Function at 0xdf892
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, dword [ebp + 0x14]
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
xor edi, edi
mov dword [eax], edi
lea eax, [ebp - 0x10]
push eax
push 1
push 0x11
push 0xffffffffffffffff
push edi
push esi
call fcn.000debd9
cmp eax, edi
jne 0xdfccc
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 0x10]
add ecx, eax
xor edx, edx
mov dh, byte [ecx + 0x28]
mov dword [ebp - 0x1c], ecx
mov dl, byte [ecx + 0x29]
cmp dx, word [ebp + 0xc]
ja 0xdfcc2
xor edx, edx
mov dh, byte [ecx + 0x2a]
mov dl, byte [ecx + 0x2b]
cmp dx, word [ebp + 0xc]
jb 0xdfcc2
movzx ebx, byte [ecx + 0xa]
xor edx, edx
mov dh, byte [ecx + 8]
mov dl, byte [ecx + 9]
shl edx, 8
or edx, ebx
movzx ebx, byte [ecx + 0xb]
shl edx, 8
or edx, ebx
movzx ebx, byte [ecx + 2]
mov dword [ebp - 0xc], edx
xor edx, edx
mov dh, byte [ecx]
mov dl, byte [ecx + 1]
movzx ecx, byte [ecx + 3]
shl edx, 8
or edx, ebx
shl edx, 8
or ecx, edx
cmp dword [ebp - 0xc], edi
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], ecx
jbe 0xdfcc2
mov edx, dword [ebp + 0x28]
mov edi, dword [ebp + 0x14]
cmp dword [edi], 0
jne 0xdfcc2
xor ebx, ebx
mov bh, byte [ecx + eax]
mov bl, byte [eax + ecx + 1]
mov esi, ebx
cmp si, word [ebp + 0xc]
mov dword [ebp + 0x10], esi
ja 0xdfcac
xor ebx, ebx
mov bh, byte [eax + ecx + 2]
mov bl, byte [eax + ecx + 3]
cmp bx, word [ebp + 0xc]
jb 0xdfcac
xor ebx, ebx
mov bh, byte [eax + ecx + 4]
movzx edi, byte [eax + ecx + 6]
mov bl, byte [eax + ecx + 5]
movzx ecx, byte [eax + ecx + 7]
shl ebx, 8
or ebx, edi
shl ebx, 8
or ebx, ecx
add ebx, dword [ebp - 0x14]
mov ecx, ebx
xor ebx, ebx
mov bh, byte [eax + ecx + 2]
movzx edi, byte [eax + ecx + 6]
mov bl, byte [eax + ecx + 3]
mov dword [ebp - 0x18], ebx
xor ebx, ebx
mov bh, byte [eax + ecx + 4]
mov bl, byte [eax + ecx + 5]
shl ebx, 8
or ebx, edi
movzx edi, byte [eax + ecx + 7]
shl ebx, 8
or edi, ebx
xor ebx, ebx
mov bh, byte [ecx + eax]
mov dword [ebp - 0x10], edi
mov bl, byte [eax + ecx + 1]
dec ebx
je 0xdfbd4
dec ebx
je 0xdfb83
dec ebx
je 0xdfb51
dec ebx
je 0xdfaa8
dec ebx
jne 0xdfcd3
movzx esi, byte [ecx + eax + 0xa]
xor edx, edx
mov dh, byte [ecx + eax + 8]
mov dl, byte [ecx + eax + 9]
shl edx, 8
or edx, esi
movzx esi, byte [ecx + eax + 0xb]
shl edx, 8
or edx, esi
mov esi, dword [ebp + 0x20]
mov dword [ebp - 0x10], edx
lea edx, [ecx + 0xc]
mov dword [esi], edx
mov edx, dword [ebp + 0x1c]
mov word [edx], 1
mov edx, dword [ebp + 0x18]
mov word [edx], 3
movzx ebx, byte [ecx + eax + 0x16]
xor edx, edx
mov dh, byte [ecx + eax + 0x14]
xor esi, esi
add ecx, 0x18
mov dword [ebp - 8], esi
mov dl, byte [ecx + eax - 3]
shl edx, 8
or edx, ebx
movzx ebx, byte [ecx + eax - 1]
shl edx, 8
or edx, ebx
dec edx
mov dword [ebp + 0x10], edx
xor edx, edx
mov dh, byte [ecx + eax]
mov dl, byte [eax + ecx + 1]
cmp dx, word [ebp + 0xc]
je 0xdfa96
mov esi, dword [ebp + 0x10]
jmp 0xdfa82
jae 0xdfa68
mov dword [ebp - 8], esi
jmp 0xdfa6b
mov dword [ebp + 0x10], esi
mov esi, dword [ebp + 0x10]
mov edx, dword [ebp - 8]
mov ebx, esi
sub ebx, edx
cmp ebx, 2
jb 0xdfcd3
add esi, edx
shr esi, 1
xor ebx, ebx
lea edx, [ecx + esi*2]
mov bh, byte [edx + eax]
mov bl, byte [eax + edx + 1]
mov edx, ebx
cmp dx, word [ebp + 0xc]
jne 0xdfa61
mov ebx, dword [ebp - 0x10]
mov edx, dword [ebp + 0x28]
imul esi, ebx
add edi, esi
mov dword [edx], edi
jmp 0xdfc3a
movzx esi, byte [ecx + eax + 0xa]
xor edx, edx
mov dh, byte [ecx + eax + 8]
and dword [ebp - 8], 0
mov bx, word [ebp + 0xc]
add ecx, 0xc
mov dl, byte [ecx + eax - 3]
shl edx, 8
or edx, esi
movzx esi, byte [ecx + eax - 1]
shl edx, 8
or edx, esi
dec edx
mov dword [ebp + 0x10], edx
xor edx, edx
mov dh, byte [ecx + eax]
mov esi, ecx
mov dl, byte [eax + ecx + 1]
cmp dx, bx
je 0xdfb1f
mov edi, dword [ebp + 0x10]
jmp 0xdfb0b
jae 0xdfaf1
mov dword [ebp - 8], edi
jmp 0xdfaf4
mov dword [ebp + 0x10], edi
mov edi, dword [ebp + 0x10]
mov edx, dword [ebp - 8]
mov esi, edi
sub esi, edx
cmp esi, 2
jb 0xdfcd3
add edi, edx
shr edi, 1
xor edx, edx
lea esi, [ecx + edi*4]
mov dh, byte [esi + eax]
mov dl, byte [eax + esi + 1]
cmp dx, bx
jne 0xdfaea
mov edi, dword [ebp - 0x10]
xor ebx, ebx
mov bh, byte [eax + esi + 2]
mov edx, dword [ebp + 0x28]
mov bl, byte [eax + esi + 3]
mov dword [ebp + 0x10], ebx
xor ebx, ebx
mov bh, byte [eax + esi + 6]
mov bl, byte [eax + esi + 7]
mov esi, dword [ebp + 0x20]
sub ebx, dword [ebp + 0x10]
add edi, dword [ebp + 0x10]
mov dword [esi], edi
mov esi, dword [ebp + 0x1c]
mov word [esi], 2
jmp 0xdfc3a
movzx ebx, word [ebp + 0xc]
movzx esi, si
sub ebx, esi
lea ecx, [ecx + ebx*2 + 8]
xor ebx, ebx
mov bh, byte [ecx + eax]
inc ecx
inc ecx
mov bl, byte [eax + ecx - 1]
mov esi, ebx
xor ebx, ebx
mov bh, byte [ecx + eax]
mov bl, byte [eax + ecx + 1]
sub ebx, esi
je 0xdfcd3
add edi, esi
jmp 0xdfc2d
movzx esi, byte [ecx + eax + 0xa]
xor ebx, ebx
mov bh, byte [ecx + eax + 8]
mov bl, byte [ecx + eax + 9]
shl ebx, 8
or ebx, esi
movzx esi, byte [ecx + eax + 0xb]
shl ebx, 8
or ebx, esi
movzx esi, word [ebp + 0x10]
mov dword [ebp - 0x10], ebx
movzx ebx, word [ebp + 0xc]
sub ebx, esi
mov esi, ebx
mov ebx, dword [ebp - 0x10]
imul esi, ebx
add edi, esi
mov esi, dword [ebp + 0x20]
add ecx, 0xc
mov dword [edx], edi
mov dword [esi], ecx
mov ecx, dword [ebp + 0x1c]
mov word [ecx], 1
mov ecx, dword [ebp + 0x18]
mov word [ecx], 3
jmp 0xdfc3a
movzx ebx, word [ebp + 0xc]
movzx esi, si
sub ebx, esi
lea ecx, [ecx + ebx*4 + 8]
movzx esi, byte [eax + ecx + 2]
xor ebx, ebx
mov bh, byte [ecx + eax]
add ecx, 4
mov bl, byte [eax + ecx - 3]
shl ebx, 8
or ebx, esi
movzx esi, byte [eax + ecx - 1]
shl ebx, 8
or ebx, esi
movzx esi, byte [eax + ecx + 2]
mov dword [ebp + 0x10], ebx
xor ebx, ebx
mov bh, byte [ecx + eax]
mov bl, byte [eax + ecx + 1]
movzx ecx, byte [eax + ecx + 3]
shl ebx, 8
or ebx, esi
shl ebx, 8
or ebx, ecx
sub ebx, dword [ebp + 0x10]
je 0xdfcd3
add edi, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x20]
mov dword [ecx], edi
mov ecx, dword [ebp + 0x1c]
mov word [ecx], 2
mov esi, dword [ebp + 0x2c]
mov ecx, dword [ebp - 4]
mov dword [esi], ebx
mov esi, dword [ebp + 0x24]
mov ebx, dword [ebp - 0x18]
mov word [esi], bx
mov esi, dword [ebp - 0x1c]
movzx esi, byte [esi + 0x2f]
movzx ebx, bx
test ebx, ebx
jle 0xdfcac
cmp ebx, 2
jle 0xdfc8f
cmp ebx, 5
je 0xdfca3
jle 0xdfcac
cmp ebx, 7
jle 0xdfc74
cmp ebx, 8
je 0xdfc81
cmp ebx, 9
jne 0xdfcac
mov esi, dword [ebp + 0x18]
mov word [esi], 3
add edi, 8
jmp 0xdfca1
xor ebx, ebx
cmp esi, 1
setne bl
inc ebx
add edi, 6
jmp 0xdfc9b
xor ebx, ebx
cmp esi, 1
setne bl
inc ebx
add edi, 5
mov esi, dword [ebp + 0x18]
mov word [esi], bx
mov dword [edx], edi
mov esi, dword [ebp + 0x14]
mov dword [esi], 1
dec dword [ebp - 0xc]
mov esi, dword [ebp + 8]
add ecx, 8
cmp dword [ebp - 0xc], 0
mov dword [ebp - 4], ecx
ja 0xdf935
push eax
push dword [esi]
call dword [esi + 8]
pop ecx
pop ecx
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 0x28
push eax
mov eax, dword [ebp + 8]
push dword [eax]
call dword [eax + 8]
jmp 0xdfcc8