Function at 0x414505
Capabilities:
Enumerate pe sections

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x3c
push ebx
mov ebx, dword [ebp + 8]
mov eax, dword [ebx + 0x18]
add ebx, 0x14
push esi
push edi
mov dword [ebp - 0x34], ebx
cmp eax, 0xe
jb 0x41462d
mov edi, dword [ebx]
movzx ecx, byte [edi + 6]
shl cx, 8
movzx esi, cx
movzx ecx, byte [edi + 7]
or esi, ecx
add eax, 0xfffffff2
shr esi, 1
shr eax, 1
mov dword [ebp - 0x3c], esi
cmp eax, esi
jb 0x41462d
push esi
lea eax, [esi + esi + 0x10]
push eax
mov ecx, ebx
add edi, 0xe
call fcn.00410249
mov dword [ebp - 0x30], eax
push esi
lea eax, [esi*4 + 0x10]
push eax
mov ecx, ebx
call fcn.00410249
mov ecx, dword [ebp - 0x34]
mov ebx, eax
mov eax, esi
imul eax, eax, 6
add eax, 0x10
push esi
push eax
mov dword [ebp - 0x38], eax
call fcn.00410249
and dword [ebp - 0x18], 0
and dword [ebp - 0x2c], 0
test esi, esi
je 0x41474c
mov ecx, dword [ebp - 0x30]
or dword [ebp - 0x28], 0xffffffff
sub dword [ebp - 0x28], edi
mov dword [ebp - 0x14], ecx
sub dword [ebp - 0x14], edi
mov dword [ebp - 0x1c], ebx
sub dword [ebp - 0x1c], edi
mov dword [ebp - 0x24], eax
sub dword [ebp - 0x24], edi
mov dword [ebp - 0x10], ecx
sub dword [ebp - 0x10], ebx
mov dword [ebp - 0x20], eax
sub dword [ebp - 0x20], ebx
mov dword [ebp - 0xc], ebx
lea esi, [edi + 1]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
movzx eax, byte [ecx + eax]
movzx ecx, byte [esi]
shl ax, 8
movzx ebx, ax
mov eax, dword [ebp - 0x14]
movzx eax, byte [eax + esi]
or ebx, eax
movzx eax, byte [esi - 1]
shl ax, 8
movzx eax, ax
or eax, ecx
mov ecx, 0xffff
mov dword [ebp - 0x34], ebx
cmp ebx, ecx
jne 0x414600
cmp eax, ecx
je 0x41474c
lea ecx, [ebp - 0x18]
cmp ebx, dword [ebp - 0x18]
jb 0x41460b
lea ecx, [ebp - 0x34]
mov edx, dword [ecx]
lea ecx, [eax + 1]
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x18], ecx
cmp eax, edx
jae 0x414632
call fcn.0040ae51
test al, al
je 0x414736
call dword [fcn.00401200]
call fcn.00410749
sub eax, ebx
inc eax
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x1c]
movzx ecx, byte [eax + esi]
mov eax, dword [ebp - 0xc]
movzx edi, byte [eax]
and dword [ebp - 8], 0
shl di, 8
or cx, di
movzx ecx, cx
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x20]
movzx eax, byte [ecx + eax]
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ecx + esi]
shl ax, 8
movzx eax, ax
or eax, ecx
je 0x4146ca
mov edi, dword [ebp - 0x28]
add edi, esi
add edi, eax
mov eax, dword [ebp + 8]
add edi, dword [ebp - 0x38]
mov ecx, dword [eax + 0x18]
cmp ecx, edi
jb 0x414696
sub ecx, edi
shr ecx, 1
cmp ecx, dword [ebp - 4]
jb 0x414696
mov eax, dword [eax + 0x14]
add eax, edi
mov dword [ebp - 8], eax
jmp 0x4146ca
and dword [ebp - 8], 0
call fcn.0040ae51
test al, al
jne 0x414627
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x18]
cmp edi, ecx
jae 0x4146c3
sub ecx, edi
shr ecx, 1
push ecx
mov dword [ebp - 4], ecx
push edi
lea ecx, [eax + 0x14]
call fcn.00410249
mov dword [ebp - 8], eax
jmp 0x4146c7
and dword [ebp - 4], 0
mov edx, dword [ebp - 0x30]
sub edx, ebx
mov edi, edx
cmp edi, dword [ebp - 4]
jae 0x414736
add ebx, edi
push ebx
call dword [ebp + 0xc]
mov dword [ebp - 0x30], eax
cmp eax, 0xffff
jae 0x41472f
mov eax, dword [ebp - 8]
test eax, eax
je 0x41470c
movzx ecx, byte [eax + edi*2]
movzx eax, byte [eax + edi*2 + 1]
shl cx, 8
or cx, ax
mov eax, dword [ebp - 0x34]
movzx ecx, cx
add eax, ecx
movzx edx, ax
test cx, cx
jne 0x414714
jmp 0x41472f
mov eax, dword [ebp - 0x34]
add eax, ebx
movzx edx, ax
test dx, dx
je 0x41472f
mov ecx, dword [ebp + 8]
mov eax, edx
cmp eax, dword [ecx + 0x20]
jae 0x41472f
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx]
push edx
push dword [ebp - 0x30]
push ebx
call dword [eax]
inc edi
inc ebx
cmp edi, dword [ebp - 4]
jb 0x4146d5
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
add dword [ebp - 0xc], 2
add esi, 2
cmp eax, dword [ebp - 0x3c]
jb 0x4145c2
pop edi
pop esi
pop ebx
leave
ret 0xc