Function at 0x4256ba
Capabilities:
Enumerate pe sections

Disassembly:
push 0x30
mov eax, 0x481140
call fcn.0040187a
mov ebx, dword [ebp + 0x10]
mov edi, ecx
xor eax, eax
push 1
push 0x36
push eax
push edi
lea edx, [ebp + 0x10]
lea esi, [ebp - 0x14]
xor ecx, ecx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x18], eax
mov dword [ebp + 0x10], eax
call fcn.00424db9
mov esi, eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], eax
xor ecx, ecx
mov dword [ebp - 4], ecx
cmp esi, ecx
je 0x425716
or dword [ebp - 4], 0xffffffff
cmp eax, ecx
je 0x42570f
push eax
call dword [edi + 8]
mov eax, esi
jmp 0x425b74
push 1
push 0x24
push ecx
mov dword [ebp + 0x10], ecx
xor ecx, ecx
push edi
lea edx, [ebp + 0x10]
lea esi, [ebp - 0x10]
inc ecx
call fcn.00424db9
mov esi, dword [ebp + 0x10]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x34], esi
mov byte [ebp - 4], 1
test eax, eax
je 0x425765
mov byte [ebp - 4], 0
test esi, esi
je 0x42574d
push esi
call dword [edi + 8]
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0
je 0x42575d
push dword [ebp - 0x2c]
call dword [edi + 8]
mov eax, dword [ebp - 0x24]
jmp 0x425b74
mov eax, dword [ebp - 0x14]
movzx ecx, byte [eax + 0xc]
movzx edx, byte [eax + 0xd]
shl ecx, 8
or ecx, edx
movzx edx, byte [eax + 0xe]
shl ecx, 8
or ecx, edx
movzx edx, byte [eax + 0xf]
shl ecx, 8
or ecx, edx
cmp ecx, 0x5f0f3cf5
je 0x4257b5
mov byte [ebp - 4], 0
test esi, esi
je 0x42579b
push esi
call dword [edi + 8]
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0
je 0x4257ab
push dword [ebp - 0x2c]
call dword [edi + 8]
mov eax, 0x1405
jmp 0x425b74
movzx ecx, byte [eax + 0x12]
movzx edx, byte [eax + 0x13]
shl cx, 8
or cx, dx
mov edx, dword [ebp + 8]
mov word [edx], cx
cmp cx, 0x10
jb 0x425b53
mov edx, 0x4000
cmp cx, dx
ja 0x425b53
mov cl, byte [eax + 0x11]
mov edx, dword [ebp + 0xc]
and cl, 8
cmp cl, 8
sete cl
mov byte [edx], cl
mov edx, dword [ebp - 0x10]
movzx ecx, byte [edx + 0x22]
movzx edx, byte [edx + 0x23]
shl cx, 8
or cx, dx
mov word [edi + 0xc4], cx
jne 0x425834
mov byte [ebp - 4], 0
test esi, esi
je 0x42581a
push esi
call dword [edi + 8]
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0
je 0x42582a
push dword [ebp - 0x2c]
call dword [edi + 8]
mov eax, 0x140f
jmp 0x425b74
movzx ecx, byte [eax + 0x32]
movzx eax, byte [eax + 0x33]
shl cx, 8
or cx, ax
xor eax, eax
push eax
push 0x4e
push eax
push edi
push 0xe
mov word [edi + 0xc], cx
lea edx, [ebp + 0x10]
lea esi, [ebp - 0x18]
pop ecx
mov dword [ebp + 0x10], eax
call fcn.00424db9
mov esi, eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 2
test esi, esi
je 0x4258a4
mov byte [ebp - 4], 1
test eax, eax
je 0x42587e
push eax
call dword [edi + 8]
mov byte [ebp - 4], 0
cmp dword [ebp - 0x34], 0
je 0x42588e
push dword [ebp - 0x34]
call dword [edi + 8]
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0
je 0x42570f
push dword [ebp - 0x2c]
jmp 0x42570c
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x4258d5
movzx ecx, byte [eax + 0x44]
movzx edx, byte [eax + 0x45]
shl cx, 8
or cx, dx
mov word [edi + 0xd8], cx
movzx ecx, byte [eax + 0x46]
movzx eax, byte [eax + 0x47]
shl cx, 8
or cx, ax
mov eax, dword [ebp - 0x10]
jmp 0x4258fd
mov eax, dword [ebp - 0x10]
movzx ecx, byte [eax + 4]
movzx edx, byte [eax + 5]
shl cx, 8
or cx, dx
mov word [edi + 0xd8], cx
movzx ecx, byte [eax + 6]
movzx edx, byte [eax + 7]
shl cx, 8
or cx, dx
mov word [edi + 0xda], cx
movzx ecx, byte [eax + 6]
movzx eax, byte [eax + 7]
and dword [ebp + 0x10], 0
push 1
push 0x20
push 0
shl cx, 8
push edi
or cx, ax
push 3
mov word [edi + 0xdc], cx
lea edx, [ebp + 0x10]
lea esi, [ebp - 0x20]
pop ecx
call fcn.00424db9
mov esi, eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 3
test esi, esi
je 0x425968
mov byte [ebp - 4], 2
test eax, eax
je 0x425952
push eax
call dword [edi + 8]
mov byte [ebp - 4], 1
cmp dword [ebp - 0x24], 0
je 0x42587e
push dword [ebp - 0x24]
jmp 0x42587b
mov eax, dword [ebp - 0x20]
movzx ecx, byte [eax]
movzx edx, byte [eax + 1]
shl ecx, 8
or ecx, edx
movzx edx, byte [eax + 2]
shl ecx, 8
or ecx, edx
movzx edx, byte [eax + 3]
shl ecx, 8
or ecx, edx
mov dword [ebx], ecx
movzx ecx, byte [eax + 4]
movzx edx, byte [eax + 5]
shl cx, 8
or cx, dx
mov word [ebx + 4], cx
movzx ecx, byte [eax + 6]
movzx esi, byte [eax + 7]
shl cx, 8
or cx, si
mov word [ebx + 6], cx
movzx ecx, byte [eax + 8]
movzx esi, byte [eax + 9]
shl cx, 8
or cx, si
mov word [ebx + 8], cx
movzx esi, byte [eax + 0xb]
lea ecx, [ebx + 0xa]
mov dword [ebp + 8], ecx
movzx ecx, byte [eax + 0xa]
shl cx, 8
or cx, si
mov esi, dword [ebp + 8]
mov word [esi], cx
movzx ecx, byte [eax + 0xc]
movzx esi, byte [eax + 0xd]
shl cx, 8
or cx, si
mov word [ebx + 0xc], cx
movzx ecx, byte [eax + 0xe]
movzx esi, byte [eax + 0xf]
shl cx, 8
or cx, si
mov word [ebx + 0xe], cx
movzx ecx, byte [eax + 0x10]
movzx esi, byte [eax + 0x11]
shl cx, 8
or cx, si
mov word [ebx + 0x10], cx
movzx ecx, byte [eax + 0x12]
movzx esi, byte [eax + 0x13]
shl cx, 8
or cx, si
mov word [ebx + 0x12], cx
movzx ecx, byte [eax + 0x14]
movzx esi, byte [eax + 0x15]
shl cx, 8
or cx, si
mov word [ebx + 0x14], cx
movzx ecx, byte [eax + 0x16]
movzx esi, byte [eax + 0x17]
shl cx, 8
or cx, si
mov word [ebx + 0x16], cx
movzx ecx, byte [eax + 0x18]
movzx esi, byte [eax + 0x19]
shl cx, 8
or cx, si
mov word [ebx + 0x18], cx
jne 0x425a6d
xor ecx, ecx
inc ecx
mov word [ebx + 0x18], cx
movzx ecx, byte [eax + 0x1a]
movzx esi, byte [eax + 0x1b]
shl cx, 8
or cx, si
mov word [ebx + 0x1a], cx
movzx ecx, byte [eax + 0x1c]
movzx esi, byte [eax + 0x1d]
shl cx, 8
or cx, si
mov word [ebx + 0x1c], cx
movzx ecx, byte [eax + 0x1e]
movzx eax, byte [eax + 0x1f]
shl cx, 8
or cx, ax
mov eax, dword [ebp + 8]
mov word [ebx + 0x1e], cx
mov cx, word [ebx + 6]
cmp cx, word [eax]
jb 0x425ab5
lea eax, [ebx + 6]
mov ecx, 0xfff6
cmp word [eax], cx
jbe 0x425b04
mov byte [ebp - 4], 2
xor esi, esi
cmp dword [ebp - 0x18], esi
je 0x425ad0
push dword [ebp - 0x18]
call dword [edi + 8]
mov byte [ebp - 4], 1
cmp dword [ebp - 0x24], esi
je 0x425adf
push dword [ebp - 0x24]
call dword [edi + 8]
mov byte [ebp - 4], 0
cmp dword [ebp - 0x34], esi
je 0x425aee
push dword [ebp - 0x34]
call dword [edi + 8]
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], esi
je 0x425afd
push dword [ebp - 0x2c]
call dword [edi + 8]
mov eax, 0x140b
jmp 0x425b74
lea eax, [edi + 0xc8]
push eax
lea eax, [edi + 0xc6]
push eax
call fcn.00425f86
mov esi, eax
mov byte [ebp - 4], 2
xor ebx, ebx
cmp dword [ebp - 0x18], ebx
je 0x425b2a
push dword [ebp - 0x18]
call dword [edi + 8]
mov byte [ebp - 4], 1
cmp dword [ebp - 0x24], ebx
je 0x425b39
push dword [ebp - 0x24]
call dword [edi + 8]
mov byte [ebp - 4], bl
cmp dword [ebp - 0x34], ebx
je 0x425b47
push dword [ebp - 0x34]
call dword [edi + 8]
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], ebx
jmp 0x425896
mov byte [ebp - 4], 0
test esi, esi
je 0x425b5f
push esi
call dword [edi + 8]
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0
je 0x425b6f
push dword [ebp - 0x2c]
call dword [edi + 8]
mov eax, 0x140e
call fcn.004015db
ret 0xc