Function at 0x403ac0
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x3c
mov esi, dword [esp + 0x50]
mov eax, dword [esi + 0x3c]
add eax, esi
mov esi, eax
mov dword [esp + 0x24], eax
xor eax, eax
cmp word [esi + 0x18], 0x10b
je 0x403af0
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
ret
movzx eax, word [esi + 0x14]
mov ecx, dword [esi + 0x78]
lea ebp, [esi + eax + 0x18]
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x1c], eax
cmp ecx, eax
jb 0x403d30
movzx esi, word [esi + 6]
test si, si
je 0x403e2d
movzx eax, si
lea eax, [eax + eax*4]
lea ebx, [ebp + eax*8]
mov eax, ebp
lea esi, [esi]
nop
mov edx, dword [eax + 0xc]
cmp ecx, edx
jb 0x403b3c
mov edi, dword [eax + 0x10]
add edi, edx
cmp ecx, edi
jb 0x403dfd
add eax, 0x28
cmp ebx, eax
jne 0x403b28
mov edi, dword [esp + 0x50]
mov eax, dword [edi + 0x20]
mov ebx, dword [esp + 0x1c]
cmp eax, ebx
jb 0x403d5a
movzx edx, si
mov dword [esp + 0x20], edi
lea edx, [edx + edx*4]
lea ebx, [ebp + edx*8]
mov edx, ebp
lea esi, [esi]
lea esi, [esi]
mov ecx, dword [edx + 0xc]
cmp eax, ecx
jb 0x403b84
mov edi, dword [edx + 0x10]
add edi, ecx
cmp eax, edi
jb 0x403e0d
add edx, 0x28
cmp ebx, edx
jne 0x403b70
mov eax, dword [esp + 0x50]
mov edi, dword [esp + 0x20]
mov dword [esp + 0x20], eax
mov ecx, dword [edi + 0x1c]
mov eax, dword [esp + 0x1c]
cmp ecx, eax
jb 0x403da0
movzx eax, si
mov dword [esp + 0x28], edi
lea eax, [eax + eax*4]
lea ebx, [ebp + eax*8]
mov eax, ebp
lea esi, [esi]
lea esi, [esi]
mov edx, dword [eax + 0xc]
cmp ecx, edx
jb 0x403bd4
mov edi, dword [eax + 0x10]
add edi, edx
cmp ecx, edi
jb 0x403dd9
add eax, 0x28
cmp ebx, eax
jne 0x403bc0
mov eax, dword [esp + 0x50]
mov edi, dword [esp + 0x28]
mov dword [esp + 0x2c], eax
mov ebx, dword [edi + 0x24]
mov eax, dword [esp + 0x1c]
cmp ebx, eax
jb 0x403d27
movzx eax, si
lea eax, [eax + eax*4]
lea ecx, [ebp + eax*8]
mov eax, ebp
lea esi, [esi]
mov edx, dword [eax + 0xc]
cmp ebx, edx
jb 0x403c1c
mov esi, dword [eax + 0x10]
add esi, edx
cmp ebx, esi
jb 0x403def
add eax, 0x28
cmp ecx, eax
jne 0x403c08
mov ebx, dword [esp + 0x50]
mov eax, dword [edi + 0x18]
lea edi, [eax - 1]
test eax, eax
je 0x403ae0
mov esi, dword [esp + 0x20]
mov dword [esp + 0x28], ebp
mov ebp, ebx
nop
mov ecx, dword [esi]
mov eax, dword [esp + 0x50]
mov ebx, dword [esp + 0x1c]
add eax, ecx
cmp ecx, ebx
jb 0x403c97
mov eax, dword [esp + 0x24]
movzx eax, word [eax + 6]
test ax, ax
je 0x403dd0
mov edx, dword [esp + 0x28]
mov dword [esp + 0x20], edi
lea eax, [eax + eax*4]
lea ebx, [edx + eax*8]
mov eax, edx
lea esi, [esi]
mov edx, dword [eax + 0xc]
cmp ecx, edx
jb 0x403c88
mov edi, dword [eax + 0x10]
add edi, edx
cmp ecx, edi
jb 0x403cc0
add eax, 0x28
cmp ebx, eax
jne 0x403c78
mov edi, dword [esp + 0x20]
mov eax, dword [esp + 0x50]
mov dword [esp + 4], str.ReflectiveLoader
mov dword [esp], eax
call sub.msvcrt.dll_strstr
test eax, eax
jne 0x403cd1
add esi, 4
add ebp, 2
sub edi, 1
jae 0x403c40
xor eax, eax
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
ret
add ecx, dword [esp + 0x50]
add ecx, dword [eax + 0x14]
mov eax, ecx
mov edi, dword [esp + 0x20]
sub eax, edx
jmp 0x403c97
mov ebx, ebp
mov esi, dword [esp + 0x2c]
mov ebp, dword [esp + 0x28]
movzx eax, word [ebx]
mov eax, dword [esi + eax*4]
mov esi, dword [esp + 0x1c]
cmp eax, esi
jb 0x403ae0
mov esi, dword [esp + 0x24]
movzx edx, word [esi + 6]
test dx, dx
je 0x403cb6
lea edx, [edx + edx*4]
lea ecx, [ebp + edx*8]
lea esi, [esi]
mov edx, dword [ebp + 0xc]
cmp eax, edx
jb 0x403d1c
mov ebx, dword [ebp + 0x10]
add ebx, edx
cmp eax, ebx
jb 0x403e23
add ebp, 0x28
cmp ecx, ebp
jne 0x403d08
xor eax, eax
jmp 0x403cb8
add ebx, dword [esp + 0x50]
jmp 0x403c27
add ecx, dword [esp + 0x50]
mov esi, eax
mov edi, ecx
mov eax, dword [edi + 0x20]
cmp eax, esi
jb 0x403d5a
mov esi, dword [esp + 0x24]
movzx esi, word [esi + 6]
test si, si
jne 0x403b56
mov eax, dword [esp + 0x50]
mov dword [esp + 0x20], eax
jmp 0x403d62
add eax, dword [esp + 0x50]
mov dword [esp + 0x20], eax
mov ecx, dword [edi + 0x1c]
mov eax, dword [esp + 0x1c]
cmp ecx, eax
jb 0x403da0
mov eax, dword [esp + 0x24]
movzx esi, word [eax + 6]
test si, si
jne 0x403ba6
mov eax, dword [esp + 0x1c]
mov ebx, dword [edi + 0x24]
cmp ebx, eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x2c], eax
jb 0x403d27
mov ebx, eax
jmp 0x403c27
mov ebx, dword [edi + 0x24]
mov eax, dword [esp + 0x1c]
add ecx, dword [esp + 0x50]
mov dword [esp + 0x2c], ecx
cmp ebx, eax
jb 0x403d27
mov eax, dword [esp + 0x24]
movzx eax, word [eax + 6]
test ax, ax
jne 0x403bf9
jmp 0x403c23
mov eax, dword [esp + 0x50]
jmp 0x403c97
add ecx, dword [esp + 0x50]
add ecx, dword [eax + 0x14]
sub ecx, edx
mov edi, dword [esp + 0x28]
mov dword [esp + 0x2c], ecx
jmp 0x403be7
add ebx, dword [esp + 0x50]
add ebx, dword [eax + 0x14]
sub ebx, edx
jmp 0x403c27
add ecx, dword [esp + 0x50]
add ecx, dword [eax + 0x14]
sub ecx, edx
mov edi, ecx
jmp 0x403b47
add eax, dword [esp + 0x50]
add eax, dword [edx + 0x14]
sub eax, ecx
mov edi, dword [esp + 0x20]
mov dword [esp + 0x20], eax
jmp 0x403b97
add eax, dword [ebp + 0x14]
sub eax, edx
jmp 0x403ae0
mov edi, dword [esp + 0x50]
mov esi, eax
jmp 0x403d38