Function at 0x10017740
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [0x1047eec4]
sub eax, dword [0x1047edd4]
mov dword [0x1047ef50], eax
mov ecx, dword [0x1047edd0]
imul ecx, dword [0x1047ef7c]
mov dword [0x1047eec4], ecx
mov edx, dword [0x1047eee8]
sub edx, dword [0x1047ee5c]
mov dword [0x1047ee34], edx
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x14], ecx
mov edx, dword [0x1047ee28]
add edx, dword [0x1047f028]
mov dword [0x1047efb4], edx
mov eax, dword [0x1047ee70]
and eax, dword [0x1047ef08]
mov dword [0x1047edf0], eax
mov ecx, dword [0x1047ed90]
and ecx, dword [0x1047ed9c]
mov dword [0x1047f034], ecx
mov edx, dword [0x1047ef94]
imul edx, dword [0x1047efa0]
mov dword [0x1047ee4c], edx
mov eax, dword [0x1047ed9c]
and eax, dword [0x1047f00c]
mov dword [0x1047ee44], eax
mov ecx, dword [0x1047edd0]
sub ecx, dword [0x1047edac]
mov dword [0x1047f034], ecx
mov edx, dword [0x1047ef7c]
add edx, dword [0x1047efe0]
mov dword [0x1047edbc], edx
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
movzx edx, word [eax + 0x14]
lea eax, [ecx + edx + 0x18]
mov dword [ebp - 4], eax
mov ecx, dword [0x1047efdc]
sub ecx, dword [0x1047ee48]
mov dword [0x1047eebc], ecx
mov edx, dword [0x1047efe0]
add edx, dword [0x1047ee50]
mov dword [0x1047f018], edx
mov eax, dword [0x1047eeb4]
imul eax, dword [0x1047ee58]
mov dword [0x1047eda0], eax
mov ecx, dword [0x1047eed4]
sub ecx, dword [0x1047edc0]
mov dword [0x1047ef7c], ecx
mov edx, dword [0x1047efc8]
and edx, dword [0x1047f028]
mov dword [0x1047ef38], edx
mov eax, dword [0x1047ee20]
sub eax, dword [0x1047ee3c]
mov dword [0x1047ef18], eax
mov ecx, dword [0x1047efc0]
and ecx, dword [0x1047edd4]
mov dword [0x1047eddc], ecx
mov dword [ebp - 0xc], 0
jmp 0x100178aa
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
add eax, 0x28
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
movzx eax, word [edx + 6]
cmp dword [ebp - 0xc], eax
jge 0x10017cf9
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x10], 0
jne 0x10017b94
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0x38]
mov dword [ebp - 0x10], eax
mov ecx, dword [0x1047eeb4]
sub ecx, dword [0x1047eed4]
mov dword [0x1047eef4], ecx
mov edx, dword [0x1047eef4]
and edx, dword [0x1047edf4]
mov dword [0x1047edf4], edx
mov eax, dword [0x1047ee74]
sub eax, dword [0x1047eff8]
mov dword [0x1047ee84], eax
mov ecx, dword [0x1047ee1c]
imul ecx, dword [0x1047ef28]
mov dword [0x1047eeac], ecx
mov edx, dword [0x1047ee30]
and edx, dword [0x1047ef3c]
mov dword [0x1047ee10], edx
mov eax, dword [0x1047eec4]
and eax, dword [0x1047eff8]
mov dword [0x1047efd4], eax
mov ecx, dword [0x1047edf8]
imul ecx, dword [0x1047ee14]
mov dword [0x1047ee18], ecx
mov edx, dword [0x1047ee60]
imul edx, dword [0x1047edd0]
mov dword [0x1047efec], edx
cmp dword [ebp - 0x10], 0
jle 0x10017b15
push 4
push 0x1000
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x14]
add edx, dword [ecx + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 8], eax
mov eax, dword [0x1047eeec]
and eax, dword [0x1047f040]
mov dword [0x1047ee80], eax
mov ecx, dword [0x1047ef00]
and ecx, dword [0x1047f020]
mov dword [0x1047ee88], ecx
mov edx, dword [0x1047ee2c]
add edx, dword [0x1047eecc]
mov dword [0x1047ef48], edx
mov eax, dword [0x1047ede8]
imul eax, dword [0x1047ed7c]
mov dword [0x1047eee0], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov dword [ecx + 8], edx
mov eax, dword [0x1047ef08]
and eax, dword [0x1047eed8]
mov dword [0x1047f00c], eax
mov ecx, dword [0x1047eda8]
imul ecx, dword [0x1047ef00]
mov dword [0x1047ed94], ecx
mov edx, dword [0x1047f03c]
imul edx, dword [0x1047ee5c]
mov dword [0x1047ede0], edx
mov eax, dword [0x1047eda0]
add eax, dword [0x1047ee20]
mov dword [0x1047efec], eax
mov ecx, dword [0x1047eda4]
imul ecx, dword [0x1047ef70]
mov dword [0x1047eda8], ecx
mov edx, dword [0x1047efcc]
imul edx, dword [0x1047ef70]
mov dword [0x1047efac], edx
mov eax, dword [0x1047ee08]
sub eax, dword [0x1047ee10]
mov dword [0x1047ed98], eax
mov ecx, dword [0x1047ef7c]
add ecx, dword [0x1047ed8c]
mov dword [0x1047efd0], ecx
mov edx, dword [ebp - 0x10]
push edx
push 0
mov eax, dword [ebp - 8]
push eax
call fcn.1012ba40
add esp, 0xc
mov ecx, dword [0x1047ee94]
add ecx, dword [0x1047ef08]
mov dword [0x1047edb4], ecx
mov edx, dword [0x1047ee64]
sub edx, dword [0x1047eec0]
mov dword [0x1047eed4], edx
mov eax, dword [0x1047ee20]
imul eax, dword [0x1047ef04]
mov dword [0x1047ee24], eax
mov ecx, dword [0x1047ef9c]
add ecx, dword [0x1047ee08]
mov dword [0x1047ee6c], ecx
mov edx, dword [0x1047eeb0]
sub edx, dword [0x1047edbc]
mov dword [0x1047effc], edx
mov eax, dword [0x1047ed84]
and eax, dword [0x1047edbc]
mov dword [0x1047eda4], eax
mov ecx, dword [0x1047efec]
and ecx, dword [0x1047efd0]
mov dword [0x1047efb8], ecx
mov edx, dword [0x1047ef90]
and edx, dword [0x1047eea8]
mov dword [0x1047edd8], edx
mov eax, dword [0x1047ef58]
imul eax, dword [0x1047efb4]
mov dword [0x1047edc4], eax
jmp 0x10017898
push 4
push 0x1000
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x10]
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x14]
add edx, dword [ecx + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 8], eax
mov eax, dword [0x1047ef54]
imul eax, dword [0x1047f028]
mov dword [0x1047eef4], eax
mov ecx, dword [0x1047f034]
sub ecx, dword [0x1047efdc]
mov dword [0x1047ef14], ecx
mov edx, dword [0x1047eff8]
sub edx, dword [0x1047eec4]
mov dword [0x1047ed98], edx
mov eax, dword [0x1047ef98]
sub eax, dword [0x1047edf4]
mov dword [0x1047ef70], eax
mov ecx, dword [0x1047f024]
add ecx, dword [0x1047efbc]
mov dword [0x1047efd0], ecx
mov edx, dword [0x1047ee00]
imul edx, dword [0x1047efb8]
mov dword [0x1047ed98], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [ebp + 8]
add eax, dword [edx + 0x14]
push eax
mov ecx, dword [ebp - 8]
push ecx
call fcn.1012a390
add esp, 0xc
mov edx, dword [0x1047eed0]
add edx, dword [0x1047f030]
mov dword [0x1047f02c], edx
mov eax, dword [0x1047efd4]
and eax, dword [0x1047eda0]
mov dword [0x1047ef48], eax
mov ecx, dword [0x1047eee8]
sub ecx, dword [0x1047ed94]
mov dword [0x1047ef0c], ecx
mov edx, dword [0x1047ef24]
sub edx, dword [0x1047f020]
mov dword [0x1047eed0], edx
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 8]
mov dword [eax + 8], ecx
mov edx, dword [0x1047f028]
and edx, dword [0x1047ef28]
mov dword [0x1047efe8], edx
mov eax, dword [0x1047ef5c]
add eax, dword [0x1047eeac]
mov dword [0x1047ed7c], eax
mov ecx, dword [0x1047ee7c]
imul ecx, dword [0x1047ef60]
mov dword [0x1047ef98], ecx
mov edx, dword [0x1047ee70]
add edx, dword [0x1047efdc]
mov dword [0x1047eefc], edx
mov eax, dword [0x1047ef2c]
and eax, dword [0x1047eee0]
mov dword [0x1047edf8], eax
mov ecx, dword [0x1047ee94]
sub ecx, dword [0x1047eda0]
mov dword [0x1047edd0], ecx
jmp 0x10017898
mov esp, ebp
pop ebp
ret