Function at 0xdb2cb1
Capabilities:
Enumerate pe sections
Hash data with md5

Disassembly:
lea esp, [esp + 4]
jmp 0xdf0423
test edx, edx
jne 0xdf044a
stc
clc
sub esp, 0x14
add esp, 6
lea esp, [esp + 0xb]
sub esp, 0xc
push word [esp + 1]
push dword [esp + 2]
pop dword [esp + 1]
lea esp, [esp + 1]
jmp 0xdf053a
sub esp, 8
mov dword [esp], 0x10
mov edx, dword [esp]
jmp 0xdf03f1
add dword [esp], 0xffffffff
mov edx, dword [esp]
je 0xdf0549
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0xdf0549
je 0xdf08be
or ecx, 0xaacdf3bb
xor eax, eax
lea esp, [esp + 0x10]
add esp, 8
ret
movzx eax, byte [eax]
movzx ecx, byte [ecx]
sub esp, 9
push dword [esp + 8]
push dword [esp + 0xb]
pop dword [esp + 6]
pop word [esp]
jmp 0xdf07bf
mov dword [esp + 1], edx
stc
lea esp, [esp + 3]
sub eax, ecx
pushal
push word [esp + 6]
pop word [esp + 1]
lea esp, [esp + 0x14]
lea esp, [esp + 2]
mov word [esp + 7], cx
push word [esp + 5]
lea esp, [esp + 0x14]
add esp, 8
ret
mov dword [esp + 0x38], 0
test ebx, ebx
jl 0xdf09b5
jmp 0xdf09f9
mov ecx, dword [esp + 0x10]
lea eax, [ecx + ebx]
cdq
sub eax, edx
mov edx, dword [esp + 0x3c]
pushal
mov bl, byte [esp]
bswap esi
mov dh, 0x7e
mov ch, cl
lea ebp, [esi*4]
mov ecx, eax
xchg ecx, ebx
mov dword [esp + 4], eax
push ax
push word [esp + 1]
lea esp, [esp + 2]
lea esp, [esp]
mov byte [esp], cl
mov word [esp], bx
mov word [esp], ax
lea esp, [esp + 2]
popal
mov eax, dword [esp + 0x24]
jmp 0xdf0918
inc eax
inc ecx
add dword [esp], 0xffffffff
mov edx, dword [esp]
jne 0xdf0457
je 0xdf0549
test al, al
je 0xdf0989
mov al, byte [edx + 1]
movzx ecx, byte [edx + edi + 1]
inc edx
movzx ebx, al
sub esp, 0x17
jmp 0xdf096b
test ecx, ecx
jge 0xdf0a5a
or ecx, 0xffffffff
cmp dword [esp + 0x10], ebx
jmp 0xdf09d2
sar esi, 1
push edi
mov edi, esi
lea edi, [edi*4]
lea edi, [eax + edi]
mov ecx, dword [edi]
pop edi
lea edi, [ecx + ebp]
movzx ecx, byte [edi]
sub ecx, dword [esp + 0x28]
jne 0xdf08fb
mov al, byte [esp + 0x38]
push ebx
lea esp, [esp + 1]
clc
lea esp, [esp + 3]
sub edi, edx
pushal
mov byte [esp + 0x13], bl
pop dword [esp + 9]
push word [esp + 0xf]
lea esp, [esp + 0xd]
mov word [esp + 7], bx
pushal
lea esp, [esp + 1]
lea esp, [esp + 0x30]
jmp 0xdf08d3
add esp, 7
cmc
add esp, 0
mov dword [esp + 5], esi
mov dword [esp + 2], edx
jmp 0xdf0b4c
mov ebx, dword [esp + 0x14]
jmp 0xdf08fb
inc esi
mov dword [esp + 0x10], esi
jmp 0xdf09ed
mov eax, dword [esp + 0x20]
jmp 0xdf0ada
je 0xdf0a1c
test ecx, ecx
jle 0xdf09ae
lea ebx, [esi - 1]
mov dword [esp + 0x14], ebx
jmp 0xdf09ed
cmp dword [esp + 0x10], ebx
jle 0xdf0863
jmp 0xdf0a1c
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x38]
mov edx, dword [eax + ecx*4]
mov eax, dword [esp + 0x3c]
clc
sub esp, 0x13
jmp 0xdf0cde
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x18]
jmp 0xdf07f4
test ecx, ecx
jne 0xdf0906
mov edx, dword [esp + 0x1c]
movzx eax, word [edx + esi*2]
mov ecx, dword [esp + 0x18]
jmp 0xdf0b0b
jle 0xdf0a38
mov ecx, 1
jmp 0xdf0906
pop word [esp]
mov byte [esp], ah
push word [esp]
pop word [esp]
lea esp, [esp]
push word [esp + 1]
lea esp, [esp + 0x28]
jmp 0xdf0ad4
test eax, eax
jne 0xdf0ada
jmp 0xdf09ed
test eax, eax
jne 0xdf09b5
je 0xdf0a1c
xchg esi, eax
push ss
test bl, ah
push ds
sbb eax, 0x6f089a1b
lcall 0x6f9c, 0xf565e1f8
bound ebx, qword [esi]
xchg dword [0x3bf734b5], edi
ret 0xd672
cmp eax, edx
jb 0xdf0aae
jae 0xdf0a92
mov di, 0x30ea
mov di, word [esp]
lea edi, [ebx + ebp]
mov di, 0x6af5
mov di, 0x5502
mov di, word [esp]
mov di, word [esp]
mov edi, dword [esp]
pushal
jmp 0xdf0bb7
mov eax, dword [ecx + eax*4]
mov ecx, dword [esp + 0x2c]
add eax, ebp
mov dword [esp + 0x20], eax
cmp eax, ecx
jb 0xdf0a92
mov edx, dword [esp + 0x30]
cmc
pushfd
push edi
sub esp, 0x14
sub esp, 0xc
mov byte [esp + 0x1d], dh
pop dword [esp + 0xe]
add edx, ecx
push esp
mov word [esp + 1], di
jmp 0xdf0a67
pop word [esp + 8]
cmc
mov byte [esp + 9], cl
lea esp, [esp + 2]
sub ecx, ebx
push edi
pushfd
lea esp, [esp + 0x14]
je 0xdf08d3
jne 0xdf0989
pop word [esp]
mov byte [esp], bh
lea esp, [esp + 1]
lea esp, [esp + 1]
push esi
mov esi, dword [esp + 0x20]
push ebx
mov word [esp + 1], bp
jmp 0xdf0cb6
mov dword [esp + 0x16], ebp
pop word [esp + 0x10]
mov word [esp + 0x19], si
lea esp, [esp + 0x16]
lea esp, [esp + 0xc]
mov esi, 0x4cbd30d3
mov esi, dword [esp]
push esp
pop word [esp]
mov word [esp], ax
lea esp, [esp + 2]
lea esp, [esp + 4]
pop ebx
mov ebp, dword [esp]
lea ebp, [ecx + 0x58f8]
lea ebp, [ebp + 0x74]
mov bp, 0xd3e
mov ebp, 0x5fc91efb
bswap ebp
lea ebp, [esi + ebp]
mov ebp, 0x1c6469d4
mov ebp, dword [esp]
pushal
mov byte [esp + 0x14], al
lea esp, [esp + 0x24]
add esp, 0x24
ret 8
mov edx, dword [esp + 0x38]
movzx eax, word [esi + edx*2]
mov edi, dword [edi + eax*4]
sub esp, 0x1d
lea esp, [esp + 0x10]
lea esp, [esp + 1]
add edi, ebp
push si
mov byte [esp], dl
lea esp, [esp + 1]
pushal
lea esp, [esp + 1]
lea esp, [esp + 0x2c]
mov dword [esp + 0x20], edi
jmp 0xdf09b5
mov eax, 0x5a4d
cmp word [edx], ax
je 0xdf0ddc
clc
jmp 0xdf0db9
lea esp, [esp + 3]
mov dword [esp + 0x24], edi
pushal
mov word [esp + 0x12], bp
push word [esp + 0x17]
pop word [esp + 0x14]
lea esp, [esp + 0x44]
test edx, edx
jne 0xdf0c63
xor eax, eax
pushal
push dword [esp + 0xc]
jmp 0xdf0e51
push dword [esp + 2]
push dword [esp]
lea esp, [esp + 1]
mov byte [esp], dh
mov dword [esp], edi
mov word [esp + 7], dx
pushal
jmp 0xdf0c81
add esp, 0x12
cmc
mov byte [esp], dl
pushfd
push edx
lea esp, [esp + 1]
add edx, ebp
pushal
lea esp, [esp + 0x17]
pop dword [esp]
mov byte [esp + 1], al
mov dword [esp], esi
pop word [esp]
mov byte [esp + 1], bl
lea esp, [esp]
push bx
lea esp, [esp + 1]
lea esp, [esp + 0xc]
call fcn.00db2c6c
test eax, eax
je 0xdf0c30
mov eax, dword [esp + 0x38]
inc eax
cmp eax, ebx
mov dword [esp + 0x38], eax
jle 0xdf0804
mov eax, dword [esp + 0x20]
pop edi
bswap si
mov si, word [esp]
not esi
bswap esi
mov si, 0x79ae
bswap si
mov esi, 0x2e53271e
bswap si
mov esi, dword [esp]
push ebx
mov byte [esp], cl
lea esp, [esp + 8]
pop ebx
pop ebp
add esp, 0x24
ret 8
mov dword [esp + 0x10], ecx
cmp esi, dword [edi + 0xc]
jae 0xdf0df8
cmp dword [eax + 0x54], esi
jmp 0xdf0ede
mov byte [esp], al
mov byte [esp], ch
push word [esp + 1]
lea esp, [esp + 3]
lea esp, [esp + 1]
lea esp, [esp + 8]
mov ecx, dword [edx + 0x3c]
add ecx, edx
movzx edx, word [ecx + 0x14]
lea edi, [ecx + edx + 0x18]
jmp 0xdf0e1a
sub esp, 8
mov dword [esp + 1], esp
mov byte [esp], bh
xor eax, eax
push sp
mov word [esp], di
jmp 0xdf0d87
push ebx
mov ebx, edx
lea ebx, [ebx + 0x3c]
mov eax, dword [ebx]
pop ebx
add eax, edx
jmp 0xdf0d9e
movzx eax, word [eax + 6]
push sp
pushfd
mov dword [esp], esi
lea esp, [esp + 3]
lea esp, [esp + 3]
push ebx
jmp 0xdf0eb5
mov ebp, dword [eax + 0x38]
push edi
pushal
mov dword [esp], eax
pushal
mov dword [esp + 0x19], ecx
pushfd
push word [esp + 0x15]
lea esp, [esp + 2]
lea esp, [esp + 0x24]
popal
lea edi, [edi + 0x3c]
mov ecx, dword [edi]
pop edi
mov dword [esp + 0x18], ebp
jmp 0xdf0d68
push cx
mov byte [esp + 7], al
pushfd
lea esp, [esp + 2]
xor edi, edi
push ecx
lea esp, [esp]
push word [esp]
mov byte [esp + 3], al
mov dword [esp], ebp
lea esp, [esp + 2]
lea esp, [esp + 0x2c]
jmp 0xdf0e1a
lea ebx, [esi*4]
mov ebp, dword [esp]
mov bp, ax
mov bx, 0x7777
jmp 0xdf0f9d
push bp
mov byte [esp], bh
lea esp, [esp]
push word [esp + 1]
stc
jmp 0xdf1363
mov dword [esp + 0x18], 0
mov dword [esp + 0x20], eax
test eax, eax
jle 0xdf0e97
add edi, 8
nop
mov ebx, dword [edi + 0xc]
push ebp
pushal
jmp 0xdf0e77
bswap edi
lea edi, [ebx*4]
mov edi, dword [esp]
pushal
push dword [esp + 0xe]
mov edi, dword [esp + 0x1f]
mov di, word [esp + 0x1c]
bswap edi
mov edi, dword [esp + 0x24]
lea esp, [esp + 0x28]
sbb eax, eax
not eax
cmc
pushal
push dword [esp + 0x1b]
and eax, esi
push edx
lea esp, [esp + 0x28]
pop esi
pop ebp
add esp, 0x14
ret
add esi, ebp
mov ebp, dword [esp + 0x14]
xor edx, edx
mov eax, ecx
div ebp
jmp 0xdf0f76
sub esp, 5
lea esp, [esp + 1]
sub ebp, eax
pushal
lea esp, [esp + 0x24]
jmp 0xdf0f1e
mov ecx, dword [esp + 0x18]
inc ecx
add edi, 0x28
cmp ecx, eax
mov dword [esp + 0x18], ecx
jmp 0xdf1067
mov dword [esp + 0x10], edx
test edx, edx
jne 0xdf108c
mov dword [esp + 0x10], ebp
jmp 0xdf108c
mov esi, 0x63723f8b
not ah
mov al, 0xb4
mov dword [esp + 8], edi
pushal
mov word [esp + 1], bp
lea esp, [esp + 0x12]
pop word [esp + 3]
pop word [esp]
lea esp, [esp + 8]
mov byte [esp], ah
mov byte [esp], dl
push word [esp + 1]
lea esp, [esp + 4]
popal
mov esi, dword [ebp]
pop ebp
mov ecx, dword [edi + 8]
test ebx, ebx
je 0xdf0f5a
xor edx, edx
mov eax, esi
div ebp
pushal
lea ebp, [edx + esi]
mov si, cx
mov eax, 0x6601168e
mov dword [esp + 0x1c], edx
pushal
lea esp, [esp + 0x20]
popal
test edx, edx
jne 0xdf0f3b
pushal
xchg cl, ah
xchg ecx, edi
xchg bx, ax
mov di, 0x1215
bswap ax
mov ebx, 0x23af6955
xchg bl, cl
setae bh
mov dword [esp + 0x1c], ebp
pushfd
mov dword [esp], ecx
lea esp, [esp + 4]
popal
jmp 0xdf0f3b
push dword [esp + 0x14]
push dword [esp + 2]
push word [esp + 0x16]
add esp, 0x14
add esp, 9
lea esp, [esp + 3]
jmp 0xdf1543
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
jmp 0xdf0f5a
jl 0xdf0ec9
jge 0xdf0e97
insd dword es:[edi], dx
out dx, al
jl 0xdf1092
test dl, 0x4f
int 0x5d
and al, 0xd7
salc
into
dec ebp
frstor dword [edi + edx*2 - 0x77e563c9]
out dx, eax
sbb dl, byte [0xef8b5544]
push ebp
mov ebp, edi
lea ebp, [ebp + 4]
mov edx, dword [ebp]
pop ebp
mov ebp, dword [esp + 0x28]
cmp ebp, edx
pushfd
pop word [esp]
push word [esp + 1]
mov word [esp + 1], cx
mov dword [esp], edx
mov dword [esp], esp
mov byte [esp + 2], bl
lea esp, [esp + 4]
jb 0xdf105a
add esi, edx
cmp ebp, esi
jae 0xdf105a
mov eax, ebx
sub eax, edx
clc
cmc
sub esp, 0x17
mov word [esp + 0xe], si
clc
push ax
lea esp, [esp + 1]
add eax, ebp
push dx
mov word [esp], si
mov byte [esp], ch
push bp
push dword [esp + 2]
lea esp, [esp + 7]
pushal
push word [esp + 0x20]
lea esp, [esp + 3]
lea esp, [esp + 0x38]
cmp eax, ebx
jb 0xdf105a
sub ecx, dword [esp + 0x10]
sub esp, 0
add ecx, ebx
add ecx, dword [esp + 0x14]
cmc
sub esp, 0x1a
mov byte [esp + 0xb], ah
jmp 0xdf1033
mov dword [esp + 5], ecx
lea esp, [esp + 2]
lea esp, [esp + 0xc]
jmp 0xdf1380
mov byte [esp + 2], ah
push ecx
push dword [esp]
pop word [esp + 2]
jmp 0xdf1326
mov byte [esp + 2], cl
push ax
lea esp, [esp + 2]
xor eax, eax
pushfd
jmp 0xdf1346
pop ebx
push bp
mov di, 0x6320
not edi
mov edi, dword [esp]
mov di, 0x432a
mov di, 0x17d0
mov edi, dword [esp]
lea esp, [esp + 2]
mov edi, dword [esp]
push esi
push dword [esp + 1]
pop dword [esp]
push word [esp]
mov dword [esp], ecx
lea esp, [esp + 2]
lea esp, [esp + 8]
pop esi
mov ebp, dword [esp]
mov ebp, dword [esp]
push cx
push esp
push edx
push word [esp + 2]
mov dword [esp + 3], ebx
mov dword [esp + 7], eax
lea esp, [esp + 0x10]
add esp, 0x14
ret
cmp eax, ecx
lea esp, [esp + 4]
jb 0xdf1380
jae 0xdf105a
bswap esi
lea esp, [esp + 2]
push ebp
mov si, cx
setl ch
setge ch
not ch
jmp 0xdf15b4
xchg si, bp
mov ch, byte [esp]
mov ch, cl
bswap ebp
mov ecx, dword [esp]
not ecx
mov esi, edi
push bp
bswap ebp
push word [esp]
xchg bp, si
jmp 0xdf1885
mov ebp, dword [esp + 4]
mov ecx, 0x3b26553a
mov cx, 0x49b3
setne ch
mov ch, ah
lea ecx, [edi - 0x5d]
not ch
mov esi, dword [esp + 9]
mov ecx, dword [esp]
mov cx, 0x446d
not ecx
bswap ecx
mov cx, word [esp]
push ecx
lea ecx, [edx + edi]
mov ecx, dword [esp + 0x16]
lea esp, [esp + 0x24]
mov dword [eax + 4], 0
mov dword [eax], 0
mov dword [eax + 8], 0x67452301
mov dword [eax + 0xc], 0xefcdab89
mov dword [eax + 0x10], 0x98badcfe
mov dword [eax + 0x14], 0x10325476
ret