Function at 0x41ef10
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x20
mov edi, ecx
movzx ecx, byte [ecx]
mov ebx, dword [edi]
mov edx, dword [edi + 4]
mov eax, ecx
shr eax, 1
mov esi, ebx
and esi, 0xfffffffe
dec esi
mov dword [esp + 0x1c], ecx
test cl, 1
cmovne eax, edx
mov dword [esp + 0xc], eax
mov eax, 0xa
cmovne eax, esi
mov ecx, dword [esp + 0x38]
mov ebp, dword [esp + 0x34]
sub ecx, ebp
mov dword [esp + 8], ecx
je 0x41f1c2
lea ecx, [edi + 1]
test bl, 1
mov dword [esp], edi
mov edi, dword [edi + 8]
mov esi, edi
mov dword [esp + 4], ecx
cmove esi, ecx
cmp esi, ebp
ja 0x41ef85
mov ecx, ebx
shr ecx, 1
and ecx, 0x7f
test bl, 1
cmove edx, ecx
add edx, esi
cmp edx, ebp
jae 0x41f064
mov ecx, eax
mov edx, dword [esp + 0xc]
sub ecx, edx
mov ebp, dword [esp + 8]
cmp ecx, ebp
jae 0x41f045
lea ecx, [edx + ebp]
mov edx, ecx
sub edx, eax
mov dword [esp + 4], 0xffffffef
mov edi, 0xffffffef
sub edi, eax
cmp edi, edx
jb 0x41f1ce
mov ebx, ebp
cmp eax, 0x7fffffe6
mov ebp, dword [esp + 0x38]
ja 0x41efe0
add eax, eax
cmp ecx, eax
cmova eax, ecx
mov ecx, eax
or ecx, 0xf
inc ecx
cmp eax, 0xb
mov eax, 0xb
cmovae eax, ecx
mov dword [esp + 4], eax
push dword [esp + 4]
call fcn.004088c0
add esp, 4
mov edi, eax
mov edx, dword [esp + 0xc]
test edx, edx
je 0x41f005
push edx
push esi
push edi
call sub.msvcrt.dll_memmove
mov edx, dword [esp + 0x18]
add esp, 0xc
test byte [esp + 0x1c], 1
je 0x41f019
push esi
call fcn.00408930
mov edx, dword [esp + 0x10]
add esp, 4
mov eax, dword [esp]
mov dword [eax + 8], edi
mov ecx, dword [esp + 4]
or ecx, 1
mov dword [eax], ecx
lea eax, [edi + edx]
cmp ebx, 0x20
jb 0x41f05b
lea ecx, [edi + edx]
mov ebx, dword [esp + 0x34]
sub ecx, ebx
cmp ecx, 0x20
jae 0x41f08b
mov ecx, ebx
mov edi, dword [esp]
jmp 0x41f0c4
test bl, 1
cmove edi, dword [esp + 4]
mov ebx, ebp
mov ebp, dword [esp + 0x38]
lea eax, [edi + edx]
cmp ebx, 0x20
jae 0x41f030
mov ecx, dword [esp + 0x34]
mov edi, dword [esp]
jmp 0x41f0c4
mov ebx, dword [esp + 8]
cmp ebx, 0xfffffff0
jae 0x41f1d6
cmp ebx, 0xa
ja 0x41f159
mov eax, ebx
add al, bl
mov byte [esp + 0x10], al
lea edi, [esp + 0x11]
jmp 0x41f17b
mov esi, edx
mov edx, dword [esp + 8]
and edx, 0xffffffe0
lea ecx, [ebx + edx]
add eax, edx
add esi, edi
add esi, 0x10
xor edi, edi
movups xmm0, xmmword [ebx + edi]
movups xmm1, xmmword [ebx + edi + 0x10]
movups xmmword [esi + edi - 0x10], xmm0
movups xmmword [esi + edi], xmm1
add edi, 0x20
cmp edx, edi
jne 0x41f0a0
mov esi, dword [esp + 8]
cmp esi, edx
mov edi, dword [esp]
je 0x41f140
mov esi, ebp
sub esi, ecx
mov edx, ecx
not edx
add edx, ebp
and esi, 7
je 0x41f0ea
nop word cs:[eax + eax]
movzx ebx, byte [ecx]
mov byte [eax], bl
inc eax
inc ecx
dec esi
jne 0x41f0e0
cmp edx, 7
mov esi, dword [esp + 8]
jb 0x41f140
nop word cs:[eax + eax]
movzx edx, byte [ecx]
mov byte [eax], dl
movzx edx, byte [ecx + 1]
mov byte [eax + 1], dl
movzx edx, byte [ecx + 2]
mov byte [eax + 2], dl
movzx edx, byte [ecx + 3]
mov byte [eax + 3], dl
movzx edx, byte [ecx + 4]
mov byte [eax + 4], dl
movzx edx, byte [ecx + 5]
mov byte [eax + 5], dl
movzx edx, byte [ecx + 6]
mov byte [eax + 6], dl
movzx edx, byte [ecx + 7]
mov byte [eax + 7], dl
add eax, 8
add ecx, 8
cmp ecx, ebp
jne 0x41f100
mov byte [eax], 0
mov eax, dword [esp + 0xc]
add eax, esi
test byte [edi], 1
jne 0x41f154
add al, al
mov byte [edi], al
jmp 0x41f1c2
mov dword [edi + 4], eax
jmp 0x41f1c2
mov esi, ebx
or esi, 0xf
lea eax, [esi + 1]
push eax
call fcn.004088c0
add esp, 4
mov edi, eax
mov dword [esp + 0x18], eax
add esi, 2
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ebx
push ebx
push ebp
push edi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov byte [edi + ebx], 0
movzx eax, byte [esp + 0x10]
test al, 1
je 0x41f19d
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
jmp 0x41f1a3
shr eax, 1
lea edx, [esp + 0x11]
mov edi, dword [esp]
mov ecx, edi
push eax
push edx
call fcn.00409d40
test byte [esp + 0x10], 1
je 0x41f1c2
push dword [esp + 0x18]
call fcn.00408930
add esp, 4
mov eax, edi
add esp, 0x20
pop esi
pop edi
pop ebx
pop ebp
ret 8
mov ecx, dword [esp]
call fcn.004054b0
lea ecx, [esp + 0x10]
call fcn.004054b0
mov esi, eax
test byte [esp + 0x10], 1
je 0x41f1f4
push dword [esp + 0x18]
call fcn.00408930
add esp, 4
push esi
call fcn.0042d8d0
int3