Function at 0x415400
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword [0x51eabc]
push 1
push 0
push 0xffffffffffffffff
push 0x5068e4
call fcn.004b3e10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, ax
mov dword [esp + 0x28], eax
test ax, ax
jne 0x41546e
push 0
push dword [ebp + 0x10]
mov ecx, 0x520c68
push esi
call fcn.004331c0
mov dword [ebp + 0xc], eax
test eax, eax
jne 0x41546e
movzx ecx, word [esi]
test cx, cx
jne 0x415440
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x41546e
cmp byte [eax + 0x17], cl
jne 0x41543a
mov eax, dword [eax + 0xc]
test byte [eax + 0x15], 2
je 0x41546e
cmp byte [esp + 0x1c], 0
jne 0x415296
test cx, cx
mov edx, 0x506ba8
mov eax, 0x506b68
mov ecx, 0x520c68
push esi
cmove eax, edx
push eax
call fcn.0044ddc0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [esp + 0x13]
mov ecx, edi
push eax
lea edx, [esp + 0x28]
call fcn.00416bc0
mov edi, eax
add esp, 4
test edi, edi
je 0x41549f
mov esi, dword [edi + 0x20]
test esi, esi
je 0x41549f
mov eax, dword [reloc.KERNEL32.dll_GetCurrentThread]
cmp dword [esi + 4], eax
je 0x4154a1
mov esi, dword [esi + 8]
test esi, esi
jne 0x415493
xor esi, esi
mov eax, dword [esp + 0x28]
xor dl, dl
movzx ecx, ax
mov dword [esp + 0x14], edx
mov byte [esp + 0x12], dl
mov dword [esp + 0x28], 1
sub ecx, 1
je 0x415672
sub ecx, 1
je 0x415672
sub ecx, 1
je 0x415672
test edi, edi
jne 0x41552a
test ax, ax
je 0x4154e4
mov edx, eax
xor ecx, ecx
jmp 0x4154f3
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x415676
xor edx, edx
mov ecx, eax
push dword [esp + 0x1c]
push dword [esp + 0x28]
push dword [esp + 0x28]
call fcn.00415ad0
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x415519
movzx eax, byte [esp + 0x1c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [edi + 0x24]
mov edx, 1
mov byte [esp + 0x12], dl
jmp 0x415776
cmp word [edi + 6], ax
je 0x41554f
mov word [edi + 6], ax
test ax, ax
jne 0x41553f
mov byte [edi + 0x19], 1
jmp 0x415549
cmp byte [edi + 0x12], 0
jne 0x415549
mov byte [edi + 0x14], 1
mov dl, 1
mov dword [esp + 0x14], edx
mov ecx, dword [ebp + 0xc]
test ecx, ecx
je 0x415629
test esi, esi
je 0x4155c0
cmp ecx, dword [esi]
je 0x415631
cmp byte [esi + 0x1c], 0
je 0x4155a3
cmp byte [0x51eb5c], 0
je 0x4155a3
mov dword [esp + 0x2c], ecx
mov ecx, esi
call fcn.0049f3c0
lea ecx, [esp + 0x2c]
mov bl, al
call fcn.0049f3c0
mov ecx, dword [esp + 0x14]
cmp al, bl
mov ebx, dword [ebp + 8]
movzx ecx, cl
cmovne ecx, dword [esp + 0x28]
mov dword [esp + 0x14], ecx
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
mov ecx, dword [esi]
test ecx, ecx
je 0x4155b5
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp + 0xc]
mov edx, dword [esp + 0x14]
mov dword [esi], eax
jmp 0x415631
push dword [esp + 0x24]
push ecx
mov ecx, edi
call fcn.004162d0
mov esi, eax
test esi, esi
jne 0x41560e
cmp byte [esp + 0x1c], al
je 0x4155f4
mov ecx, dword [0x51eabc]
push 1
push eax
push 0xffffffffffffffff
push 0x506c88
call fcn.004b3e10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push dword [esp + 0x20]
mov ecx, 0x520c68
push 0x504378
call fcn.0044ddc0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [0x51eb5f], 0
mov edx, 1
mov byte [esp + 0x12], 1
mov dword [esp + 0x14], edx
je 0x415631
mov ch, dl
jmp 0x415635
test esi, esi
je 0x41577e
mov ch, byte [esp + 0x13]
mov eax, dword [esp + 0x24]
test al, al
mov byte [esi + 0x19], al
mov cl, byte [edi + 0x13]
sete al
lea eax, [eax*2 + 2]
or al, cl
cmp byte [edi + 0x14], 0
mov byte [edi + 0x13], al
jne 0x41577a
test ch, ch
jne 0x415668
cmp byte [esp + 0x24], ch
je 0x41577a
mov dl, 1
mov byte [edi + 0x14], dl
jmp 0x415776
test edi, edi
jne 0x4156b4
cmp byte [esp + 0x1c], 0
je 0x41569a
mov ecx, dword [0x51eabc]
push 1
push 0
push 0xffffffffffffffff
push 0x506c0c
call fcn.004b3e10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push dword [esp + 0x20]
mov ecx, 0x520c68
push 0x506c10
call fcn.0044ddc0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test esi, esi
jne 0x4156fc
cmp word [edi + 6], si
jne 0x4156fc
cmp byte [esp + 0x1c], 0
je 0x4156e2
mov ecx, dword [0x51eabc]
push 1
push 0
push 0xffffffffffffffff
push str.uuuuuuuubtnufruuuuuuuuuuuuuuuuuu
call fcn.004b3e10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push dword [esp + 0x20]
mov ecx, 0x520c68
push 0x506c40
call fcn.0044ddc0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp ax, 3
jne 0x415719
xor eax, eax
cmp word [edi + 6], ax
je 0x41570f
cmp byte [edi + 0x19], al
jmp 0x415712
cmp byte [esi + 0x1c], al
setne al
inc eax
movzx eax, ax
movzx ecx, word [edi + 6]
cmp ax, 1
jne 0x415754
test cx, cx
je 0x41573e
cmp byte [edi + 0x19], 0
je 0x415734
xor al, al
mov dl, al
jmp 0x415776
mov al, 1
mov byte [edi + 0x19], 1
mov dl, al
jmp 0x415776
cmp byte [esi + 0x1c], 0
je 0x41574a
xor al, al
mov dl, al
jmp 0x415776
mov al, 1
mov byte [esi + 0x1c], 1
mov dl, al
jmp 0x415776
test cx, cx
je 0x415765
cmp byte [edi + 0x19], 0
je 0x41577a
mov byte [edi + 0x19], 0
jmp 0x415771
cmp byte [esi + 0x1c], 0
je 0x41577a
mov word [esi + 0x1b], 0
mov edx, 1
mov dword [esp + 0x14], edx
test esi, esi
jne 0x415789
cmp word [edi + 6], 0
je 0x4156be
movzx eax, word [ebx]
test ax, ax
je 0x415901
mov ecx, eax
nop word [eax + eax]
movzx ebx, cx
test ebx, 0xffffff80
jne 0x4157bd
push 2
push ebx
call fcn.004d4154
add esp, 8
test eax, eax
je 0x4157bd
and ebx, 0xffffffdf
add ebx, 0xffffffbe
cmp ebx, 0x13
ja case.0x4157d0.67
movzx eax, byte [ebx + 0x415ab4]
jmp dword [eax*4 + 0x415a98]
mov eax, dword [esp + 0x18]
add eax, 2
mov dword [esp + 0x2c], eax
movzx ebx, word [eax]
test ebx, 0xffffff80
jne 0x4157ff
push 2
push ebx
call fcn.004d4154
add esp, 8
test eax, eax
je 0x4157ff
and ebx, 0xffffffdf
cmp bx, 0x4e
jne 0x415848
cmp word [edi + 6], 0
mov eax, dword [esp + 0x2c]
je 0x41582c
cmp byte [edi + 0x19], 0
jne 0x4158e8
mov edx, 1
mov byte [edi + 0x19], 1
mov dword [esp + 0x14], edx
jmp 0x4158ec
cmp byte [esi + 0x1c], 0
jne 0x4158e8
mov edx, 1
mov byte [esi + 0x1c], 1
mov dword [esp + 0x14], edx
jmp 0x4158ec
push 3
push 0x5068e8
push dword [esp + 0x20]
call fcn.004cff45
add esp, 0xc
test eax, eax
mov eax, dword [esp + 0x18]
jne 0x4158e8
add eax, 4
cmp word [edi + 6], 0
je 0x415886
cmp byte [edi + 0x19], 0
je 0x41589d
mov edx, 1
mov byte [edi + 0x19], 0
mov dword [esp + 0x14], edx
jmp 0x4158a1
cmp byte [esi + 0x1c], 0
je 0x41589d
mov edx, 1
mov word [esi + 0x1b], 0
mov dword [esp + 0x14], edx
jmp 0x4158a1
mov edx, dword [esp + 0x14]
cmp byte [esp + 0x12], 0
je 0x4158ec
xor dl, dl
mov dword [esp + 0x14], edx
jmp 0x4158ec
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
test esi, esi
je 0x4158ec
cmp word [eax + 2], 0x30
setne al
mov byte [esi + 0x1a], al
mov eax, dword [esp + 0x18]
jmp 0x4158ec
mov eax, dword [esp + 0x18]
test esi, esi
je 0x4158e8
add eax, 2
push eax
call fcn.004cfe02
add esp, 4
mov dword [esi + 0x10], eax
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
add eax, 2
mov dword [esp + 0x18], eax
movzx eax, word [eax]
mov ecx, eax
test ax, ax
jne 0x4157a0
test dl, dl
je 0x41590a
call fcn.004146f0
cmp byte [esp + 0x1c], 0
je 0x415a6c
mov ecx, dword [0x51eabc]
push 1
push 0
push 0xffffffffffffffff
push 0x4f04b0
call fcn.004b3e10
cmp byte [edi + 0x12], 0
jne 0x415a6c
cmp byte [edi + 0x18], 0
jne 0x415a6c
cmp byte [0x51eb5c], 0
je 0x415a49
cmp word [edi + 6], 0
jne 0x415a6c
mov esi, dword [edi + 0x20]
test esi, esi
je 0x415a6c
mov ecx, esi
call fcn.0049f3c0
test al, al
jne 0x415a49
invalid
mov esi, dword [esi + 8]
test esi, esi
jne 0x415962
mov eax, dword [esp + 0x28]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x18]
test esi, esi
je 0x4158e8
add eax, 2
push eax
call fcn.004cfe02
mov edx, dword [0x51b988]
add esp, 4
movzx ecx, al
mov byte [esi + 0x17], al
cmp ecx, edx
jle 0x4159b3
mov byte [esi + 0x17], dl
jmp case.0x4157d0.67
mov edx, dword [esp + 0x14]
cmp al, 1
mov eax, dword [esp + 0x18]
jae 0x4158ec
mov byte [esi + 0x17], 1
jmp 0x4158ec
push 0x5068b4
push dword [esp + 0x1c]
call fcn.004ce516
mov edx, dword [esp + 0x1c]
add esp, 8
test eax, eax
mov eax, dword [esp + 0x18]
jne 0x4158ec
add eax, 0x18
jmp 0x4158ec
mov eax, dword [esp + 0x18]
test esi, esi
je 0x4158e8
add eax, 2
push eax
call fcn.004cfe02
add esp, 4
cmp eax, 0x64
ja case.0x4157d0.67
test eax, eax
je 0x415a39
cmp byte [edi + 0x14], 0
jne 0x415a39
mov byte [edi + 0x14], 1
mov edx, 1
mov byte [esi + 0x18], al
mov eax, dword [esp + 0x18]
mov dword [esp + 0x14], edx
jmp 0x4158ec
mov edx, dword [esp + 0x14]
mov byte [esi + 0x18], al
mov eax, dword [esp + 0x18]
jmp 0x4158ec
cmp word [edi + 6], 0
je 0x415a77
cmp byte [edi + 0x19], 0
je 0x415a6c
mov ecx, dword [0x51eabc]
push 1
push 0
push 0xffffffffffffffff
push 0x506c90
call fcn.004b3e10
mov eax, dword [esp + 0x28]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [edi + 0x20]
test eax, eax
je 0x415a6c
nop
cmp byte [eax + 0x1c], 0
jne 0x415a56
mov eax, dword [eax + 8]
test eax, eax
jne 0x415a80
mov eax, dword [esp + 0x28]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret