Function at 0x41c9e0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
xor edx, edx
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x1c
mov ebx, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov ecx, dword [ebx + 8]
mov dword [ebp - 0x10], ebx
movsx eax, word [ecx + 0xa]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx]
test eax, eax
je 0x41ca07
mov edx, dword [eax + 0x10]
cmp dword [ebp - 0x14], edx
je 0x41cbb3
movzx edx, word [edi]
mov esi, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
shl esi, 4
mov ecx, dword [edi + 2]
add esi, ebx
mov ebx, dword [eax + 0xc]
shl esi, 2
add ebx, esi
mov dword [ebx + 2], ecx
mov eax, dword [edi + 6]
mov word [ebx], dx
mov ecx, dword [edi + 0xc]
mov dword [ebx + 6], eax
mov dword [ebx + 0xc], ecx
mov eax, dword [edi + 0x10]
movzx edx, word [edi + 0xa]
mov dword [ebx + 0x10], eax
mov word [ebx + 0xa], dx
mov edx, dword [edi + 0x14]
mov dword [ebx + 0x14], edx
mov ecx, dword [edi + 0x18]
mov dword [ebx + 0x18], ecx
mov eax, dword [edi + 0x1c]
mov dword [ebx + 0x1c], eax
mov edx, dword [edi + 0x20]
mov dword [ebx + 0x20], edx
mov ecx, dword [edi + 0x24]
movzx edx, byte [edi + 0x2c]
mov dword [ebx + 0x24], ecx
mov eax, dword [edi + 0x28]
movzx ecx, byte [edi + 0x2d]
mov byte [ebx + 0x2c], dl
lea edx, [edi + 0x30]
mov dword [ebx + 0x28], eax
movzx eax, word [edi + 0x2e]
mov byte [ebx + 0x2d], cl
lea ecx, [ebx + 0x30]
mov word [ebx + 0x2e], ax
mov dword [esp], ecx
mov dword [esp + 4], edx
call method.MWORD.operator_MWORD_const_
lea edx, [ebx + 0x34]
lea eax, [edi + 0x34]
mov dword [esp], edx
mov dword [esp + 4], eax
call method.MWORD.operator_MWORD_const_
cld
mov edx, dword [edi + 0x40]
mov ecx, dword [edi + 0x38]
mov eax, dword [edi + 0x3c]
mov dword [ebx + 0x40], edx
mov edx, dword [ebp - 0x10]
mov dword [ebx + 0x38], ecx
mov ecx, dword [ebp - 0x14]
mov edi, dword [edx + 0xc]
mov dword [ebx + 0x3c], eax
mov ebx, dword [edx + 0x10]
xor eax, eax
mov word [esi + edi], cx
mov edi, dword [ebp - 0x14]
mov ecx, 8
xor esi, esi
shl edi, 5
add edi, ebx
rep stosd dword es:[edi], eax
mov ebx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x14]
mov dword [esp + 4], esi
shl ebx, 6
mov edx, 0x7e
mov dword [esp + 8], edx
sub ebx, ecx
add ebx, ebx
mov edi, ebx
add edi, eax
mov dword [esp], edi
call sym._memset
mov edi, dword [ebp - 0x10]
mov edx, 0x110
mov ecx, dword [ebp - 0x14]
mov eax, dword [edi + 0x14]
mov word [ebx + eax], cx
mov eax, dword [edi + 0x28]
mov ecx, 0x110
cmp eax, 2
je 0x41cb5a
dec eax
je 0x41cb50
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
mov ecx, dword [esi + 8]
mov eax, dword [edi]
movzx edx, word [ecx + 0xa]
inc edx
movsx ebx, dx
mov word [ecx + 0xa], dx
mov dword [eax + 0xc], ebx
add esp, 0x1c
pop ebx
pop esi
pop edi
pop ebp
ret
mov ecx, 0x62
mov edx, 0x62
mov ebx, dword [ebp - 0x14]
xor edi, edi
mov eax, dword [ebp - 0x10]
imul edx, ebx
mov esi, dword [eax + 0x18]
mov dword [esp + 8], ecx
mov dword [esp + 4], edi
add edx, esi
mov dword [esp], edx
call sym._memset
mov edx, dword [ebp - 0x10]
cmp dword [edx + 0x28], 1
jne 0x41cb2b
imul edi, dword [ebp - 0x14], 0x62
mov edx, dword [edx + 0x18]
mov ecx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x10]
mov word [edi + edx], cx
mov ecx, dword [esi + 8]
mov edi, dword [ebp - 0x10]
movzx edx, word [ecx + 0xa]
mov eax, dword [edi]
inc edx
mov word [ecx + 0xa], dx
movsx ebx, dx
mov dword [eax + 0xc], ebx
add esp, 0x1c
pop ebx
pop esi
pop edi
pop ebp
ret
mov esi, dword [ebp - 0x10]
mov edx, 0xffffffff
mov dword [esp + 4], edx
mov dword [esp], esi
call method.c_DcManage.expandfile_int_
jmp 0x41ca10