Function at 0x40ed50
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x40f0bc
sub esp, 0x38
mov eax, dword [esp + 0x40]
test eax, eax
je 0x40f0a2
movzx ecx, byte [eax + 4]
test cl, 4
jne 0x40f08a
mov ecx, dword [esp + 0x3c]
mov ebx, dword [ecx + 0x20]
mov ebx, dword [ebx + 0x10]
mov edx, dword [ebx]
mov ebx, dword [eax + 8]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x44]
mov dword [esp], ebx
mov ebx, dword [edx]
call ebx
mov eax, dword [esp + 8]
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x40]
movzx ebx, byte [ecx + 4]
or ebx, 4
mov byte [ecx + 4], bl
mov ebx, dword [ecx + 0xc]
test ebx, ebx
je 0x40f033
mov edx, dword [esp + 0x3c]
jmp 0x40ef25
lea edx, [ebp + 1]
mov ebp, dword [esp + 0x40]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x18]
cmp ebp, 8
jae 0x40eea1
test byte [ebx], al
movzx edx, byte [ebx + ebp]
xchg esi, eax
cmp al, dl
xchg esi, eax
je 0x40ee00
test dl, dl
jne 0x40edca
test eax, eax
jne 0x40edca
mov eax, ebx
mov edi, ebp
jmp 0x40edca
mov edx, ebx
lea ebx, [ebx + ebp*8 + 8]
mov dword [esp + 0x30], ebx
mov ebx, dword [ebx + 4]
mov esi, dword [esp + 0x48]
cmp ebx, esi
je 0x40ee1e
mov ebx, edx
movzx esi, byte [esp + 0x13]
jmp 0x40edca
mov ebx, dword [esp + 0x30]
mov ebx, dword [ebx]
mov ecx, dword [esp + 0x44]
cmp ebx, ecx
je 0x40ee6b
mov dword [esp + 0x14], edi
mov dword [esp + 0x2c], eax
mov dword [esp + 8], esi
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.004021c0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x40ee6b
mov ecx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0x18]
movzx esi, byte [esp + 0x13]
mov eax, dword [esp + 0x2c]
mov edi, dword [esp + 0x14]
jmp 0x40edca
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x3c]
movzx edx, byte [edx + 0x2e]
imul edx, ecx
mov ecx, dword [esp + 0x40]
movzx ebx, byte [ecx + 4]
lea eax, [edx + eax + 0x48]
test bl, 4
je 0x40f072
and ebx, 0xfffffffb
mov byte [ecx + 4], bl
mov dword [esp + 0x4c], eax
add esp, 0x38
ret
movzx ebp, word [edx + 0x30]
lea ebx, [ebx + ebp - 4]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40eeca
mov ebp, dword [esp + 0x40]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x24], eax
xor eax, eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x24]
jmp 0x40edd9
mov ebx, dword [esp + 0x40]
mov ebp, dword [ebx + 0x10]
test ebp, ebp
jne 0x40ef91
mov ebp, dword [ebx]
inc ebp
movzx esi, byte [ebx + 5]
cmp ebp, 8
jle 0x40eff8
mov ecx, esi
mov edx, 1
shl edx, cl
shr edx, 1
lea esi, [edx + edx*2]
lea edx, [edx + esi*4]
cmp ebp, edx
seta dl
test dl, dl
je 0x40ef70
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.0040bf90
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x3c]
mov eax, ecx
mov ecx, dword [esp + 0x40]
movzx ebx, byte [ecx + 5]
mov ebp, ecx
mov ecx, ebx
mov esi, 1
shl esi, cl
lea ebx, [esi - 1]
and ebx, eax
mov esi, dword [ebp + 0x10]
test esi, esi
jne 0x40f00a
movzx esi, word [edx + 0x30]
imul ebx, esi
add ebx, dword [ebp + 0xc]
mov esi, eax
shr eax, 0x18
cmp al, 4
jae 0x40f001
mov ecx, esi
lea esi, [eax + 4]
xchg esi, eax
mov byte [esp + 0x13], al
xchg esi, eax
xor eax, eax
xor edi, edi
jmp 0x40eeb3
movzx edx, word [ebx + 6]
cmp cl, 0xf
jbe 0x40ef7e
mov ecx, 0xf
and ecx, 0xf
mov ebp, 1
shl ebp, cl
cmp dx, bp
jae 0x40ef03
test eax, eax
je 0x40efd4
test byte [eax], al
mov ecx, edi
and edi, 7
movzx edx, byte [esp + 0x13]
mov byte [eax + edi], dl
mov edx, eax
lea edi, [eax + ecx*8 + 8]
mov ebp, dword [esp + 0x48]
mov eax, dword [esp + 0x44]
mov dword [edi + 4], ebp
mov ebp, dword [0xa8f2d0]
test ebp, ebp
jne 0x40efcd
mov dword [edi], eax
mov ebp, dword [ebx]
inc ebp
mov dword [ebx], ebp
mov eax, edx
jmp 0x40ee73
call fcn.0044c9e0
jmp 0x40efc1
mov dword [esp], ebx
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 8], ecx
call fcn.0040a510
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x40]
xor edi, edi
jmp 0x40ef95
mov ecx, esi
xor edx, edx
jmp 0x40eeff
mov ecx, esi
mov esi, eax
jmp 0x40ef61
mov dword [esp + 0x20], ebx
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
call fcn.0040f310
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0x40]
jmp 0x40ef44
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0x28]
mov dword [esp], ecx
call fcn.00409d00
mov eax, dword [0xa8f2d0]
mov ecx, dword [esp + 4]
test eax, eax
jne 0x40f062
mov edx, dword [esp + 0x40]
mov dword [edx + 0xc], ecx
mov eax, dword [esp + 0x1c]
mov ecx, edx
jmp 0x40edc1
mov edx, dword [esp + 0x40]
lea edi, [edx + 0xc]
mov eax, ecx
call fcn.0044c9e0
jmp 0x40f057
lea eax, [0x79a70c]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.00427af0
ud2
lea eax, [0x79a70c]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.00427af0
ud2
lea eax, [0x745ea0]
mov dword [esp], eax
lea eax, [0x7fd3d0]
mov dword [esp + 4], eax
call fcn.004275c0
ud2
call fcn.0044b280
jmp fcn.0040ed50