Function at 0x41c9c0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x28
push ebx
push ebp
push esi
push edi
mov ebp, ecx
cmp dword [ebp + 0x20], 0
jne 0x41d148
test byte [ebp], 8
jne 0x41d148
mov edi, dword [ebp + 0x10]
xorps xmm0, xmm0
mov esi, dword [ebp + 0x4c]
mov eax, edi
mov ecx, dword [ebp + 0x14]
movlpd qword [esp + 0x30], xmm0
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], ecx
test esi, esi
je 0x41ce06
mov eax, dword [esp + 0x34]
mov dword [esp + 0x14], eax
mov edx, 0x2014b50
mov ecx, ebp
call fcn.0041d240
mov edx, 0x201
mov ecx, ebp
call fcn.0041d240
mov edx, 0xb2d
mov ecx, ebp
call fcn.0041d240
mov edx, 0x2d
mov ecx, ebp
call fcn.0041d240
movzx edx, word [esi]
mov ecx, ebp
call fcn.0041d240
movzx edx, word [esi + 2]
mov ecx, ebp
call fcn.0041d240
mov edx, dword [esi + 4]
mov ecx, ebp
call fcn.0041d240
movzx edx, word [esi + 6]
mov ecx, ebp
call fcn.0041d240
mov edx, dword [esi + 8]
mov ecx, ebp
call fcn.0041d240
movzx edx, word [esi + 0xa]
mov ecx, ebp
call fcn.0041d240
cmp dword [esi + 0x14], 0
mov edx, dword [esi + 0x10]
ja 0x41caa3
cmp edx, 0xffffffff
jae 0x41caa3
mov ecx, ebp
call fcn.0041d240
mov edx, dword [esi + 0x10]
mov eax, dword [esi + 0x14]
shrd edx, eax, 0x10
jmp 0x41cab0
or edx, 0xffffffff
mov ecx, ebp
call fcn.0041d240
or edx, 0xffffffff
mov ecx, ebp
call fcn.0041d240
cmp dword [esi + 0x1c], 0
mov edx, dword [esi + 0x18]
ja 0x41cad8
cmp edx, 0xffffffff
jae 0x41cad8
mov ecx, ebp
call fcn.0041d240
mov edx, dword [esi + 0x18]
mov eax, dword [esi + 0x1c]
shrd edx, eax, 0x10
jmp 0x41cae5
or edx, 0xffffffff
mov ecx, ebp
call fcn.0041d240
or edx, 0xffffffff
mov ecx, ebp
call fcn.0041d240
mov edx, dword [esi + 0x20]
mov ecx, ebp
call fcn.0041d240
mov edx, dword [esi + 0x3c]
mov ecx, dword [esi + 0x38]
test edx, edx
ja 0x41cb27
jb 0x41cb07
cmp ecx, 0xffffffff
jae 0x41cb27
cmp dword [esi + 0x1c], 0
ja 0x41cb27
jb 0x41cb15
cmp dword [esi + 0x18], 0xffffffff
jae 0x41cb27
cmp dword [esi + 0x14], 0
ja 0x41cb27
jb 0x41cb23
cmp dword [esi + 0x10], 0xffffffff
jae 0x41cb27
xor eax, eax
jmp 0x41cb3a
mov eax, 4
test edx, edx
jne 0x41cb35
cmp ecx, 0xffffffff
jb 0x41cb3a
mov eax, 0xc
cmp dword [esi + 0x14], 0
ja 0x41cb4a
cmp dword [esi + 0x10], 0xffffffff
jae 0x41cb4a
xor edi, edi
jmp 0x41cb4f
mov edi, 8
cmp dword [esi + 0x1c], 0
ja 0x41cb5f
cmp dword [esi + 0x18], 0xffffffff
jae 0x41cb5f
xor ecx, ecx
jmp 0x41cb64
mov ecx, 8
lea edx, [eax + ecx]
mov ecx, ebp
add edx, edi
add edx, dword [esi + 0x28]
call fcn.0041d240
xor edx, edx
mov ecx, ebp
call fcn.0041d240
movzx edx, word [esi + 0x2c]
mov ecx, ebp
call fcn.0041d240
movzx edx, word [esi + 0x2e]
mov ecx, ebp
call fcn.0041d240
mov edx, dword [esi + 0x34]
mov ecx, ebp
call fcn.0041d240
movzx edx, word [esi + 0x36]
mov ecx, ebp
call fcn.0041d240
cmp dword [esi + 0x3c], 0
mov edx, dword [esi + 0x38]
ja 0x41cbc8
cmp edx, 0xffffffff
jae 0x41cbc8
mov ecx, ebp
call fcn.0041d240
mov edx, dword [esi + 0x38]
mov eax, dword [esi + 0x3c]
shrd edx, eax, 0x10
jmp 0x41cbd5
or edx, 0xffffffff
mov ecx, ebp
call fcn.0041d240
or edx, 0xffffffff
mov ecx, ebp
call fcn.0041d240
push dword [esi + 0x20]
lea edx, [esi + 0x48]
mov ecx, ebp
call fcn.0041d3b0
add esp, 4
cmp dword [esi + 0x3c], 0
ja 0x41cc18
jb 0x41cbfa
cmp dword [esi + 0x38], 0xffffffff
jae 0x41cc18
cmp dword [esi + 0x1c], 0
ja 0x41cc18
jb 0x41cc08
cmp dword [esi + 0x18], 0xffffffff
jae 0x41cc18
cmp dword [esi + 0x14], 0
ja 0x41cc18
cmp dword [esi + 0x10], 0xffffffff
jb 0x41cd44
mov edx, 1
mov ecx, ebp
call fcn.0041d240
cmp dword [esi + 0x3c], 0
ja 0x41cc34
cmp dword [esi + 0x38], 0xffffffff
jae 0x41cc34
xor edi, edi
jmp 0x41cc39
mov edi, 8
cmp dword [esi + 0x14], 0
ja 0x41cc49
cmp dword [esi + 0x10], 0xffffffff
jae 0x41cc49
xor ecx, ecx
jmp 0x41cc4e
mov ecx, 8
cmp dword [esi + 0x1c], 0
ja 0x41cc5e
cmp dword [esi + 0x18], 0xffffffff
jae 0x41cc5e
xor eax, eax
jmp 0x41cc63
mov eax, 8
lea edx, [eax + ecx]
mov ecx, ebp
add edx, edi
call fcn.0041d240
cmp dword [esi + 0x1c], 0
mov edx, dword [esi + 0x18]
ja 0x41cc7d
cmp edx, 0xffffffff
jb 0x41ccb6
mov ecx, ebp
call fcn.0041d240
mov edx, dword [esi + 0x18]
mov ecx, ebp
mov eax, dword [esi + 0x1c]
shrd edx, eax, 0x10
call fcn.0041d240
mov eax, dword [esi + 0x18]
mov cl, 0x20
mov edx, dword [esi + 0x1c]
call fcn.004cd2d0
mov edx, eax
mov ecx, ebp
call fcn.0041d240
movzx edx, word [esi + 0x1e]
mov ecx, ebp
call fcn.0041d240
cmp dword [esi + 0x14], 0
mov edx, dword [esi + 0x10]
ja 0x41ccc4
cmp edx, 0xffffffff
jb 0x41ccfd
mov ecx, ebp
call fcn.0041d240
mov edx, dword [esi + 0x10]
mov ecx, ebp
mov eax, dword [esi + 0x14]
shrd edx, eax, 0x10
call fcn.0041d240
mov eax, dword [esi + 0x10]
mov cl, 0x20
mov edx, dword [esi + 0x14]
call fcn.004cd2d0
mov edx, eax
mov ecx, ebp
call fcn.0041d240
movzx edx, word [esi + 0x16]
mov ecx, ebp
call fcn.0041d240
cmp dword [esi + 0x3c], 0
mov edx, dword [esi + 0x38]
ja 0x41cd0b
cmp edx, 0xffffffff
jb 0x41cd44
mov ecx, ebp
call fcn.0041d240
mov edx, dword [esi + 0x38]
mov ecx, ebp
mov eax, dword [esi + 0x3c]
shrd edx, eax, 0x10
call fcn.0041d240
mov eax, dword [esi + 0x38]
mov cl, 0x20
mov edx, dword [esi + 0x3c]
call fcn.004cd2d0
mov edx, eax
mov ecx, ebp
call fcn.0041d240
movzx edx, word [esi + 0x3e]
mov ecx, ebp
call fcn.0041d240
mov eax, dword [esi + 0x28]
test eax, eax
je 0x41cd59
mov edx, dword [esi + 0x44]
mov ecx, ebp
push eax
call fcn.0041d3b0
add esp, 4
mov edx, dword [esi + 0x3c]
mov eax, dword [esi + 0x38]
test edx, edx
ja 0x41cd8d
jb 0x41cd6a
cmp eax, 0xffffffff
jae 0x41cd8d
cmp dword [esi + 0x1c], 0
ja 0x41cd8d
jb 0x41cd78
cmp dword [esi + 0x18], 0xffffffff
jae 0x41cd8d
cmp dword [esi + 0x14], 0
ja 0x41cd8d
jb 0x41cd86
cmp dword [esi + 0x10], 0xffffffff
jae 0x41cd8d
mov ecx, 0x2e
jmp 0x41cda0
mov ecx, 0x32
test edx, edx
jne 0x41cd9b
cmp eax, 0xffffffff
jb 0x41cda0
mov ecx, 0x3a
cmp dword [esi + 0x14], 0
ja 0x41cdb0
cmp dword [esi + 0x10], 0xffffffff
jae 0x41cdb0
xor edx, edx
jmp 0x41cdb5
mov edx, 8
cmp dword [esi + 0x1c], 0
ja 0x41cdc5
cmp dword [esi + 0x18], 0xffffffff
jae 0x41cdc5
xor eax, eax
jmp 0x41cdca
mov eax, 8
add eax, edx
add eax, ecx
add eax, dword [esi + 0x28]
add eax, dword [esi + 0x20]
add dword [ebp + 0x10], eax
push esi
adc dword [ebp + 0x14], 0
add ebx, 1
mov edi, dword [esi + 0x14c]
adc dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov esi, edi
test edi, edi
jne 0x41ca13
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
mov edi, dword [esp + 0x20]
jmp 0x41ce0e
mov edx, dword [esp + 0x34]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], ebx
test ecx, ecx
jne 0x41ce8f
cmp eax, 0xffffffff
jae 0x41ce8f
mov edx, 0x6054b50
mov ecx, ebp
call fcn.0041d240
mov edx, 0x605
mov ecx, ebp
call fcn.0041d240
xor edx, edx
mov ecx, ebp
call fcn.0041d240
xor edx, edx
mov ecx, ebp
call fcn.0041d240
mov edx, ebx
mov ecx, ebp
call fcn.0041d240
mov edx, ebx
mov ecx, ebp
call fcn.0041d240
mov esi, dword [ebp + 0x10]
mov ecx, ebp
sub esi, edi
mov edx, esi
call fcn.0041d240
shr esi, 0x10
mov ecx, ebp
mov edx, esi
call fcn.0041d240
add edi, dword [ebp + 0x18]
mov ecx, ebp
mov ebx, dword [esp + 0x24]
mov edx, edi
adc ebx, 0
call fcn.0041d240
shrd edi, ebx, 0x10
mov edx, edi
jmp 0x41d12c
add eax, dword [ebp + 0x18]
mov edx, 0x6064b50
mov ebx, dword [ebp + 0x1c]
adc ebx, ecx
mov dword [esp + 0x28], eax
mov ecx, ebp
call fcn.0041d240
mov edx, 0x606
mov ecx, ebp
call fcn.0041d240
mov edx, 0x2c
mov ecx, ebp
call fcn.0041d240
xor edx, edx
mov ecx, ebp
call fcn.0041d240
xor edx, edx
mov ecx, ebp
call fcn.0041d240
xor edx, edx
mov ecx, ebp
call fcn.0041d240
mov edx, 0xb2d
mov ecx, ebp
call fcn.0041d240
mov edx, 0x2d
mov ecx, ebp
call fcn.0041d240
xor edx, edx
mov ecx, ebp
call fcn.0041d240
xor edx, edx
mov ecx, ebp
call fcn.0041d240
xor edx, edx
mov ecx, ebp
call fcn.0041d240
xor edx, edx
mov ecx, ebp
call fcn.0041d240
mov edx, dword [esp + 0x18]
mov ecx, ebp
call fcn.0041d240
mov esi, dword [esp + 0x14]
mov ecx, ebp
mov edi, dword [esp + 0x18]
mov eax, esi
shrd edi, eax, 0x10
mov edx, edi
call fcn.0041d240
mov edx, esi
mov ecx, ebp
call fcn.0041d240
shr esi, 0x10
mov ecx, ebp
mov edx, esi
call fcn.0041d240
mov edx, dword [esp + 0x18]
mov ecx, ebp
call fcn.0041d240
mov edx, edi
mov ecx, ebp
call fcn.0041d240
mov edx, dword [esp + 0x14]
mov ecx, ebp
call fcn.0041d240
mov edx, esi
mov ecx, ebp
call fcn.0041d240
mov esi, dword [ebp + 0x10]
mov ecx, ebp
mov edi, dword [esp + 0x20]
sub esi, edi
mov eax, dword [ebp + 0x14]
mov edx, esi
sbb eax, dword [esp + 0x24]
mov dword [esp + 0x1c], eax
call fcn.0041d240
mov eax, dword [esp + 0x1c]
mov ecx, esi
shrd ecx, eax, 0x10
mov dword [esp + 0x2c], ecx
mov edx, ecx
mov ecx, ebp
call fcn.0041d240
mov edx, dword [esp + 0x1c]
mov ecx, ebp
call fcn.0041d240
mov edx, dword [esp + 0x1c]
mov ecx, ebp
shr edx, 0x10
call fcn.0041d240
add edi, dword [ebp + 0x18]
mov ecx, ebp
mov eax, dword [ebp + 0x1c]
mov edx, edi
adc eax, dword [esp + 0x24]
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], eax
call fcn.0041d240
mov ecx, edi
mov edi, dword [esp + 0x24]
mov eax, edi
shrd ecx, eax, 0x10
mov dword [esp + 0x30], ecx
mov edx, ecx
mov ecx, ebp
call fcn.0041d240
mov edx, edi
mov ecx, ebp
call fcn.0041d240
mov edx, edi
mov ecx, ebp
shr edx, 0x10
call fcn.0041d240
add dword [ebp + 0x10], 0x38
mov edx, 0x7064b50
mov ecx, ebp
adc dword [ebp + 0x14], 0
call fcn.0041d240
mov edx, 0x706
mov ecx, ebp
call fcn.0041d240
xor edx, edx
mov ecx, ebp
call fcn.0041d240
xor edx, edx
mov ecx, ebp
call fcn.0041d240
mov edi, dword [esp + 0x28]
mov ecx, ebp
mov edx, edi
call fcn.0041d240
mov eax, ebx
mov ecx, ebp
shrd edi, eax, 0x10
mov edx, edi
call fcn.0041d240
mov edx, ebx
mov ecx, ebp
call fcn.0041d240
shr ebx, 0x10
mov ecx, ebp
mov edx, ebx
call fcn.0041d240
mov edx, 1
mov ecx, ebp
call fcn.0041d240
xor edx, edx
mov ecx, ebp
call fcn.0041d240
add dword [ebp + 0x10], 0x14
mov edx, 0x6054b50
mov ecx, ebp
adc dword [ebp + 0x14], 0
call fcn.0041d240
mov edx, 0x605
mov ecx, ebp
call fcn.0041d240
xor edx, edx
mov ecx, ebp
call fcn.0041d240
xor edx, edx
mov ecx, ebp
call fcn.0041d240
cmp dword [esp + 0x14], 0
ja 0x41d0c8
mov ebx, dword [esp + 0x18]
cmp ebx, 0xff
jb 0x41d0cb
or ebx, 0xffffffff
mov edx, ebx
mov ecx, ebp
call fcn.0041d240
mov edx, ebx
mov ecx, ebp
call fcn.0041d240
cmp dword [esp + 0x1c], 0
ja 0x41d0ef
cmp esi, 0xffffffff
jae 0x41d0ef
mov edi, dword [esp + 0x2c]
jmp 0x41d0f5
or edi, 0xffffffff
or esi, 0xffffffff
mov edx, esi
mov ecx, ebp
call fcn.0041d240
mov edx, edi
mov ecx, ebp
call fcn.0041d240
cmp dword [esp + 0x24], 0
ja 0x41d11d
mov edx, dword [esp + 0x20]
cmp edx, 0xffffffff
jae 0x41d11d
mov esi, dword [esp + 0x30]
jmp 0x41d123
or esi, 0xffffffff
or edx, 0xffffffff
mov ecx, ebp
call fcn.0041d240
mov edx, esi
mov ecx, ebp
call fcn.0041d240
xor edx, edx
mov ecx, ebp
call fcn.0041d240
add dword [ebp + 0x10], 0x16
adc dword [ebp + 0x14], 0
or dword [ebp], 8
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret