Function at 0x75dd2cd0
Capabilities:
Enumerate pe sections

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x30
and dword [ebp - 0x18], 0
mov ecx, dword [ebp + 8]
push ebx
push esi
push edi
cmp ecx, 0x40f
ja 0x75dd2f35
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x10], edi
test edi, edi
jns 0x75dd2d00
push 0xfffffffffffffff9
pop eax
jmp 0x75dd2f38
cmp ecx, 0x400
jge 0x75dd2d1c
push edi
push dword [ebp + 0xc]
call fcn.75dd2664
push eax
call sym.KERNEL32.dll__hread
jmp 0x75dd2f38
lfence
mov eax, dword [ecx*4 + reloc.ntdll.dll_NtClose]
push eax
mov dword [ebp - 0x30], eax
call dword [0x75e2133c]
mov ebx, eax
mov dword [ebp - 0x20], ebx
test ebx, ebx
jne 0x75dd2d3d
push 0xfffffffffffffffa
jmp 0x75dd2cfa
mov esi, dword [ebx + 0x2c]
mov dword [ebp - 0x24], esi
test esi, esi
jne 0x75dd2d8e
push 0x402
mov ecx, 0x400
call fcn.75e0d459
mov esi, eax
mov dword [ebp - 0x24], esi
mov dword [ebx + 0x2c], esi
test esi, esi
jne 0x75dd2d69
push 0xfffffffffffffffb
jmp 0x75dd2f14
mov ecx, dword [esi + 0x2c]
mov eax, dword [esi + 4]
inc ecx
and dword [esi + 0x1c], 0
add eax, ecx
mov ecx, dword [esi + 0x10]
mov dword [esi + 8], eax
mov dword [esi + 0xc], eax
mov eax, dword [esi + 0x30]
add eax, ecx
mov dword [esi + 0x18], ecx
and dword [esi + 0x28], 0
mov dword [esi + 0x14], eax
mov eax, dword [esi + 0x14]
sub eax, dword [esi + 0x10]
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0x18]
add ecx, dword [esi + 0x28]
mov dword [ebp - 0x28], eax
movzx eax, word [ebx + 6]
mov dword [ebp - 0x2c], ecx
test al, 1
jne 0x75dd2db9
xor edx, edx
inc edx
or eax, edx
mov dword [ebp - 0xc], edx
mov word [ebx + 6], ax
jmp 0x75dd2dcb
cmp dword [ebx + 0x28], ecx
jge 0x75dd2dc7
mov dword [ebp - 0xc], 1
jmp 0x75dd2dcb
and dword [ebp - 0xc], 0
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1c], eax
test edi, edi
jle 0x75dd2f27
push 0x28
pop edx
mov eax, ebx
mov eax, dword [eax + edx]
mov edx, dword [ebx + 8]
mov dword [ebp - 8], edx
cmp eax, edx
jge 0x75dd2f27
mov edx, dword [esi + 0x10]
mov edi, dword [esi + 0x18]
sub edi, edx
mov dword [ebp - 4], edx
mov edx, eax
sub edx, ecx
cmp edx, dword [ebp - 0x28]
jge 0x75dd2e6f
mov ebx, dword [ebp - 4]
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 0x20]
test edx, edx
js 0x75dd2e7e
xor eax, eax
mov dword [ebp - 8], eax
cmp edx, edi
jge 0x75dd2e4b
mov eax, dword [ebp - 0x10]
mov ebx, dword [ebp - 8]
mov ecx, dword [ebp - 0x1c]
test eax, eax
jle 0x75dd2e3c
mov eax, dword [esi + 0x10]
mov al, byte [edx + eax]
mov byte [ecx], al
inc ecx
mov eax, dword [ebp - 0x10]
inc edx
inc ebx
dec eax
mov dword [ebp - 0x10], eax
cmp edx, edi
jl 0x75dd2e22
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x2c]
push 0x28
pop esi
mov edx, ebx
push esi
add dword [edx + esi], eax
mov esi, dword [ebp - 0x24]
pop eax
mov eax, dword [edx + eax]
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 8]
mov dword [ebp - 0x18], edx
mov edx, dword [ebx + 8]
mov dword [ebp - 8], edx
mov edx, dword [esi + 0x10]
jmp 0x75dd2e78
mov edx, dword [ebp - 8]
mov dword [ebp - 8], edx
mov edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x10]
test edx, edx
jle 0x75dd2f27
cmp eax, dword [ebp - 8]
jge 0x75dd2dd9
cmp dword [ebp - 0xc], 0
je 0x75dd2ea3
mov edi, eax
sub edi, dword [esi + 0x20]
jns 0x75dd2eb1
xor edi, edi
jmp 0x75dd2eb1
sub edi, dword [esi + 0x20]
add edi, dword [ebp - 0x28]
add edi, ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 4], ecx
mov ecx, dword [ebp - 8]
add eax, edx
dec ecx
mov edx, eax
cmp eax, ecx
jl 0x75dd2ebf
mov edx, ecx
cmp edi, edx
jl 0x75dd2ecb
mov edi, eax
cmp eax, ecx
jl 0x75dd2ecb
mov edi, ecx
mov eax, dword [ebp - 4]
mov dword [esi + 0x18], eax
cmp byte [ebx + 4], 0x41
jne 0x75dd2f12
push esi
push ecx
push dword [ebp - 0xc]
mov ecx, dword [ebx]
push edi
push 0xfffffffffffffffe
pop edx
call fcn.75e0db3e
mov dword [ebp - 0x2c], eax
test eax, eax
js 0x75dd2f17
mov eax, dword [esi + 0x18]
sub eax, dword [esi + 0x10]
test eax, eax
jle 0x75dd2f0e
mov ecx, dword [esi + 0x28]
sub ecx, eax
mov dword [ebp - 0x2c], ecx
cmp dword [esi + 0x28], edi
jl 0x75dd2f0e
and dword [ebp - 0xc], 0
jmp 0x75dd2dd9
push 0xfffffffffffffffd
jmp 0x75dd2f14
push 0xfffffffffffffff8
pop esi
jmp 0x75dd2f1a
mov esi, dword [ebp - 0x2c]
push dword [ebp - 0x30]
call dword [0x75e21338]
mov eax, esi
jmp 0x75dd2f38
push dword [ebp - 0x30]
call dword [0x75e21338]
mov eax, dword [ebp - 0x18]
jmp 0x75dd2f38
or eax, reloc.ntdll.dll_NtClose
pop edi
pop esi
pop ebx
leave
ret 0xc