Function at 0x63f4ee
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [ebp + 8]
cmp dword [eax + 0x1d8], 0
je 0x63f95f
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1d8]
mov dword [ebp - 8], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dl, byte [ecx]
mov byte [eax + 0x119], dl
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dl, byte [ecx + 1]
mov byte [eax + 0x11a], dl
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dl, byte [ecx + 2]
mov byte [eax + 0x11b], dl
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dl, byte [ecx + 3]
mov byte [eax + 0x11c], dl
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dl, byte [ecx + 4]
mov byte [eax + 0x11d], dl
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dl, byte [ecx + 5]
mov byte [eax + 0x11e], dl
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dl, byte [ecx + 6]
mov byte [eax + 0x11f], dl
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dx, word [ecx + 8]
mov word [eax + 0x278], dx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dl, byte [ecx + 0xa]
mov byte [eax + 0x27a], dl
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dl, byte [ecx + 0xb]
mov byte [eax + 0x27b], dl
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dl, byte [ecx + 0xc]
mov byte [eax + 0x27c], dl
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x10]
mov dword [eax + 0x280], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x14]
mov dword [eax + 0x284], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dl, byte [ecx + 0x18]
mov byte [eax + 0x288], dl
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x1c]
mov dword [eax + 0x28c], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x20]
mov dword [eax + 0x290], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x24]
mov dword [eax + 0x294], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x28]
mov dword [eax + 0x298], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dx, word [ecx + 0x2c]
mov word [eax + 0x29c], dx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dx, word [ecx + 0x2e]
mov word [eax + 0x29e], dx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dx, word [ecx + 0x30]
mov word [eax + 0x2a0], dx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dl, byte [ecx + 0x32]
mov byte [eax + 0x2a2], dl
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dx, word [ecx + 0x34]
mov word [eax + 0x2a4], dx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dl, byte [ecx + 0x36]
mov byte [eax + 0x2a6], dl
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dl, byte [ecx + 0x37]
mov byte [eax + 0x2a7], dl
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x38]
mov dword [eax + 0x2a8], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x3c]
mov dword [eax + 0x2ac], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dl, byte [ecx + 0x40]
mov byte [eax + 0x2b0], dl
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x44]
mov dword [eax + 0x2b4], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x48]
mov dword [eax + 0x2b8], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x4c]
mov dword [eax + 0x2bc], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x50]
mov dword [eax + 0x2c0], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dl, byte [ecx + 0x37]
mov byte [eax + 0x2c4], dl
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x38]
mov dword [eax + 0x2c8], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x3c]
mov dword [eax + 0x2cc], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov dl, byte [ecx + 0x40]
mov byte [eax + 0x2d0], dl
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x44]
mov dword [eax + 0x2d4], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x48]
mov dword [eax + 0x2d8], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x4c]
mov dword [eax + 0x2dc], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x50]
mov dword [eax + 0x2e0], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x38]
mov dword [eax + 0x2e4], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x54]
mov dword [eax + 0x2f4], edx
push 0x300
mov eax, dword [ebp - 8]
add eax, 0x58
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x2f8
push ecx
call fcn.00669f40
add esp, 0xc
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x358]
mov dword [edx + 0x5f8], ecx
push 0x100
mov edx, dword [ebp - 8]
add edx, 0x35c
push edx
mov eax, dword [ebp + 8]
add eax, 0x5fc
push eax
call fcn.00669f40
add esp, 0xc
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x45c]
mov dword [ecx + 0x6fc], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x460]
mov dword [ecx + 0x700], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x464]
mov dword [ecx + 0x704], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x468]
mov dword [ecx + 0x708], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x46c]
mov dword [ecx + 0x70c], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x470]
mov dword [ecx + 0x710], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x474]
mov dword [ecx + 0x714], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x478]
mov dword [ecx + 0x718], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x47c]
mov dword [ecx + 0x71c], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 8]
mov al, byte [edx + 0x480]
mov byte [ecx + 0x720], al
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x484]
mov dword [ecx + 0x724], eax
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x724], 0
je 0x63f91e
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x724]
push eax
mov ecx, dword [ebp + 8]
call dword [ecx + 0x94]
add esp, 4
mov edx, dword [ebp + 8]
mov dword [edx + 0x728], eax
mov eax, dword [ebp + 8]
cmp dword [eax + 0x728], 0
jne 0x63f8f8
push 0
push 0
push 1
mov ecx, dword [ebp + 8]
push ecx
call fcn.0062991e
add esp, 0x10
mov eax, 1
jmp 0x63fd95
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x724]
push eax
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0x488]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x728]
push ecx
call fcn.00669f40
add esp, 0xc
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 8]
mov cx, word [eax + 0x48c]
mov word [edx + 0x72c], cx
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 8]
mov cx, word [eax + 0x48e]
mov word [edx + 0x72e], cx
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 8]
mov cx, word [eax + 0x490]
mov word [edx + 0x730], cx
jmp 0x63fc59
mov edx, dword [ebp + 8]
mov byte [edx + 0x119], 0
mov eax, dword [ebp + 8]
mov byte [eax + 0x11a], 0
mov ecx, dword [ebp + 8]
mov byte [ecx + 0x11b], 0
mov edx, dword [ebp + 8]
mov byte [edx + 0x11c], 0
mov eax, dword [ebp + 8]
mov byte [eax + 0x11d], 0
mov ecx, dword [ebp + 8]
mov byte [ecx + 0x11e], 0
mov edx, dword [ebp + 8]
mov byte [edx + 0x11f], 0
mov eax, dword [ebp + 8]
mov word [eax + 0x278], 0
mov ecx, dword [ebp + 8]
mov byte [ecx + 0x27a], 0
mov edx, dword [ebp + 8]
mov byte [edx + 0x27b], 0
mov eax, dword [ebp + 8]
mov byte [eax + 0x27c], 0
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x280], 0
mov edx, dword [ebp + 8]
mov dword [edx + 0x284], 0
mov eax, dword [ebp + 8]
mov byte [eax + 0x288], 0
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x28c], 0
mov edx, dword [ebp + 8]
mov dword [edx + 0x290], 0
mov eax, dword [ebp + 8]
mov dword [eax + 0x294], 0
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x298], 0
mov edx, dword [ebp + 8]
movsx eax, byte [edx + 0x134]
test eax, eax
jne 0x63fa79
mov ecx, dword [ebp + 8]
mov word [ecx + 0x29c], 0
mov edx, dword [ebp + 8]
mov word [edx + 0x29e], 0
mov eax, dword [ebp + 8]
mov word [eax + 0x2a0], 0
mov ecx, dword [ebp + 8]
mov byte [ecx + 0x2a2], 0
mov edx, dword [ebp + 8]
mov word [edx + 0x2a4], 0
mov eax, dword [ebp + 8]
mov byte [eax + 0x2a6], 0
mov ecx, dword [ebp + 8]
mov byte [ecx + 0x2a7], 1
mov edx, dword [ebp + 8]
mov dword [edx + 0x2a8], 1
mov eax, dword [ebp + 8]
mov dword [eax + 0x2ac], Ordinal_2
mov ecx, dword [ebp + 8]
mov byte [ecx + 0x2b0], 0
mov edx, dword [ebp + 8]
mov dword [edx + 0x2b4], 0
mov eax, dword [ebp + 8]
mov dword [eax + 0x2b8], 0
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x2bc], 0
mov edx, dword [ebp + 8]
mov dword [edx + 0x2c0], 0
mov eax, dword [ebp + 8]
mov byte [eax + 0x2c4], 1
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x2c8], 1
mov edx, dword [ebp + 8]
mov dword [edx + 0x2cc], Ordinal_2
mov eax, dword [ebp + 8]
mov byte [eax + 0x2d0], 0
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x2d4], 0
mov edx, dword [ebp + 8]
mov dword [edx + 0x2d8], 0
mov eax, dword [ebp + 8]
mov dword [eax + 0x2dc], 0
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x2e0], 0
mov edx, dword [ebp + 8]
mov dword [edx + 0x2e4], 1
mov eax, dword [ebp + 8]
mov dword [eax + 0x2f4], 0
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x5f8], 0
mov edx, dword [ebp + 8]
mov dword [edx + 0x6fc], 0
mov eax, dword [ebp + 8]
mov dword [eax + 0x700], 0
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x704], 0
mov edx, dword [ebp + 8]
mov dword [edx + 0x708], 0
mov eax, dword [ebp + 8]
mov dword [eax + 0x70c], 0
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x710], 0
mov edx, dword [ebp + 8]
mov dword [edx + 0x714], 0
mov eax, dword [ebp + 8]
mov dword [eax + 0x718], 0
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x71c], 0
mov edx, dword [ebp + 8]
mov byte [edx + 0x720], 0
mov eax, dword [ebp + 8]
cmp dword [eax + 0x724], 0
je 0x63fc28
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x728], 0
je 0x63fc28
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x724]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x728]
push edx
mov eax, dword [ebp + 8]
call dword [eax + 0x98]
add esp, 8
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x728], 0
mov edx, dword [ebp + 8]
mov dword [edx + 0x724], 0
mov eax, dword [ebp + 8]
mov word [eax + 0x72c], 0
mov ecx, dword [ebp + 8]
mov word [ecx + 0x72e], 0
mov edx, dword [ebp + 8]
mov word [edx + 0x730], 0
mov eax, dword [ebp + 8]
movsx ecx, byte [eax + 0x134]
test ecx, ecx
jne 0x63fd93
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x24c]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x63fd93
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + 0x1e]
test edx, edx
jne 0x63fd85
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 8]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x10], 0
je 0x63fcb3
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
mov dword [ecx + 8], edx
jmp 0x63fcbf
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x14]
mov dword [eax + 0x24c], ecx
cmp dword [ebp - 0x14], 0
je 0x63fcd0
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov dword [edx + 0xc], eax
jmp 0x63fcdc
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x10]
mov dword [ecx + 0x250], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x40]
movsx edx, byte [ecx + 0x20]
test edx, edx
je 0x63fd44
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x40]
cmp dword [ecx + 0x1c], 2
ja 0x63fd15
push 0
push 0
push 0x3e7
mov edx, dword [ebp + 8]
push edx
call fcn.0062991e
add esp, 0x10
mov eax, 0x3e7
jmp 0x63fd95
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x40]
mov edx, dword [ecx + 0x1c]
sub edx, 1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x40]
mov dword [ecx + 0x1c], edx
cmp dword [ebp - 4], 0
je 0x63fd42
push 0x44
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp + 8]
call dword [eax + 0x98]
add esp, 8
jmp 0x63fd7d
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x40]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0062a43a
add esp, 8
mov dword [ebp - 0xc], eax
cmp dword [ebp - 4], 0
je 0x63fd72
push 0x44
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp + 8]
call dword [edx + 0x98]
add esp, 8
cmp dword [ebp - 0xc], 0
je 0x63fd7d
mov eax, dword [ebp - 0xc]
jmp 0x63fd95
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], eax
jmp 0x63fd8e
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 8]
mov dword [ebp - 4], edx
jmp 0x63fc77
xor eax, eax
mov esp, ebp
pop ebp
ret