Function at 0x4177ef
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x38
push ebx
mov ebx, dword [esp + 0x40]
push ebp
push esi
mov esi, ecx
cmp byte [ebx + 0x2c], 0
lea ebp, [ebx + 4]
push edi
mov dword [esp + 0x24], esi
lea edi, [ebx + 0x18]
mov dword [esp + 0x10], ebp
jne 0x417825
lea eax, [ebx + 0x30]
mov byte [ebx + 0x2c], 1
push eax
push edi
push ebp
call fcn.004143bf
test al, al
je 0x417835
jmp 0x417829
mov dword [esp + 0x10], ebp
mov eax, dword [ebx + 0x24]
mov ecx, dword [edi]
add eax, ecx
cmp dword [ebp], eax
jle 0x417843
mov byte [ebx + 0x4ad0], 1
xor al, al
jmp 0x4181e5
mov eax, dword [ebx + 0x20]
mov ebp, dword [ebx + 0x4acc]
dec eax
add eax, ecx
sub ebp, 0x10
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ebp
mov dword [esp + 0x2c], eax
cmp eax, ebp
jl 0x417866
mov dword [esp + 0x2c], ebp
mov ecx, dword [esp + 0x10]
jmp 0x417874
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x14]
mov edx, dword [esi + 0x7c]
mov edi, dword [esi + 0xe6dc]
and edx, edi
mov dword [esi + 0x7c], edx
mov ecx, dword [ecx]
cmp ecx, dword [esp + 0x2c]
jl 0x4178bd
cmp ecx, eax
jg 0x4181e3
jne 0x4178a0
mov eax, dword [ebx + 8]
cmp eax, dword [ebx + 0x1c]
jge 0x4181e3
cmp ecx, ebp
jl 0x4178b1
cmp byte [ebx + 0x4ad2], 0
je 0x4181dc
cmp ecx, dword [ebx + 0x4acc]
jge 0x4181dc
mov ecx, dword [esi + 0x4b3c]
mov eax, ecx
sub eax, edx
and eax, edi
cmp eax, 0x1004
jae 0x417901
cmp ecx, edx
je 0x417901
mov ecx, esi
call fcn.00415202
mov eax, dword [esi + 0x4c5c]
cmp eax, dword [esi + 0x4c4c]
jg 0x41783c
jl 0x417901
mov eax, dword [esi + 0x4c58]
cmp eax, dword [esi + 0x4c48]
ja 0x41783c
mov edi, dword [esp + 0x10]
mov ecx, edi
call fcn.0040a89d
mov edx, eax
mov eax, dword [ebx + 0xb4]
and edx, 0xfffe
cmp edx, dword [ebx + eax*4 + 0x34]
jae 0x417951
push 0x10
pop ecx
sub ecx, eax
shr edx, cl
mov ecx, edi
movzx ebp, byte [edx + ebx + 0xb8]
add ebp, dword [ecx + 4]
mov eax, ebp
shr eax, 3
add dword [ecx], eax
and ebp, 7
mov eax, dword [ecx]
mov dword [ecx + 4], ebp
movzx edx, word [ebx + edx*2 + 0x4b8]
mov dword [esp + 0x1c], eax
jmp 0x4179c0
push 0xf
pop ecx
inc eax
mov dword [esp + 0x28], ecx
cmp eax, ecx
jae 0x41797c
lea ecx, [eax + 0xd]
lea ecx, [ebx + ecx*4]
cmp edx, dword [ecx]
jb 0x417976
inc eax
add ecx, 4
cmp eax, 0xf
jb 0x417963
mov ecx, dword [esp + 0x28]
jmp 0x41797c
mov ecx, eax
mov dword [esp + 0x28], eax
mov ebp, dword [edi + 4]
add ebp, ecx
mov eax, ebp
and ebp, 7
shr eax, 3
add dword [edi], eax
mov eax, dword [edi]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x28]
mov dword [edi + 4], ebp
push 0x10
pop ecx
sub edx, dword [ebx + eax*4 + 0x30]
sub ecx, eax
shr edx, cl
mov ecx, dword [ebx + eax*4 + 0x74]
add ecx, edx
cmp ecx, dword [ebx + 0x30]
sbb eax, eax
and eax, ecx
mov ecx, dword [esp + 0x10]
movzx edx, word [ebx + eax*2 + 0xcb8]
mov eax, dword [esp + 0x1c]
movzx edx, dx
mov edi, 0x100
cmp edx, edi
jae 0x4179e8
mov eax, dword [esi + 0x7c]
mov ecx, dword [esi + 0x4b40]
mov byte [ecx + eax], dl
inc dword [esi + 0x7c]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
jmp 0x417870
cmp edx, 0x106
jb 0x417e80
lea edi, [edx - 0x106]
cmp edi, 8
jae 0x417a69
mov dword [esp + 0x1c], eax
add edi, 2
mov eax, dword [esp + 0x10]
mov ecx, eax
call fcn.0040a89d
mov edx, eax
mov eax, dword [ebx + 0xfa0]
and edx, 0xfffe
cmp edx, dword [ebx + eax*4 + 0xf20]
jae 0x417abc
push 0x10
pop ecx
sub ecx, eax
shr edx, cl
movzx ecx, byte [edx + ebx + 0xfa4]
add ecx, ebp
mov ebp, dword [esp + 0x1c]
mov eax, ecx
shr eax, 3
add ebp, eax
mov eax, dword [esp + 0x10]
and ecx, 7
mov dword [esp + 0x20], ebp
mov dword [esp + 0x1c], ecx
mov dword [eax], ebp
mov dword [eax + 4], ecx
movzx eax, word [ebx + edx*2 + 0x13a4]
jmp 0x417b32
mov eax, edi
and edi, 3
shr eax, 2
or edi, 4
dec eax
mov ecx, eax
mov dword [esp + 0x34], eax
shl edi, cl
add edi, 2
test eax, eax
je 0x417a06
mov ecx, dword [esp + 0x10]
call fcn.0040a89d
add ebp, dword [esp + 0x34]
push 0x10
pop ecx
sub ecx, dword [esp + 0x34]
shr eax, cl
mov ecx, dword [esp + 0x1c]
add edi, eax
mov eax, ebp
shr eax, 3
add ecx, eax
mov eax, dword [esp + 0x10]
and ebp, 7
mov dword [esp + 0x1c], ecx
mov dword [eax], ecx
mov dword [eax + 4], ebp
jmp 0x417a0a
push 0xf
pop ebp
inc eax
mov dword [esp + 0x28], ebp
cmp eax, ebp
jae 0x417ae3
lea ecx, [eax + 0x3c8]
lea ecx, [ebx + ecx*4]
cmp edx, dword [ecx]
jb 0x417adf
inc eax
add ecx, 4
cmp eax, ebp
jb 0x417ad1
jmp 0x417ae3
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x10]
push 0x10
mov ebp, dword [ecx + 4]
add ebp, dword [esp + 0x2c]
mov eax, ebp
and ebp, 7
shr eax, 3
add dword [ecx], eax
mov eax, dword [ecx]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x2c]
mov dword [ecx + 4], ebp
pop ecx
sub ecx, eax
mov dword [esp + 0x1c], ebp
sub edx, dword [ebx + eax*4 + 0xf1c]
shr edx, cl
mov ecx, dword [ebx + eax*4 + 0xf60]
add ecx, edx
cmp ecx, dword [ebx + 0xf1c]
sbb eax, eax
and eax, ecx
movzx eax, word [ebx + eax*2 + 0x1ba4]
movzx edx, ax
cmp edx, 4
jae 0x417b42
lea ebp, [edx + 1]
jmp 0x417cc5
mov eax, edx
and edx, 1
shr eax, 1
or edx, 2
dec eax
mov ecx, eax
mov dword [esp + 0x30], eax
shl edx, cl
lea ecx, [edx + 1]
mov dword [esp + 0x34], ecx
mov ebp, ecx
mov dword [esp + 0x28], ebp
test eax, eax
je 0x417cc9
cmp eax, 4
jb 0x417c90
jbe 0x417bbc
mov ecx, dword [esp + 0x10]
call fcn.00418934
mov edx, dword [esp + 0x20]
mov ebp, eax
mov eax, dword [esp + 0x30]
push 0x24
pop ecx
sub ecx, eax
add eax, 0xfffffffc
shr ebp, cl
mov ecx, dword [esp + 0x1c]
add ecx, eax
shl ebp, 4
add ebp, dword [esp + 0x34]
mov eax, ecx
shr eax, 3
add edx, eax
mov eax, dword [esp + 0x10]
and ecx, 7
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], ecx
mov dword [eax], edx
mov dword [eax + 4], ecx
jmp 0x417bc0
mov eax, dword [esp + 0x10]
mov ecx, eax
call fcn.0040a89d
mov edx, eax
mov eax, dword [ebx + 0x1e8c]
and edx, 0xfffe
cmp edx, dword [ebx + eax*4 + 0x1e0c]
jae 0x417c12
mov esi, dword [esp + 0x10]
push 0x10
pop ecx
sub ecx, eax
shr edx, cl
movzx ecx, byte [edx + ebx + 0x1e90]
add ecx, dword [esp + 0x1c]
mov eax, ecx
shr eax, 3
add eax, dword [esp + 0x20]
and ecx, 7
mov dword [esi], eax
mov eax, esi
mov dword [eax + 4], ecx
movzx eax, word [ebx + edx*2 + 0x2290]
jmp 0x417c85
push 0xf
pop ecx
inc eax
mov dword [esp + 0x28], ecx
cmp eax, ecx
jae 0x417c3a
lea ecx, [eax + 0x783]
lea ecx, [ebx + ecx*4]
cmp edx, dword [ecx]
jb 0x417c36
inc eax
add ecx, 4
cmp eax, 0xf
jb 0x417c27
jmp 0x417c3a
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x10]
push 0x10
mov ecx, dword [eax + 4]
add ecx, dword [esp + 0x2c]
mov eax, ecx
and ecx, 7
shr eax, 3
add dword [esi], eax
mov eax, esi
mov dword [eax + 4], ecx
mov eax, dword [esp + 0x2c]
pop ecx
sub ecx, eax
sub edx, dword [ebx + eax*4 + 0x1e08]
shr edx, cl
mov ecx, dword [ebx + eax*4 + 0x1e4c]
add ecx, edx
cmp ecx, dword [ebx + 0x1e08]
sbb eax, eax
and eax, ecx
movzx eax, word [ebx + eax*2 + 0x2a90]
mov esi, dword [esp + 0x24]
movzx eax, ax
add ebp, eax
jmp 0x417cc5
mov ecx, dword [esp + 0x10]
call fcn.00418934
mov edx, dword [esp + 0x10]
mov ebp, eax
push 0x20
pop ecx
sub ecx, dword [esp + 0x30]
shr ebp, cl
mov ecx, dword [esp + 0x1c]
add ecx, dword [esp + 0x30]
add ebp, dword [esp + 0x34]
mov eax, ecx
shr eax, 3
add eax, dword [esp + 0x20]
and ecx, 7
mov dword [edx], eax
mov dword [edx + 4], ecx
mov dword [esp + 0x28], ebp
cmp ebp, 0x100
jbe 0x417ce4
inc edi
cmp ebp, 0x2000
jbe 0x417ce4
inc edi
cmp ebp, 0x40000
jbe 0x417ce4
inc edi
mov eax, dword [esi + 0x68]
mov dword [esi + 0x6c], eax
mov eax, dword [esi + 0x64]
mov dword [esi + 0x68], eax
mov eax, dword [esi + 0x60]
mov dword [esi + 0x64], eax
mov dword [esi + 0x60], ebp
mov edx, dword [esi + 0x7c]
mov ecx, edx
mov eax, dword [esi + 0xe6d8]
sub ecx, ebp
add eax, 0xffffeffc
mov dword [esi + 0x74], edi
mov dword [esp + 0x34], ecx
cmp ecx, eax
jae 0x417e3a
cmp edx, eax
jae 0x417e3a
mov eax, dword [esi + 0x4b40]
push 8
lea ebp, [eax + edx]
lea ebx, [eax + ecx]
lea eax, [edx + edi]
pop edx
mov dword [esi + 0x7c], eax
cmp edi, edx
jb 0x417daa
cmp dword [esp + 0x28], edi
jae 0x417d82
mov ecx, edi
shr ecx, 3
mov al, byte [ebx]
sub edi, edx
mov byte [ebp], al
mov al, byte [ebx + 1]
mov byte [ebp + 1], al
mov al, byte [ebx + 2]
mov byte [ebp + 2], al
mov al, byte [ebx + 3]
mov byte [ebp + 3], al
mov al, byte [ebx + 4]
mov byte [ebp + 4], al
mov al, byte [ebx + 5]
mov byte [ebp + 5], al
mov al, byte [ebx + 6]
mov byte [ebp + 6], al
mov al, byte [ebx + 7]
add ebx, edx
mov byte [ebp + 7], al
add ebp, edx
sub ecx, 1
jne 0x417d46
jmp 0x417daa
mov eax, edi
shr eax, 3
mov dword [esp + 0x34], eax
mov esi, eax
push edx
push ebx
push ebp
call fcn.00420320
add esp, 0xc
push 8
pop edx
add ebx, edx
add ebp, edx
sub edi, edx
sub esi, 1
jne 0x417d8d
mov esi, dword [esp + 0x24]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
test edi, edi
je 0x41786c
mov al, byte [ebx]
mov byte [ebp], al
mov eax, dword [esp + 0x18]
cmp edi, 1
jbe 0x41786c
mov al, byte [ebx + 1]
mov byte [ebp + 1], al
mov eax, dword [esp + 0x18]
cmp edi, 2
jbe 0x41786c
mov al, byte [ebx + 2]
mov byte [ebp + 2], al
mov eax, dword [esp + 0x18]
cmp edi, 3
jbe 0x41786c
mov al, byte [ebx + 3]
mov byte [ebp + 3], al
mov eax, dword [esp + 0x18]
cmp edi, 4
jbe 0x41786c
mov al, byte [ebx + 4]
mov byte [ebp + 4], al
mov eax, dword [esp + 0x18]
cmp edi, 5
jbe 0x41786c
mov al, byte [ebx + 5]
mov byte [ebp + 5], al
mov eax, dword [esp + 0x18]
cmp edi, 6
jbe 0x41786c
mov al, byte [ebx + 6]
mov ebx, dword [esp + 0x4c]
mov byte [ebp + 6], al
jmp 0x4179db
mov ecx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
test edi, edi
je 0x417874
mov eax, dword [esi + 0xe6dc]
mov ebp, dword [esp + 0x34]
mov ecx, dword [esi + 0x4b40]
and eax, ebp
inc ebp
mov al, byte [eax + ecx]
mov byte [ecx + edx], al
mov edx, dword [esi + 0x7c]
mov eax, dword [esi + 0xe6dc]
inc edx
and edx, eax
mov dword [esi + 0x7c], edx
sub edi, 1
jne 0x417e58
jmp 0x4179db
cmp edx, edi
jne 0x417eb2
lea eax, [esp + 0x38]
push eax
push ecx
mov ecx, esi
call fcn.00413f9d
test al, al
je 0x4181e3
lea eax, [esp + 0x38]
mov ecx, esi
push eax
call fcn.0041253e
test al, al
je 0x4181e3
jmp 0x4179db
cmp edx, 0x101
jne 0x417fb2
mov edi, dword [esi + 0x74]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
test edi, edi
je 0x417874
mov edx, dword [esi + 0x7c]
mov ebp, edx
mov eax, dword [esi + 0xe6d8]
mov ecx, dword [esi + 0x60]
add eax, 0xffffeffc
sub ebp, ecx
cmp ebp, eax
jae 0x417f84
cmp edx, eax
jae 0x417f84
mov eax, dword [esi + 0x4b40]
push 8
lea ebx, [eax + ebp]
lea ebp, [eax + edx]
lea eax, [edx + edi]
pop edx
mov dword [esi + 0x7c], eax
cmp edi, edx
jb 0x417daa
cmp ecx, edi
jae 0x417f5b
mov ecx, edi
shr ecx, 3
mov al, byte [ebx]
sub edi, edx
mov byte [ebp], al
mov al, byte [ebx + 1]
mov byte [ebp + 1], al
mov al, byte [ebx + 2]
mov byte [ebp + 2], al
mov al, byte [ebx + 3]
mov byte [ebp + 3], al
mov al, byte [ebx + 4]
mov byte [ebp + 4], al
mov al, byte [ebx + 5]
mov byte [ebp + 5], al
mov al, byte [ebx + 6]
mov byte [ebp + 6], al
mov al, byte [ebx + 7]
add ebx, edx
mov byte [ebp + 7], al
add ebp, edx
sub ecx, 1
jne 0x417f1c
jmp 0x417daa
mov eax, edi
shr eax, 3
mov dword [esp + 0x34], eax
mov esi, eax
push edx
push ebx
push ebp
call fcn.00420320
add esp, 0xc
push 8
pop edx
add ebx, edx
add ebp, edx
sub edi, edx
sub esi, 1
jne 0x417f66
jmp 0x417da6
mov eax, dword [esi + 0xe6dc]
mov ecx, dword [esi + 0x4b40]
and eax, ebp
inc ebp
mov al, byte [eax + ecx]
mov byte [ecx + edx], al
mov edx, dword [esi + 0x7c]
mov eax, dword [esi + 0xe6dc]
inc edx
and edx, eax
mov dword [esi + 0x7c], edx
sub edi, 1
jne 0x417f8a
jmp 0x4179db
add edx, 0xfffffefe
lea ecx, [edx + 0x18]
lea ecx, [esi + ecx*4]
mov ebp, dword [ecx]
mov dword [esp + 0x28], ebp
je 0x417fd3
mov eax, dword [ecx - 4]
mov dword [ecx], eax
lea ecx, [ecx - 4]
sub edx, 1
jne 0x417fc6
mov dword [esi + 0x60], ebp
mov ebp, dword [esp + 0x10]
mov ecx, ebp
call fcn.0040a89d
mov edx, eax
mov eax, dword [ebx + 0x2d78]
and edx, 0xfffe
cmp edx, dword [ebx + eax*4 + 0x2cf8]
jae 0x41802d
push 0x10
pop ecx
sub ecx, eax
shr edx, cl
movzx ecx, byte [edx + ebx + 0x2d7c]
add ecx, dword [ebp + 4]
mov eax, ecx
shr eax, 3
add dword [ebp], eax
and ecx, 7
mov eax, dword [ebp]
mov dword [esp + 0x30], eax
mov dword [ebp + 4], ecx
movzx eax, word [ebx + edx*2 + 0x317c]
mov dword [esp + 0x34], ecx
jmp 0x418096
push 0xf
pop edi
inc eax
cmp eax, edi
jae 0x41804f
lea ecx, [eax + 0xb3e]
lea ecx, [ebx + ecx*4]
cmp edx, dword [ecx]
jb 0x41804d
inc eax
add ecx, 4
cmp eax, 0xf
jb 0x41803e
jmp 0x41804f
mov edi, eax
mov ecx, dword [ebp + 4]
add ecx, edi
mov eax, ecx
and ecx, 7
mov dword [ebp + 4], ecx
shr eax, 3
add dword [ebp], eax
sub edx, dword [ebx + edi*4 + 0x2cf4]
mov eax, dword [ebp]
mov dword [esp + 0x34], ecx
push 0x10
pop ecx
sub ecx, edi
mov dword [esp + 0x30], eax
shr edx, cl
mov ecx, dword [ebx + edi*4 + 0x2d38]
add ecx, edx
cmp ecx, dword [ebx + 0x2cf4]
sbb eax, eax
and eax, ecx
movzx eax, word [ebx + eax*2 + 0x397c]
movzx edi, ax
cmp edi, 8
jae 0x4180a3
add edi, 2
jmp 0x4180e7
mov ebp, edi
and edi, 3
shr ebp, 2
or edi, 4
dec ebp
mov ecx, ebp
shl edi, cl
add edi, 2
test ebp, ebp
je 0x4180e7
mov ecx, dword [esp + 0x10]
call fcn.0040a89d
mov edx, dword [esp + 0x10]
push 0x10
pop ecx
sub ecx, ebp
shr eax, cl
mov ecx, dword [esp + 0x34]
add edi, eax
add ecx, ebp
mov eax, ecx
shr eax, 3
add eax, dword [esp + 0x30]
and ecx, 7
mov dword [edx], eax
mov dword [edx + 4], ecx
mov edx, dword [esi + 0x7c]
mov ebp, edx
mov eax, dword [esi + 0xe6d8]
mov ecx, dword [esp + 0x28]
add eax, 0xffffeffc
sub ebp, ecx
mov dword [esi + 0x74], edi
cmp ebp, eax
jae 0x41819e
cmp edx, eax
jae 0x41819e
mov eax, dword [esi + 0x4b40]
push 8
lea ebx, [eax + ebp]
lea ebp, [eax + edx]
lea eax, [edx + edi]
pop edx
mov dword [esi + 0x7c], eax
cmp edi, edx
jb 0x417daa
cmp ecx, edi
jae 0x418175
mov ecx, edi
shr ecx, 3
mov al, byte [ebx]
sub edi, edx
mov byte [ebp], al
mov al, byte [ebx + 1]
mov byte [ebp + 1], al
mov al, byte [ebx + 2]
mov byte [ebp + 2], al
mov al, byte [ebx + 3]
mov byte [ebp + 3], al
mov al, byte [ebx + 4]
mov byte [ebp + 4], al
mov al, byte [ebx + 5]
mov byte [ebp + 5], al
mov al, byte [ebx + 6]
mov byte [ebp + 6], al
mov al, byte [ebx + 7]
add ebx, edx
mov byte [ebp + 7], al
add ebp, edx
sub ecx, 1
jne 0x418136
jmp 0x417daa
mov eax, edi
shr eax, 3
mov dword [esp + 0x34], eax
mov esi, eax
push edx
push ebx
push ebp
call fcn.00420320
add esp, 0xc
push 8
pop edx
add ebx, edx
add ebp, edx
sub edi, edx
sub esi, 1
jne 0x418180
jmp 0x417da6
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
test edi, edi
je 0x417870
mov eax, dword [esi + 0xe6dc]
mov ecx, dword [esi + 0x4b40]
and eax, ebp
inc ebp
mov al, byte [eax + ecx]
mov byte [ecx + edx], al
mov edx, dword [esi + 0x7c]
mov eax, dword [esi + 0xe6dc]
inc edx
and edx, eax
mov dword [esi + 0x7c], edx
sub edi, 1
jne 0x4181b4
jmp 0x4179db
mov byte [ebx + 0x4ad3], 1
mov al, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x38
ret 4