Function at 0x410789
Capabilities:
Enumerate pe sections

Disassembly:
push 0x30
mov eax, 0x484b00
call fcn.00401298
mov ebx, dword [ebp + 0x10]
mov edi, ecx
xor eax, eax
push 1
push 0x36
push eax
push edi
lea edx, [ebp + 0x10]
lea esi, [ebp - 0x14]
xor ecx, ecx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x18], eax
mov dword [ebp + 0x10], eax
call fcn.0040a3be
mov esi, eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], eax
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp esi, ecx
jne 0x42d276
push 1
push 0x24
push ecx
mov dword [ebp + 0x10], ecx
xor ecx, ecx
push edi
lea edx, [ebp + 0x10]
lea esi, [ebp - 0x10]
inc ecx
call fcn.0040a3be
mov esi, dword [ebp + 0x10]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x34], esi
mov byte [ebp - 4], 1
test eax, eax
jne 0x42d288
mov eax, dword [ebp - 0x14]
movzx ecx, byte [eax + 0xc]
movzx edx, byte [eax + 0xd]
shl ecx, 8
or ecx, edx
movzx edx, byte [eax + 0xe]
shl ecx, 8
or ecx, edx
movzx edx, byte [eax + 0xf]
shl ecx, 8
or ecx, edx
cmp ecx, 0x5f0f3cf5
jne 0x42d2ac
movzx ecx, byte [eax + 0x12]
movzx edx, byte [eax + 0x13]
shl cx, 8
or cx, dx
mov edx, dword [ebp + 8]
mov word [edx], cx
cmp cx, 0x10
jb 0x410b06
mov edx, 0x4000
cmp cx, dx
ja 0x410b06
mov cl, byte [eax + 0x11]
mov edx, dword [ebp + 0xc]
and cl, 8
cmp cl, 8
sete cl
mov byte [edx], cl
mov edx, dword [ebp - 0x10]
movzx ecx, byte [edx + 0x22]
movzx edx, byte [edx + 0x23]
shl cx, 8
or cx, dx
mov word [edi + 0xc4], cx
je 0x42d2d2
movzx ecx, byte [eax + 0x32]
movzx eax, byte [eax + 0x33]
shl cx, 8
or cx, ax
xor eax, eax
push eax
push 0x4e
push eax
push edi
push 0xe
mov word [edi + 0xc], cx
lea edx, [ebp + 0x10]
lea esi, [ebp - 0x18]
pop ecx
mov dword [ebp + 0x10], eax
call fcn.0040a3be
mov esi, eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 2
test esi, esi
jne 0x42d2f8
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x42d321
movzx ecx, byte [eax + 0x44]
movzx edx, byte [eax + 0x45]
shl cx, 8
or cx, dx
mov word [edi + 0xd8], cx
movzx ecx, byte [eax + 0x46]
movzx eax, byte [eax + 0x47]
shl cx, 8
or cx, ax
mov eax, dword [ebp - 0x10]
mov word [edi + 0xda], cx
movzx ecx, byte [eax + 6]
movzx eax, byte [eax + 7]
and dword [ebp + 0x10], 0
push 1
push 0x20
push 0
shl cx, 8
push edi
or cx, ax
push 3
mov word [edi + 0xdc], cx
lea edx, [ebp + 0x10]
lea esi, [ebp - 0x20]
pop ecx
call fcn.0040a3be
mov esi, eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 3
test esi, esi
jne 0x42d34e
mov eax, dword [ebp - 0x20]
movzx ecx, byte [eax]
movzx edx, byte [eax + 1]
shl ecx, 8
or ecx, edx
movzx edx, byte [eax + 2]
shl ecx, 8
or ecx, edx
movzx edx, byte [eax + 3]
shl ecx, 8
or ecx, edx
mov dword [ebx], ecx
movzx ecx, byte [eax + 4]
movzx edx, byte [eax + 5]
shl cx, 8
or cx, dx
mov word [ebx + 4], cx
movzx ecx, byte [eax + 6]
movzx esi, byte [eax + 7]
shl cx, 8
or cx, si
mov word [ebx + 6], cx
movzx ecx, byte [eax + 8]
movzx esi, byte [eax + 9]
shl cx, 8
or cx, si
mov word [ebx + 8], cx
movzx esi, byte [eax + 0xb]
lea ecx, [ebx + 0xa]
mov dword [ebp + 8], ecx
movzx ecx, byte [eax + 0xa]
shl cx, 8
or cx, si
mov esi, dword [ebp + 8]
mov word [esi], cx
movzx ecx, byte [eax + 0xc]
movzx esi, byte [eax + 0xd]
shl cx, 8
or cx, si
mov word [ebx + 0xc], cx
movzx ecx, byte [eax + 0xe]
movzx esi, byte [eax + 0xf]
shl cx, 8
or cx, si
mov word [ebx + 0xe], cx
movzx ecx, byte [eax + 0x10]
movzx esi, byte [eax + 0x11]
shl cx, 8
or cx, si
mov word [ebx + 0x10], cx
movzx ecx, byte [eax + 0x12]
movzx esi, byte [eax + 0x13]
shl cx, 8
or cx, si
mov word [ebx + 0x12], cx
movzx ecx, byte [eax + 0x14]
movzx esi, byte [eax + 0x15]
shl cx, 8
or cx, si
mov word [ebx + 0x14], cx
movzx ecx, byte [eax + 0x16]
movzx esi, byte [eax + 0x17]
shl cx, 8
or cx, si
mov word [ebx + 0x16], cx
movzx ecx, byte [eax + 0x18]
movzx esi, byte [eax + 0x19]
shl cx, 8
or cx, si
mov word [ebx + 0x18], cx
je 0x42d369
movzx ecx, byte [eax + 0x1a]
movzx esi, byte [eax + 0x1b]
shl cx, 8
or cx, si
mov word [ebx + 0x1a], cx
movzx ecx, byte [eax + 0x1c]
movzx esi, byte [eax + 0x1d]
shl cx, 8
or cx, si
mov word [ebx + 0x1c], cx
movzx ecx, byte [eax + 0x1e]
movzx eax, byte [eax + 0x1f]
shl cx, 8
or cx, ax
mov eax, dword [ebp + 8]
mov word [ebx + 0x1e], cx
mov cx, word [ebx + 6]
cmp cx, word [eax]
jb 0x410a9c
lea eax, [ebx + 6]
mov ecx, 0xfff6
cmp word [eax], cx
ja 0x42d375
lea eax, [edi + 0xc8]
push eax
lea eax, [edi + 0xc6]
push eax
call fcn.00410726
mov esi, eax
mov byte [ebp - 4], 2
xor ebx, ebx
cmp dword [ebp - 0x18], ebx
je 0x410ad0
push dword [ebp - 0x18]
call dword [edi + 8]
mov byte [ebp - 4], 1
cmp dword [ebp - 0x24], ebx
je 0x410adf
push dword [ebp - 0x24]
call dword [edi + 8]
mov byte [ebp - 4], bl
cmp dword [ebp - 0x34], ebx
je 0x410aed
push dword [ebp - 0x34]
call dword [edi + 8]
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], ebx
je 0x410afc
push dword [ebp - 0x2c]
call dword [edi + 8]
mov eax, esi
call fcn.00401410
ret 0xc
mov byte [ebp - 4], 0
test esi, esi
jne 0x42d3bd
jmp 0x42d3c1
or dword [ebp - 4], 0xffffffff
cmp eax, ecx
je 0x410afc
push eax
jmp 0x410af9
mov byte [ebp - 4], 0
test esi, esi
je 0x42d294
push esi
call dword [edi + 8]
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0
je 0x42d2a4
push dword [ebp - 0x2c]
call dword [edi + 8]
mov eax, dword [ebp - 0x24]
jmp 0x410afe
mov byte [ebp - 4], 0
test esi, esi
je 0x42d2b8
push esi
call dword [edi + 8]
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0
je 0x42d2c8
push dword [ebp - 0x2c]
call dword [edi + 8]
mov eax, 0x1405
jmp 0x410afe
mov byte [ebp - 4], 0
test esi, esi
je 0x42d2de
push esi
call dword [edi + 8]
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0
je 0x42d2ee
push dword [ebp - 0x2c]
call dword [edi + 8]
mov eax, 0x140f
jmp 0x410afe
mov byte [ebp - 4], 1
test eax, eax
je 0x42d304
push eax
call dword [edi + 8]
mov byte [ebp - 4], 0
cmp dword [ebp - 0x34], 0
je 0x42d314
push dword [ebp - 0x34]
call dword [edi + 8]
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0
jmp 0x410af4
mov eax, dword [ebp - 0x10]
movzx ecx, byte [eax + 4]
movzx edx, byte [eax + 5]
shl cx, 8
or cx, dx
mov word [edi + 0xd8], cx
movzx ecx, byte [eax + 6]
movzx edx, byte [eax + 7]
shl cx, 8
or cx, dx
jmp 0x410905
mov byte [ebp - 4], 2
test eax, eax
je 0x42d35a
push eax
call dword [edi + 8]
mov byte [ebp - 4], 1
cmp dword [ebp - 0x24], 0
je 0x42d304
push dword [ebp - 0x24]
jmp 0x42d301
xor ecx, ecx
inc ecx
mov word [ebx + 0x18], cx
jmp 0x410a54
mov byte [ebp - 4], 2
xor esi, esi
cmp dword [ebp - 0x18], esi
je 0x42d386
push dword [ebp - 0x18]
call dword [edi + 8]
mov byte [ebp - 4], 1
cmp dword [ebp - 0x24], esi
je 0x42d395
push dword [ebp - 0x24]
call dword [edi + 8]
mov byte [ebp - 4], 0
cmp dword [ebp - 0x34], esi
je 0x42d3a4
push dword [ebp - 0x34]
call dword [edi + 8]
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], esi
je 0x42d3b3
push dword [ebp - 0x2c]
call dword [edi + 8]
mov eax, 0x140b
jmp 0x410afe
push esi
call dword [edi + 8]
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0
je 0x42d3d1
push dword [ebp - 0x2c]
call dword [edi + 8]
mov eax, 0x140e
jmp 0x410afe