Function at 0x4013c5
Capabilities:
Enumerate pe sections
Resolve function by hash

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2a8
lea eax, [ebp - 0x238]
push 0x104
push eax
push 0
push 0x45b06d8c
push 0x6a4abc5b
call fcn.00401238
call eax
cmp eax, 0
jle 0x4017cf
push 0x36ef7386
push 0x6a4abc5b
call fcn.00401238
call eax
test eax, eax
je 0x4017cf
mov dword [ebp - 0x2e], eax
lea eax, [ebp - 0x2a8]
push 0
push 0x18
push eax
push 0
push 0xffffffffffffffff
push 0xb10fd839
push 0x3cfa685d
call fcn.00401238
call eax
test eax, eax
jne 0x4017cf
push dword [ebp - 0x294]
push 0
push pe_nt_image_headers32
push 0xefe297c0
push 0x6a4abc5b
call fcn.00401238
call eax
test eax, eax
je 0x4017cf
mov dword [ebp - 0x2a], eax
mov eax, dword [ebp + 8]
add eax, dword [eax + 0x3c]
mov ebx, dword [eax + 0x34]
mov dword [ebp - 0x26], ebx
mov ebx, dword [eax + 0x28]
mov dword [ebp - 0x22], ebx
mov ebx, dword [eax + 0x54]
mov dword [ebp - 0x1e], ebx
mov ebx, dword [eax + 0x50]
mov dword [ebp - 0x1a], ebx
movzx ebx, word [eax + 6]
mov dword [ebp - 0x16], ebx
mov dword [ebp - 0xa], 5
lea edi, [ebp - 0x290]
mov ecx, 0x48
xor eax, eax
cld
rep stosb byte es:[edi], al
mov dword [ebp - 0x12], 0
lea eax, [ebp - 0x12]
push eax
push 0
push 1
push 0
push 0xde64ceff
push 0x2defbae3
call fcn.00401238
call eax
cmp dword [ebp - 0x12], 0
je 0x4017c2
push 0xa80eecae
push 0x6a4abc5b
call fcn.00401238
call eax
push dword [ebp - 0x12]
push 0
push eax
push 0x3e192526
push 0x3cfa685d
call fcn.00401238
call eax
test eax, eax
je 0x4017c2
mov dword [ebp - 0x24c], eax
lea eax, [ebp - 0x12]
push eax
push 0
push 1
push dword [ebp - 0x24c]
push 0xde64ceff
push 0x2defbae3
call fcn.00401238
call eax
test eax, eax
je 0x4017c2
lea eax, [ebp - 0x2a]
push 0
push 0
push 4
push eax
push 0x20000
push 0
push dword [ebp - 0x24c]
push 0x41e5d7cb
push 0x2defbae3
call fcn.00401238
call eax
test eax, eax
je 0x4017c2
lea eax, [ebp - 0x238]
lea ebx, [ebp - 0x290]
mov dword [ebx], 0x48
lea ecx, [ebp - 0x248]
push ecx
push ebx
push 0
push 0
push 0x80004
push 0
push 0
push 0
push dword [ebp - 0x2e]
push eax
push 0x16b3fe88
push 0x6a4abc5b
call fcn.00401238
call eax
test eax, eax
jne 0x4015f9
push 0x75da1966
push 0x6a4abc5b
call fcn.00401238
call eax
cmp eax, 0x2e4
jne 0x4017c2
lea eax, [ebp - 0x238]
lea ebx, [ebp - 0x290]
mov dword [ebx], 0x48
lea ecx, [ebp - 0x248]
push ecx
push ebx
push 0
push 0
push 4
push 0
push 0
push 0
push dword [ebp - 0x2e]
push eax
push 0x16b3fe88
push 0x6a4abc5b
call fcn.00401238
call eax
test eax, eax
je 0x4017c2
push dword [ebp - 0x26]
push dword [ebp - 0x248]
push 0xf21037d0
push 0x3cfa685d
call fcn.00401238
call eax
push 0x40
push 0x3000
push dword [ebp - 0x1a]
push dword [ebp - 0x26]
push dword [ebp - 0x248]
push 0x6e1a959c
push 0x6a4abc5b
call fcn.00401238
call eax
test eax, eax
je 0x4017a9
push 0
push dword [ebp - 0x1e]
push dword [ebp + 8]
push dword [ebp - 0x26]
push dword [ebp - 0x248]
push 0xd83d6aa1
push 0x6a4abc5b
call fcn.00401238
call eax
test eax, eax
je 0x4017a9
mov dword [ebp - 6], 0
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx + 0x3c]
add ebx, dword [ebp + 8]
add ebx, 0xf8
mov edx, dword [ebp - 6]
imul edx, edx, 0x28
add ebx, edx
mov edi, dword [ebp - 0x26]
add edi, dword [ebx + 0xc]
mov esi, dword [ebp + 8]
add esi, dword [ebx + 0x14]
mov ecx, dword [ebx + 0x10]
test ecx, ecx
je 0x4016be
push 0
push ecx
push esi
push edi
push dword [ebp - 0x248]
push 0xd83d6aa1
push 0x6a4abc5b
call fcn.00401238
call eax
test eax, eax
je 0x4017a9
inc dword [ebp - 6]
mov eax, dword [ebp - 0x16]
cmp dword [ebp - 6], eax
jl 0x401670
push 0xa80eecae
push 0x6a4abc5b
call fcn.00401238
call eax
push 0x2cc
push 0
push eax
push 0x3e192526
push 0x3cfa685d
call fcn.00401238
call eax
test eax, eax
je 0x4017a9
mov dword [ebp - 0xe], eax
mov eax, dword [ebp - 0xe]
mov dword [eax], 0x10002
push eax
push dword [ebp - 0x244]
push 0x68a7c7d2
push 0x6a4abc5b
call fcn.00401238
call eax
test eax, eax
je 0x4017a9
mov edi, dword [ebp - 0xe]
mov edi, dword [edi + 0xa4]
add edi, 8
lea esi, [ebp - 0x26]
push 0
push 4
push esi
push edi
push dword [ebp - 0x248]
push 0xd83d6aa1
push 0x6a4abc5b
call fcn.00401238
call eax
test eax, eax
je 0x4017a9
mov eax, dword [ebp - 0x26]
add eax, dword [ebp - 0x22]
mov ebx, dword [ebp - 0xe]
mov dword [ebx + 0xb0], eax
push dword [ebp - 0xe]
push dword [ebp - 0x244]
push 0xe8a7c7d3
push 0x6a4abc5b
call fcn.00401238
call eax
test eax, eax
je 0x4017a9
push dword [ebp - 0x244]
push 0x9e4a3f88
push 0x6a4abc5b
call fcn.00401238
call eax
cmp eax, 0xffffffff
je 0x4017a9
mov eax, 1
leave
ret 4
push 0
push dword [ebp - 0x248]
push 0x78b5b983
push 0x6a4abc5b
call fcn.00401238
call eax
dec dword [ebp - 0xa]
cmp dword [ebp - 0xa], 0
jg 0x40148f
xor eax, eax
leave
ret 4