Function at 0x41734f
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x38
push ebx
mov ebx, dword [esp + 0x40]
push ebp
push esi
mov esi, ecx
cmp byte [ebx + 0x2c], 0
lea ebp, [ebx + 4]
push edi
mov dword [esp + 0x24], esi
lea edi, [ebx + 0x18]
mov dword [esp + 0x10], ebp
jne 0x417385
lea eax, [ebx + 0x30]
mov byte [ebx + 0x2c], 1
push eax
push edi
push ebp
call fcn.00413f1f
test al, al
je 0x417395
jmp 0x417389
mov dword [esp + 0x10], ebp
mov eax, dword [ebx + 0x24]
mov ecx, dword [edi]
add eax, ecx
cmp dword [ebp], eax
jle 0x4173a3
mov byte [ebx + 0x4ad0], 1
xor al, al
jmp 0x417d45
mov eax, dword [ebx + 0x20]
mov ebp, dword [ebx + 0x4acc]
dec eax
add eax, ecx
sub ebp, 0x10
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ebp
mov dword [esp + 0x2c], eax
cmp eax, ebp
jl 0x4173c6
mov dword [esp + 0x2c], ebp
mov ecx, dword [esp + 0x10]
jmp 0x4173d4
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x14]
mov edx, dword [esi + 0x7c]
mov edi, dword [esi + 0xe6dc]
and edx, edi
mov dword [esi + 0x7c], edx
mov ecx, dword [ecx]
cmp ecx, dword [esp + 0x2c]
jl 0x41741d
cmp ecx, eax
jg 0x417d43
jne 0x417400
mov eax, dword [ebx + 8]
cmp eax, dword [ebx + 0x1c]
jge 0x417d43
cmp ecx, ebp
jl 0x417411
cmp byte [ebx + 0x4ad2], 0
je 0x417d3c
cmp ecx, dword [ebx + 0x4acc]
jge 0x417d3c
mov ecx, dword [esi + 0x4b3c]
mov eax, ecx
sub eax, edx
and eax, edi
cmp eax, 0x1004
jae 0x417461
cmp ecx, edx
je 0x417461
mov ecx, esi
call fcn.00414d62
mov eax, dword [esi + 0x4c5c]
cmp eax, dword [esi + 0x4c4c]
jg 0x41739c
jl 0x417461
mov eax, dword [esi + 0x4c58]
cmp eax, dword [esi + 0x4c48]
ja 0x41739c
mov edi, dword [esp + 0x10]
mov ecx, edi
call fcn.0040a88d
mov edx, eax
mov eax, dword [ebx + 0xb4]
and edx, 0xfffe
cmp edx, dword [ebx + eax*4 + 0x34]
jae 0x4174b1
push 0x10
pop ecx
sub ecx, eax
shr edx, cl
mov ecx, edi
movzx ebp, byte [edx + ebx + 0xb8]
add ebp, dword [ecx + 4]
mov eax, ebp
shr eax, 3
add dword [ecx], eax
and ebp, 7
mov eax, dword [ecx]
mov dword [ecx + 4], ebp
movzx edx, word [ebx + edx*2 + 0x4b8]
mov dword [esp + 0x1c], eax
jmp 0x417520
push 0xf
pop ecx
inc eax
mov dword [esp + 0x28], ecx
cmp eax, ecx
jae 0x4174dc
lea ecx, [eax + 0xd]
lea ecx, [ebx + ecx*4]
cmp edx, dword [ecx]
jb 0x4174d6
inc eax
add ecx, 4
cmp eax, 0xf
jb 0x4174c3
mov ecx, dword [esp + 0x28]
jmp 0x4174dc
mov ecx, eax
mov dword [esp + 0x28], eax
mov ebp, dword [edi + 4]
add ebp, ecx
mov eax, ebp
and ebp, 7
shr eax, 3
add dword [edi], eax
mov eax, dword [edi]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x28]
mov dword [edi + 4], ebp
push 0x10
pop ecx
sub edx, dword [ebx + eax*4 + 0x30]
sub ecx, eax
shr edx, cl
mov ecx, dword [ebx + eax*4 + 0x74]
add ecx, edx
cmp ecx, dword [ebx + 0x30]
sbb eax, eax
and eax, ecx
mov ecx, dword [esp + 0x10]
movzx edx, word [ebx + eax*2 + 0xcb8]
mov eax, dword [esp + 0x1c]
movzx edx, dx
mov edi, 0x100
cmp edx, edi
jae 0x417548
mov eax, dword [esi + 0x7c]
mov ecx, dword [esi + 0x4b40]
mov byte [ecx + eax], dl
inc dword [esi + 0x7c]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
jmp 0x4173d0
cmp edx, 0x106
jb 0x4179e0
lea edi, [edx - 0x106]
cmp edi, 8
jae 0x4175c9
mov dword [esp + 0x1c], eax
add edi, 2
mov eax, dword [esp + 0x10]
mov ecx, eax
call fcn.0040a88d
mov edx, eax
mov eax, dword [ebx + 0xfa0]
and edx, 0xfffe
cmp edx, dword [ebx + eax*4 + 0xf20]
jae 0x41761c
push 0x10
pop ecx
sub ecx, eax
shr edx, cl
movzx ecx, byte [edx + ebx + 0xfa4]
add ecx, ebp
mov ebp, dword [esp + 0x1c]
mov eax, ecx
shr eax, 3
add ebp, eax
mov eax, dword [esp + 0x10]
and ecx, 7
mov dword [esp + 0x20], ebp
mov dword [esp + 0x1c], ecx
mov dword [eax], ebp
mov dword [eax + 4], ecx
movzx eax, word [ebx + edx*2 + 0x13a4]
jmp 0x417692
mov eax, edi
and edi, 3
shr eax, 2
or edi, 4
dec eax
mov ecx, eax
mov dword [esp + 0x34], eax
shl edi, cl
add edi, 2
test eax, eax
je 0x417566
mov ecx, dword [esp + 0x10]
call fcn.0040a88d
add ebp, dword [esp + 0x34]
push 0x10
pop ecx
sub ecx, dword [esp + 0x34]
shr eax, cl
mov ecx, dword [esp + 0x1c]
add edi, eax
mov eax, ebp
shr eax, 3
add ecx, eax
mov eax, dword [esp + 0x10]
and ebp, 7
mov dword [esp + 0x1c], ecx
mov dword [eax], ecx
mov dword [eax + 4], ebp
jmp 0x41756a
push 0xf
pop ebp
inc eax
mov dword [esp + 0x28], ebp
cmp eax, ebp
jae 0x417643
lea ecx, [eax + 0x3c8]
lea ecx, [ebx + ecx*4]
cmp edx, dword [ecx]
jb 0x41763f
inc eax
add ecx, 4
cmp eax, ebp
jb 0x417631
jmp 0x417643
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x10]
push 0x10
mov ebp, dword [ecx + 4]
add ebp, dword [esp + 0x2c]
mov eax, ebp
and ebp, 7
shr eax, 3
add dword [ecx], eax
mov eax, dword [ecx]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x2c]
mov dword [ecx + 4], ebp
pop ecx
sub ecx, eax
mov dword [esp + 0x1c], ebp
sub edx, dword [ebx + eax*4 + 0xf1c]
shr edx, cl
mov ecx, dword [ebx + eax*4 + 0xf60]
add ecx, edx
cmp ecx, dword [ebx + 0xf1c]
sbb eax, eax
and eax, ecx
movzx eax, word [ebx + eax*2 + 0x1ba4]
movzx edx, ax
cmp edx, 4
jae 0x4176a2
lea ebp, [edx + 1]
jmp 0x417825
mov eax, edx
and edx, 1
shr eax, 1
or edx, 2
dec eax
mov ecx, eax
mov dword [esp + 0x30], eax
shl edx, cl
lea ecx, [edx + 1]
mov dword [esp + 0x34], ecx
mov ebp, ecx
mov dword [esp + 0x28], ebp
test eax, eax
je 0x417829
cmp eax, 4
jb 0x4177f0
jbe 0x41771c
mov ecx, dword [esp + 0x10]
call fcn.00418494
mov edx, dword [esp + 0x20]
mov ebp, eax
mov eax, dword [esp + 0x30]
push 0x24
pop ecx
sub ecx, eax
add eax, 0xfffffffc
shr ebp, cl
mov ecx, dword [esp + 0x1c]
add ecx, eax
shl ebp, 4
add ebp, dword [esp + 0x34]
mov eax, ecx
shr eax, 3
add edx, eax
mov eax, dword [esp + 0x10]
and ecx, 7
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], ecx
mov dword [eax], edx
mov dword [eax + 4], ecx
jmp 0x417720
mov eax, dword [esp + 0x10]
mov ecx, eax
call fcn.0040a88d
mov edx, eax
mov eax, dword [ebx + 0x1e8c]
and edx, 0xfffe
cmp edx, dword [ebx + eax*4 + 0x1e0c]
jae 0x417772
mov esi, dword [esp + 0x10]
push 0x10
pop ecx
sub ecx, eax
shr edx, cl
movzx ecx, byte [edx + ebx + 0x1e90]
add ecx, dword [esp + 0x1c]
mov eax, ecx
shr eax, 3
add eax, dword [esp + 0x20]
and ecx, 7
mov dword [esi], eax
mov eax, esi
mov dword [eax + 4], ecx
movzx eax, word [ebx + edx*2 + 0x2290]
jmp 0x4177e5
push 0xf
pop ecx
inc eax
mov dword [esp + 0x28], ecx
cmp eax, ecx
jae 0x41779a
lea ecx, [eax + 0x783]
lea ecx, [ebx + ecx*4]
cmp edx, dword [ecx]
jb 0x417796
inc eax
add ecx, 4
cmp eax, 0xf
jb 0x417787
jmp 0x41779a
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x10]
push 0x10
mov ecx, dword [eax + 4]
add ecx, dword [esp + 0x2c]
mov eax, ecx
and ecx, 7
shr eax, 3
add dword [esi], eax
mov eax, esi
mov dword [eax + 4], ecx
mov eax, dword [esp + 0x2c]
pop ecx
sub ecx, eax
sub edx, dword [ebx + eax*4 + 0x1e08]
shr edx, cl
mov ecx, dword [ebx + eax*4 + 0x1e4c]
add ecx, edx
cmp ecx, dword [ebx + 0x1e08]
sbb eax, eax
and eax, ecx
movzx eax, word [ebx + eax*2 + 0x2a90]
mov esi, dword [esp + 0x24]
movzx eax, ax
add ebp, eax
jmp 0x417825
mov ecx, dword [esp + 0x10]
call fcn.00418494
mov edx, dword [esp + 0x10]
mov ebp, eax
push 0x20
pop ecx
sub ecx, dword [esp + 0x30]
shr ebp, cl
mov ecx, dword [esp + 0x1c]
add ecx, dword [esp + 0x30]
add ebp, dword [esp + 0x34]
mov eax, ecx
shr eax, 3
add eax, dword [esp + 0x20]
and ecx, 7
mov dword [edx], eax
mov dword [edx + 4], ecx
mov dword [esp + 0x28], ebp
cmp ebp, 0x100
jbe 0x417844
inc edi
cmp ebp, 0x2000
jbe 0x417844
inc edi
cmp ebp, 0x40000
jbe 0x417844
inc edi
mov eax, dword [esi + 0x68]
mov dword [esi + 0x6c], eax
mov eax, dword [esi + 0x64]
mov dword [esi + 0x68], eax
mov eax, dword [esi + 0x60]
mov dword [esi + 0x64], eax
mov dword [esi + 0x60], ebp
mov edx, dword [esi + 0x7c]
mov ecx, edx
mov eax, dword [esi + 0xe6d8]
sub ecx, ebp
add eax, 0xffffeffc
mov dword [esi + 0x74], edi
mov dword [esp + 0x34], ecx
cmp ecx, eax
jae 0x41799a
cmp edx, eax
jae 0x41799a
mov eax, dword [esi + 0x4b40]
push 8
lea ebp, [eax + edx]
lea ebx, [eax + ecx]
lea eax, [edx + edi]
pop edx
mov dword [esi + 0x7c], eax
cmp edi, edx
jb 0x41790a
cmp dword [esp + 0x28], edi
jae 0x4178e2
mov ecx, edi
shr ecx, 3
mov al, byte [ebx]
sub edi, edx
mov byte [ebp], al
mov al, byte [ebx + 1]
mov byte [ebp + 1], al
mov al, byte [ebx + 2]
mov byte [ebp + 2], al
mov al, byte [ebx + 3]
mov byte [ebp + 3], al
mov al, byte [ebx + 4]
mov byte [ebp + 4], al
mov al, byte [ebx + 5]
mov byte [ebp + 5], al
mov al, byte [ebx + 6]
mov byte [ebp + 6], al
mov al, byte [ebx + 7]
add ebx, edx
mov byte [ebp + 7], al
add ebp, edx
sub ecx, 1
jne 0x4178a6
jmp 0x41790a
mov eax, edi
shr eax, 3
mov dword [esp + 0x34], eax
mov esi, eax
push edx
push ebx
push ebp
call fcn.0041fb30
add esp, 0xc
push 8
pop edx
add ebx, edx
add ebp, edx
sub edi, edx
sub esi, 1
jne 0x4178ed
mov esi, dword [esp + 0x24]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
test edi, edi
je 0x4173cc
mov al, byte [ebx]
mov byte [ebp], al
mov eax, dword [esp + 0x18]
cmp edi, 1
jbe 0x4173cc
mov al, byte [ebx + 1]
mov byte [ebp + 1], al
mov eax, dword [esp + 0x18]
cmp edi, 2
jbe 0x4173cc
mov al, byte [ebx + 2]
mov byte [ebp + 2], al
mov eax, dword [esp + 0x18]
cmp edi, 3
jbe 0x4173cc
mov al, byte [ebx + 3]
mov byte [ebp + 3], al
mov eax, dword [esp + 0x18]
cmp edi, 4
jbe 0x4173cc
mov al, byte [ebx + 4]
mov byte [ebp + 4], al
mov eax, dword [esp + 0x18]
cmp edi, 5
jbe 0x4173cc
mov al, byte [ebx + 5]
mov byte [ebp + 5], al
mov eax, dword [esp + 0x18]
cmp edi, 6
jbe 0x4173cc
mov al, byte [ebx + 6]
mov ebx, dword [esp + 0x4c]
mov byte [ebp + 6], al
jmp 0x41753b
mov ecx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
test edi, edi
je 0x4173d4
mov eax, dword [esi + 0xe6dc]
mov ebp, dword [esp + 0x34]
mov ecx, dword [esi + 0x4b40]
and eax, ebp
inc ebp
mov al, byte [eax + ecx]
mov byte [ecx + edx], al
mov edx, dword [esi + 0x7c]
mov eax, dword [esi + 0xe6dc]
inc edx
and edx, eax
mov dword [esi + 0x7c], edx
sub edi, 1
jne 0x4179b8
jmp 0x41753b
cmp edx, edi
jne 0x417a12
lea eax, [esp + 0x38]
push eax
push ecx
mov ecx, esi
call fcn.00413afd
test al, al
je 0x417d43
lea eax, [esp + 0x38]
mov ecx, esi
push eax
call fcn.0041209e
test al, al
je 0x417d43
jmp 0x41753b
cmp edx, 0x101
jne 0x417b12
mov edi, dword [esi + 0x74]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
test edi, edi
je 0x4173d4
mov edx, dword [esi + 0x7c]
mov ebp, edx
mov eax, dword [esi + 0xe6d8]
mov ecx, dword [esi + 0x60]
add eax, 0xffffeffc
sub ebp, ecx
cmp ebp, eax
jae 0x417ae4
cmp edx, eax
jae 0x417ae4
mov eax, dword [esi + 0x4b40]
push 8
lea ebx, [eax + ebp]
lea ebp, [eax + edx]
lea eax, [edx + edi]
pop edx
mov dword [esi + 0x7c], eax
cmp edi, edx
jb 0x41790a
cmp ecx, edi
jae 0x417abb
mov ecx, edi
shr ecx, 3
mov al, byte [ebx]
sub edi, edx
mov byte [ebp], al
mov al, byte [ebx + 1]
mov byte [ebp + 1], al
mov al, byte [ebx + 2]
mov byte [ebp + 2], al
mov al, byte [ebx + 3]
mov byte [ebp + 3], al
mov al, byte [ebx + 4]
mov byte [ebp + 4], al
mov al, byte [ebx + 5]
mov byte [ebp + 5], al
mov al, byte [ebx + 6]
mov byte [ebp + 6], al
mov al, byte [ebx + 7]
add ebx, edx
mov byte [ebp + 7], al
add ebp, edx
sub ecx, 1
jne 0x417a7c
jmp 0x41790a
mov eax, edi
shr eax, 3
mov dword [esp + 0x34], eax
mov esi, eax
push edx
push ebx
push ebp
call fcn.0041fb30
add esp, 0xc
push 8
pop edx
add ebx, edx
add ebp, edx
sub edi, edx
sub esi, 1
jne 0x417ac6
jmp 0x417906
mov eax, dword [esi + 0xe6dc]
mov ecx, dword [esi + 0x4b40]
and eax, ebp
inc ebp
mov al, byte [eax + ecx]
mov byte [ecx + edx], al
mov edx, dword [esi + 0x7c]
mov eax, dword [esi + 0xe6dc]
inc edx
and edx, eax
mov dword [esi + 0x7c], edx
sub edi, 1
jne 0x417aea
jmp 0x41753b
add edx, 0xfffffefe
lea ecx, [edx + 0x18]
lea ecx, [esi + ecx*4]
mov ebp, dword [ecx]
mov dword [esp + 0x28], ebp
je 0x417b33
mov eax, dword [ecx - 4]
mov dword [ecx], eax
lea ecx, [ecx - 4]
sub edx, 1
jne 0x417b26
mov dword [esi + 0x60], ebp
mov ebp, dword [esp + 0x10]
mov ecx, ebp
call fcn.0040a88d
mov edx, eax
mov eax, dword [ebx + 0x2d78]
and edx, 0xfffe
cmp edx, dword [ebx + eax*4 + 0x2cf8]
jae 0x417b8d
push 0x10
pop ecx
sub ecx, eax
shr edx, cl
movzx ecx, byte [edx + ebx + 0x2d7c]
add ecx, dword [ebp + 4]
mov eax, ecx
shr eax, 3
add dword [ebp], eax
and ecx, 7
mov eax, dword [ebp]
mov dword [esp + 0x30], eax
mov dword [ebp + 4], ecx
movzx eax, word [ebx + edx*2 + 0x317c]
mov dword [esp + 0x34], ecx
jmp 0x417bf6
push 0xf
pop edi
inc eax
cmp eax, edi
jae 0x417baf
lea ecx, [eax + 0xb3e]
lea ecx, [ebx + ecx*4]
cmp edx, dword [ecx]
jb 0x417bad
inc eax
add ecx, 4
cmp eax, 0xf
jb 0x417b9e
jmp 0x417baf
mov edi, eax
mov ecx, dword [ebp + 4]
add ecx, edi
mov eax, ecx
and ecx, 7
mov dword [ebp + 4], ecx
shr eax, 3
add dword [ebp], eax
sub edx, dword [ebx + edi*4 + 0x2cf4]
mov eax, dword [ebp]
mov dword [esp + 0x34], ecx
push 0x10
pop ecx
sub ecx, edi
mov dword [esp + 0x30], eax
shr edx, cl
mov ecx, dword [ebx + edi*4 + 0x2d38]
add ecx, edx
cmp ecx, dword [ebx + 0x2cf4]
sbb eax, eax
and eax, ecx
movzx eax, word [ebx + eax*2 + 0x397c]
movzx edi, ax
cmp edi, 8
jae 0x417c03
add edi, 2
jmp 0x417c47
mov ebp, edi
and edi, 3
shr ebp, 2
or edi, 4
dec ebp
mov ecx, ebp
shl edi, cl
add edi, 2
test ebp, ebp
je 0x417c47
mov ecx, dword [esp + 0x10]
call fcn.0040a88d
mov edx, dword [esp + 0x10]
push 0x10
pop ecx
sub ecx, ebp
shr eax, cl
mov ecx, dword [esp + 0x34]
add edi, eax
add ecx, ebp
mov eax, ecx
shr eax, 3
add eax, dword [esp + 0x30]
and ecx, 7
mov dword [edx], eax
mov dword [edx + 4], ecx
mov edx, dword [esi + 0x7c]
mov ebp, edx
mov eax, dword [esi + 0xe6d8]
mov ecx, dword [esp + 0x28]
add eax, 0xffffeffc
sub ebp, ecx
mov dword [esi + 0x74], edi
cmp ebp, eax
jae 0x417cfe
cmp edx, eax
jae 0x417cfe
mov eax, dword [esi + 0x4b40]
push 8
lea ebx, [eax + ebp]
lea ebp, [eax + edx]
lea eax, [edx + edi]
pop edx
mov dword [esi + 0x7c], eax
cmp edi, edx
jb 0x41790a
cmp ecx, edi
jae 0x417cd5
mov ecx, edi
shr ecx, 3
mov al, byte [ebx]
sub edi, edx
mov byte [ebp], al
mov al, byte [ebx + 1]
mov byte [ebp + 1], al
mov al, byte [ebx + 2]
mov byte [ebp + 2], al
mov al, byte [ebx + 3]
mov byte [ebp + 3], al
mov al, byte [ebx + 4]
mov byte [ebp + 4], al
mov al, byte [ebx + 5]
mov byte [ebp + 5], al
mov al, byte [ebx + 6]
mov byte [ebp + 6], al
mov al, byte [ebx + 7]
add ebx, edx
mov byte [ebp + 7], al
add ebp, edx
sub ecx, 1
jne 0x417c96
jmp 0x41790a
mov eax, edi
shr eax, 3
mov dword [esp + 0x34], eax
mov esi, eax
push edx
push ebx
push ebp
call fcn.0041fb30
add esp, 0xc
push 8
pop edx
add ebx, edx
add ebp, edx
sub edi, edx
sub esi, 1
jne 0x417ce0
jmp 0x417906
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
test edi, edi
je 0x4173d0
mov eax, dword [esi + 0xe6dc]
mov ecx, dword [esi + 0x4b40]
and eax, ebp
inc ebp
mov al, byte [eax + ecx]
mov byte [ecx + edx], al
mov edx, dword [esi + 0x7c]
mov eax, dword [esi + 0xe6dc]
inc edx
and edx, eax
mov dword [esi + 0x7c], edx
sub edi, 1
jne 0x417d14
jmp 0x41753b
mov byte [ebx + 0x4ad3], 1
mov al, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x38
ret 4