Function at 0x100ef5b0
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x14
mov eax, dword [esp + 0x1c]
push ebx
mov dword [esp + 0x14], 0
mov eax, dword [eax + 4]
cmp dword [eax + 8], 0
mov ebx, dword [eax]
mov dword [esp + 4], ebx
jbe 0x100ef686
movzx eax, byte [esp + 0x24]
push ebp
mov ebp, dword [esp + 0x20]
push esi
push edi
mov dword [esp + 0x1c], eax
movzx edx, word [ebx + 2]
mov ecx, dword [ebp + 0x34]
movzx edi, word [ebx]
mov eax, dword [ebp]
imul ecx, edx
add ecx, edi
lea esi, [eax + ecx*4]
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax + 0x1c]
add ecx, edx
imul ecx, dword [eax + 0x14]
add ecx, dword [eax + 0x18]
mov eax, dword [eax + 8]
add ecx, edi
lea edi, [eax + ecx*4]
movzx eax, byte [ebx + 6]
mov ecx, dword [esp + 0x1c]
imul eax, ecx
mov dword [esp + 0x14], edi
add eax, 0xff
shr eax, 8
cmp al, 0xff
jne 0x100ef68d
xor eax, eax
xor ebp, ebp
cmp ax, word [ebx + 4]
jae 0x100ef65f
mov ecx, dword [edi]
mov eax, ecx
not eax
shr eax, 0x18
push eax
mov eax, dword [esp + 0x2c]
push dword [esi]
push ecx
mov eax, dword [eax + 0x5c]
call eax
mov dword [esi], eax
lea esi, [esi + 4]
movzx eax, word [ebx + 4]
lea edi, [edi + 4]
inc ebp
add esp, 0xc
cmp ebp, eax
jb 0x100ef635
mov ebp, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
add ebx, 8
mov ecx, dword [esp + 0x20]
inc ecx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x20], ecx
mov eax, dword [eax + 4]
cmp ecx, dword [eax + 8]
jb 0x100ef5e3
pop edi
pop esi
pop ebp
mov al, 1
pop ebx
add esp, 0x14
ret
cmp byte [esp + 0x30], 0xff
movzx eax, word [ebx + 4]
mov dword [esp + 0x18], 0
jne 0x100ef763
xor ecx, ecx
cmp cx, ax
jae 0x100ef663
nop dword [eax + eax]
mov eax, dword [ebp + 0x5c]
push 0xff
push dword [esi]
push dword [edi]
call eax
movzx ecx, byte [edi + 3]
lea esi, [esi + 4]
mov ebx, dword [esi - 4]
mov ebp, eax
mov eax, dword [esp + 0x1c]
mov edi, ebp
shr edi, 8
and ebp, 0xff00ff
and edi, 0xff00ff
add esp, 0xc
movzx edx, byte [eax + 6]
mov eax, ebx
imul edx, ecx
and eax, 0xff00ff00
mov ecx, ebx
shr ecx, 8
and ecx, 0xff00ff
sub edi, ecx
mov ecx, dword [esp + 0x18]
add edx, 0xff
inc ecx
shr edx, 8
movzx edx, dl
imul edi, edx
mov dword [esp + 0x18], ecx
add edi, eax
mov eax, ebx
and eax, 0xff00ff
and ebx, 0xffff00ff
sub ebp, eax
and edi, 0xff00ff00
imul ebp, edx
shr ebp, 8
add ebp, ebx
mov ebx, dword [esp + 0x10]
and ebp, 0xff00ff
add edi, ebp
mov ebp, dword [esp + 0x28]
mov dword [esi - 4], edi
mov edi, dword [esp + 0x14]
movzx eax, word [ebx + 4]
add edi, 4
mov dword [esp + 0x14], edi
cmp ecx, eax
jb 0x100ef6b0
jmp 0x100ef663
xor edx, edx
cmp dx, ax
jae 0x100ef663
nop
mov eax, dword [edi]
mov edi, eax
and eax, 0xff00ff
shr edi, 8
imul eax, ecx
and edi, 0xff00ff
imul edi, ecx
add eax, 0xff00ff
shr eax, 8
add edi, 0xff00ff
and eax, 0xff00ff
and edi, 0xff00ff00
add edi, eax
mov eax, edi
not eax
shr eax, 0x18
push eax
push dword [esi]
mov eax, dword [ebp + 0x5c]
push edi
call eax
mov ebx, dword [esi]
lea esi, [esi + 4]
mov ebp, eax
shr edi, 0x18
mov eax, dword [esp + 0x1c]
add esp, 0xc
movzx ecx, byte [eax + 6]
mov eax, ebx
imul ecx, edi
and eax, 0xff00ff00
mov edi, ebp
and ebp, 0xff00ff
shr edi, 8
and edi, 0xff00ff
add ecx, 0xff
shr ecx, 8
movzx edx, cl
mov ecx, ebx
shr ecx, 8
and ecx, 0xff00ff
sub edi, ecx
mov ecx, dword [esp + 0x18]
imul edi, edx
inc ecx
mov dword [esp + 0x18], ecx
add edi, eax
mov eax, ebx
and eax, 0xff00ff
and ebx, 0xffff00ff
sub ebp, eax
and edi, 0xff00ff00
imul ebp, edx
shr ebp, 8
add ebp, ebx
mov ebx, dword [esp + 0x10]
and ebp, 0xff00ff
add edi, ebp
mov ebp, dword [esp + 0x28]
mov dword [esi - 4], edi
mov edi, dword [esp + 0x14]
movzx eax, word [ebx + 4]
add edi, 4
cmp ecx, eax
mov dword [esp + 0x14], edi
mov ecx, dword [esp + 0x1c]
jb 0x100ef770
jmp 0x100ef663