Function at 0x418710
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 8
push ebx
push ebp
push esi
xor ebx, ebx
push edi
mov esi, ecx
mov word [0x4b6530], bx
call fcn.0041e250
cmp byte [0x4b60f4], bl
je 0x418741
mov ecx, 3
call fcn.0041dbb0
test al, al
je 0x4189a0
call fcn.0044b2b0
test eax, eax
jne 0x4189a0
cmp dword [0x51d9ac], ebx
jne 0x4189a0
mov ecx, esi
mov byte [esi + 5], 1
call fcn.0041c750
mov ecx, esi
call fcn.00418c30
mov eax, dword [esi + 0x14]
mov edx, dword [esi + 0x18]
cmp byte [eax + 0x2b], bl
sete cl
mov byte [edx + 0x3b], cl
mov al, byte [0x4b60f4]
cmp al, bl
je 0x4187b9
mov eax, dword [esi + 0x14]
cmp byte [eax + 0x2b], bl
jne 0x4187b1
mov eax, dword [esi]
test ah, 2
jne 0x4187aa
cmp byte [0x4b6570], bl
je 0x4187aa
mov ecx, dword [0x4bf19c]
mov eax, dword [0x4bf1a4]
cmp ecx, eax
je 0x4187b1
mov eax, 1
jmp 0x4187b3
xor eax, eax
mov edx, dword [esi + 0x1c]
mov byte [edx + 3], al
mov eax, dword [esi + 0x24]
cmp byte [eax + 0x2b], bl
jne 0x4187d8
test dword [esi], 0xa4008000
jne 0x4187d1
cmp byte [0x4b6570], bl
jne 0x4187d8
mov eax, 1
jmp 0x4187da
xor eax, eax
mov ecx, dword [esi + 0x28]
mov byte [ecx + 3], al
mov ecx, dword [esi + 0x2c]
cmp ecx, ebx
je 0x41880b
mov edx, dword [esi + 0x24]
cmp byte [edx + 0x2b], bl
jne 0x418806
test dword [esi], 0xa4008000
jne 0x4187ff
cmp byte [0x4b6570], bl
jne 0x418806
mov eax, 1
jmp 0x418808
xor eax, eax
mov byte [ecx + 3], al
mov ecx, dword [esi + 0x30]
cmp ecx, ebx
je 0x418836
mov eax, dword [esi + 0x24]
cmp byte [eax + 0x2b], bl
jne 0x418831
test dword [esi], 0xa4008000
jne 0x41882a
cmp byte [0x4b6570], bl
jne 0x418831
mov eax, 1
jmp 0x418833
xor eax, eax
mov byte [ecx + 3], al
cmp byte [esi + 0xc], bl
je 0x418842
mov ecx, esi
call fcn.0041d240
call dword [0x49e644]
test eax, eax
je 0x418853
mov ecx, esi
call fcn.0041dc10
mov ecx, esi
call fcn.0041e4a0
cmp byte [0x4b60f4], bl
je 0x41888a
mov ecx, dword [esi + 0x1c]
call fcn.00438d20
test al, al
je 0x418873
call fcn.00428620
cmp byte [0x4b60f4], bl
je 0x41888a
mov ecx, dword [0x4bf19c]
mov eax, dword [0x4bf1a4]
cmp ecx, eax
jne 0x4188d3
mov edx, dword [0x49e5a4]
mov eax, dword [edx*4 + 0x49cec8]
cmp eax, ebx
je 0x4188a0
test byte [eax], 2
jne 0x4188d3
mov ecx, esi
call fcn.0041e6b0
mov eax, dword [esi]
mov ecx, dword [esi + 0x10]
push eax
call fcn.00417400
mov ecx, dword [esi]
push ecx
mov ecx, dword [esi + 0x14]
call fcn.00417400
mov edx, dword [esi]
mov ecx, dword [esi + 0x20]
push edx
call fcn.00417400
mov eax, dword [esi]
mov ecx, dword [esi + 0x24]
push eax
call fcn.00417400
cmp dword [esi + 0x30], ebx
je 0x418965
mov edx, dword [0x49e5a4]
mov eax, dword [edx*4 + 0x49cec8]
cmp eax, ebx
je 0x4188f2
test byte [eax], 2
jne 0x418965
cmp byte [0x4b60f4], bl
jne 0x41891f
push 0xffffffffffffffff
mov ecx, 0x3e
call dword [0x49e618]
test eax, eax
mov eax, dword [esi + 0x30]
setne cl
cmp byte [eax + 6], cl
je 0x41891f
mov byte [eax + 4], 1
mov byte [eax + 5], 1
mov byte [eax + 6], cl
mov ecx, dword [esi + 0x30]
call fcn.00438d20
test al, al
je 0x418965
cmp byte [0x4b60f4], bl
je 0x418945
mov ecx, dword [0x4bf19c]
call fcn.00424a40
xor edx, edx
mov dl, byte [eax + 6]
jmp 0x41894b
mov edx, dword [0x49e5a4]
push 0xffffffffffffffff
mov ecx, 0x3d
call dword [0x49e618]
cmp byte [0x4b60f4], bl
je 0x418965
call fcn.00428d20
mov ecx, dword [esi + 0x2c]
cmp ecx, ebx
je 0x41897f
call fcn.00438d20
test al, al
je 0x41897f
mov ecx, 5
call fcn.00438db0
mov ecx, dword [esi + 0x28]
call fcn.00438d20
test al, al
je 0x418990
call fcn.0041e8e0
mov ecx, dword [esi]
push ecx
mov ecx, dword [esi + 0x18]
call fcn.00417400
jmp 0x418a3c
cmp byte [esi + 5], bl
je 0x418a3c
test byte [esi], 0x10
je 0x4189c1
mov eax, dword [esi + 0x14]
mov edx, dword [eax + 0x5c]
mov byte [eax + 0x2b], bl
mov dword [eax + 0x54], edx
mov byte [0x495f4d], 1
push ebx
mov ecx, esi
mov dword [esi], ebx
call fcn.00419460
mov ax, word [esi + 0xe]
cmp ax, bx
je 0x4189f9
xor ebp, ebp
cmp ax, bx
je 0x4189f9
lea edi, [esi + 0x150]
mov ecx, edi
mov byte [edi + 0x14], bl
call fcn.00407eb0
xor eax, eax
inc ebp
mov ax, word [esi + 0xe]
add edi, 0x28
cmp ebp, eax
jne 0x4189e1
mov word [esi + 0xe], bx
mov byte [esi + 5], bl
mov dword [0x4b607c], 0
mov dword [0x4b6078], 0
mov dword [0x4b62d8], 0x443d8000
mov dword [0x4b62dc], 0x41c80000
mov dword [0x4b62e0], 0x44370000
mov dword [0x4b62e4], 0x42480000
cmp byte [0x4b6570], bl
jne 0x418a4b
mov ecx, esi
call fcn.0041de30
mov eax, dword [esi]
mov edi, dword [0x4b6568]
mov ebp, dword [0x4b656c]
cmp eax, ebx
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], ebp
jne 0x418ad0
fld dword [0x4b64a0]
fcomp dword [esp + 0x10]
fnstsw ax
test ah, 0x40
je 0x418aaf
fld dword [0x4b64a4]
fcomp dword [esp + 0x14]
fnstsw ax
test ah, 0x40
je 0x418aaf
xor ecx, ecx
call fcn.0041b450
sub eax, dword [0x4b62e8]
cmp eax, 0x1388
jb 0x418ac2
mov byte [0x495f4d], bl
mov dword [0x4b64a0], edi
mov dword [0x4b64a4], ebp
jmp 0x418aea
xor ecx, ecx
mov byte [0x495f4d], 1
call fcn.0041b450
mov dword [0x4b62e8], eax
mov dword [0x4b64a0], edi
mov dword [0x4b64a4], ebp
jmp 0x418aea
test eax, 0x8000010
jne 0x418ade
mov byte [0x495f4d], 1
xor ecx, ecx
call fcn.0041b450
mov dword [0x4b62e8], eax
mov ecx, esi
call fcn.0041c960
cmp byte [0x4b60f4], bl
je 0x418b07
mov ecx, 3
call fcn.0041dbb0
test al, al
je 0x418b1d
cmp byte [esi + 4], bl
je 0x418b1d
cmp byte [0x4b60f4], bl
jne 0x418b25
mov ecx, esi
call fcn.00419650
jmp 0x418b28
cmp byte [0x4b60f4], bl
je 0x418b28
mov byte [esi + 4], bl
mov ecx, 0x49e570
call fcn.00410640
mov ecx, esi
call fcn.0041e930
cmp byte [0x4b60f4], bl
je 0x418b46
call fcn.00428440
cmp byte [0x4b64d7], bl
je 0x418b53
call fcn.0041e8e0
cmp byte [0x4b6572], bl
je 0x418b81
cmp dword [esi], ebx
jne 0x418b81
cmp dword [0x49e7c8], ebx
jne 0x418b81
cmp word [0x5164f8], bx
jne 0x418b81
mov ecx, dword [0x49d720]
mov byte [0x4b6572], bl
call fcn.0040d110
cmp byte [0x4b60f4], bl
je 0x418c25
cmp byte [esi + 0x5cc], bl
je 0x418c25
mov ecx, 3
call fcn.0041b450
mov edx, dword [0x4b64fc]
mov edi, eax
mov ecx, edi
sub ecx, edx
cmp ecx, 0xfa
jb 0x418be5
mov al, byte [0x495b48]
mov ecx, dword [0x51da28]
cmp al, bl
mov dword [0x4b64fc], edi
sete dl
mov byte [0x495b48], dl
mov eax, dword [0x495b48]
and eax, 0xff
push eax
push ecx
call dword [sym.imp.USER32.dll_FlashWindow]
sub edi, dword [esi + 0x5d0]
cmp edi, 0x4e20
jb 0x418c25
mov edx, dword [0x51da28]
push edx
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x418c12
mov eax, dword [0x51da28]
push 9
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [0x51da28]
push ecx
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov byte [esi + 0x5cc], bl
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret