword [ebp - 0x64c]
mov ecx, dword [ebp - 0x638]
mov esi, dword [ebp - 0x63c]
add ecx, 0x28
mov edx, dword [ebp - 0x630]
inc esi
movzx eax, word [eax + 6]
mov dword [ebp - 0x638], ecx
mov dword [ebp - 0x63c], esi
cmp esi, eax
jl 0xe50548
mov ecx, dword [ebp - 0x654]
push ecx
push edx
call dword [ebp - 0x650]
pop ecx
pop ecx
push 0x8000
push dword [ebx + 0x13c]
mov esi, eax
push dword [ebp - 0x630]
call dword [0xe61008]
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00e51d46
mov esp, ebp
pop ebp
ret