Function at 0x421890
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x421b65
sub esp, 0x1c
mov eax, 0x6cbae0
mov ecx, dword [esp + 0x20]
mov ebp, dword [eax + 0xa80]
cmp ecx, ebp
jb 0x421b5e
mov ebp, dword [eax + 0xa84]
cmp ecx, ebp
jae 0x421b5e
mov ebx, dword [eax + 0xa80]
mov ebp, ecx
sub ebp, ebx
mov ebx, ebp
shr ebx, 0xd
mov ebp, dword [0x6c892c]
cmp ebx, ebp
jae 0x421b57
mov ebp, dword [0x6c8928]
shl ebx, 2
add ebp, ebx
mov eax, dword [ebp]
xor ebp, ebp
cmp eax, ebp
je 0x421b50
mov edx, dword [eax + 0xc]
cmp ecx, edx
jb 0x421b50
mov ebp, dword [eax + 0x50]
cmp ecx, ebp
jae 0x421b50
movzx ebp, byte [eax + 0x3c]
xchg ebp, eax
cmp al, 0
xchg ebp, eax
jne 0x421b50
mov esi, eax
mov dword [esp + 0x14], eax
xor ebp, ebp
cmp eax, ebp
jne 0x42194d
mov ebx, 0x5fcff2
mov dword [esp], ebx
mov dword [esp + 4], 0x1d
call fcn.0042a340
mov esi, dword [esp + 0x14]
mov ebx, dword fs:[0x14]
mov ecx, dword [ebx]
mov eax, dword [ecx + 0x18]
mov edx, dword [eax + 0x70]
inc edx
mov dword [eax + 0x70], edx
mov ebp, dword [ecx + 0x18]
mov dword [esp + 0x18], ebp
mov dword [esp], esi
call fcn.0041ce60
mov edx, dword [esp + 0x14]
mov ebx, dword [edx + 0xc]
mov ebp, dword [esp + 0x20]
sub ebp, ebx
mov dword [esp + 0xc], ebp
mov ebx, dword [esp + 0x24]
movzx ebp, byte [ebx + 6]
xchg ebp, eax
mov byte [esp + 0xb], al
xchg ebp, eax
mov dword [esp], edx
cmp dword [esp], 0
je 0x421b45
add dword [esp], 0x54
call fcn.0040c950
movzx edi, byte [esp + 0xb]
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
cmp ecx, 0
je 0x421b3e
add ecx, 0x58
mov eax, dword [ecx]
xor ebp, ebp
cmp eax, ebp
jne 0x421a94
mov ebx, dword [esp + 0x24]
mov word [ebx + 4], dx
mov dword [esp + 0x10], ecx
mov ebp, dword [ecx]
mov ebx, dword [esp + 0x24]
cmp ebx, 0
je 0x421a8d
cmp byte [0x6d9e38], 0
jne 0x421a78
mov dword [ebx], ebp
mov eax, dword [esp + 0x24]
cmp ecx, 0
je 0x421a74
cmp byte [0x6d9e38], 0
jne 0x421a66
mov dword [ecx], eax
mov ebx, dword [esp + 0x14]
mov dword [esp], ebx
cmp dword [esp], 0
je 0x421a5e
add dword [esp], 0x54
call fcn.0040cb90
mov eax, dword [esp + 0x18]
mov ebx, dword fs:[0x14]
mov ecx, dword [ebx]
mov edx, dword [eax + 0x70]
dec edx
mov dword [eax + 0x70], edx
mov ebp, dword [eax + 0x70]
cmp ebp, 0
jne 0x421a55
movzx ebx, byte [ecx + 0x80]
cmp bl, 0
je 0x421a55
mov eax, 0xfffffade
mov dword [ecx + 8], eax
mov byte [esp + 0x28], 1
add esp, 0x1c
ret
mov dword [0], eax
jmp 0x421a18
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040f1d0
jmp 0x421a0b
mov dword [ecx], eax
jmp 0x421a00
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0040f1d0
mov ecx, dword [esp + 0x10]
jmp 0x4219f7
mov dword [ebx], eax
jmp 0x4219e8
movzx ebp, word [eax + 4]
cmp ebp, edx
jne 0x421b05
movzx ebp, byte [eax + 6]
xchg ebp, eax
xchg edi, ebx
cmp al, bl
xchg edi, ebx
xchg ebp, eax
jne 0x421b05
mov ebx, dword [esp + 0x14]
mov dword [esp], ebx
cmp dword [esp], 0
je 0x421afd
add dword [esp], 0x54
call fcn.0040cb90
mov eax, dword [esp + 0x18]
mov ebx, dword fs:[0x14]
mov ecx, dword [ebx]
mov edx, dword [eax + 0x70]
dec edx
mov dword [eax + 0x70], edx
mov ebp, dword [eax + 0x70]
cmp ebp, 0
jne 0x421af4
movzx ebx, byte [ecx + 0x80]
cmp bl, 0
je 0x421af4
mov eax, 0xfffffade
mov dword [ecx + 8], eax
mov byte [esp + 0x28], 0
add esp, 0x1c
ret
mov dword [0], eax
jmp 0x421ab7
movzx ebp, word [eax + 4]
cmp ebp, edx
ja 0x4219cd
movzx ebp, word [eax + 4]
cmp ebp, edx
jne 0x421b2b
movzx ebp, byte [eax + 6]
xchg ebp, eax
xchg edi, ebx
cmp al, bl
xchg edi, ebx
xchg ebp, eax
ja 0x4219cd
mov ecx, eax
cmp eax, 0
je 0x421b37
jmp 0x4219c1
mov dword [eax], eax
jmp 0x4219c1
mov dword [ecx], eax
jmp 0x4219be
mov dword [0], eax
jmp 0x42199f
xor eax, eax
jmp 0x421928
call fcn.00428680
ud2
xor eax, eax
jmp 0x421928
call fcn.00450db0
jmp fcn.00421890