Function at 0x40eca0
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x40f00c
sub esp, 0x38
mov eax, dword [esp + 0x40]
test eax, eax
je 0x40eff2
movzx ecx, byte [eax + 4]
test cl, 4
jne 0x40efda
mov ecx, dword [esp + 0x3c]
mov ebx, dword [ecx + 0x20]
mov ebx, dword [ebx + 0x10]
mov edx, dword [ebx]
mov ebx, dword [eax + 8]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x44]
mov dword [esp], ebx
mov ebx, dword [edx]
call ebx
mov eax, dword [esp + 8]
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x40]
movzx ebx, byte [ecx + 4]
or ebx, 4
mov byte [ecx + 4], bl
mov ebx, dword [ecx + 0xc]
test ebx, ebx
je 0x40ef83
mov edx, dword [esp + 0x3c]
jmp 0x40ee75
lea edx, [ebp + 1]
mov ebp, dword [esp + 0x40]
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x18]
cmp ebp, 8
jae 0x40edf1
test byte [ebx], al
movzx edx, byte [ebx + ebp]
xchg esi, eax
cmp al, dl
xchg esi, eax
je 0x40ed50
test dl, dl
jne 0x40ed1a
test eax, eax
jne 0x40ed1a
mov eax, ebx
mov edi, ebp
jmp 0x40ed1a
mov edx, ebx
lea ebx, [ebx + ebp*8 + 8]
mov dword [esp + 0x30], ebx
mov ebx, dword [ebx + 4]
mov esi, dword [esp + 0x48]
cmp ebx, esi
je 0x40ed6e
mov ebx, edx
movzx esi, byte [esp + 0x13]
jmp 0x40ed1a
mov ebx, dword [esp + 0x30]
mov ebx, dword [ebx]
mov ecx, dword [esp + 0x44]
cmp ebx, ecx
je 0x40edbb
mov dword [esp + 0x14], edi
mov dword [esp + 0x2c], eax
mov dword [esp + 8], esi
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.004021e0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x40edbb
mov ecx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0x18]
movzx esi, byte [esp + 0x13]
mov eax, dword [esp + 0x2c]
mov edi, dword [esp + 0x14]
jmp 0x40ed1a
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x3c]
movzx edx, byte [edx + 0x2e]
imul edx, ecx
mov ecx, dword [esp + 0x40]
movzx ebx, byte [ecx + 4]
lea eax, [edx + eax + 0x48]
test bl, 4
je 0x40efc2
and ebx, 0xfffffffb
mov byte [ecx + 4], bl
mov dword [esp + 0x4c], eax
add esp, 0x38
ret
movzx ebp, word [edx + 0x30]
lea ebx, [ebx + ebp - 4]
mov ebx, dword [ebx]
test ebx, ebx
je 0x40ee1a
mov ebp, dword [esp + 0x40]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x24], eax
xor eax, eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x24]
jmp 0x40ed29
mov ebx, dword [esp + 0x40]
mov ebp, dword [ebx + 0x10]
test ebp, ebp
jne 0x40eee1
mov ebp, dword [ebx]
inc ebp
movzx esi, byte [ebx + 5]
cmp ebp, 8
jle 0x40ef48
mov ecx, esi
mov edx, 1
shl edx, cl
shr edx, 1
lea esi, [edx + edx*2]
lea edx, [edx + esi*4]
cmp ebp, edx
seta dl
test dl, dl
je 0x40eec0
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
mov dword [esp + 4], ebx
call fcn.0040c050
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x3c]
mov eax, ecx
mov ecx, dword [esp + 0x40]
movzx ebx, byte [ecx + 5]
mov ebp, ecx
mov ecx, ebx
mov esi, 1
shl esi, cl
lea ebx, [esi - 1]
and ebx, eax
mov esi, dword [ebp + 0x10]
test esi, esi
jne 0x40ef5a
movzx esi, word [edx + 0x30]
imul ebx, esi
add ebx, dword [ebp + 0xc]
mov esi, eax
shr eax, 0x18
cmp al, 4
jae 0x40ef51
mov ecx, esi
lea esi, [eax + 4]
xchg esi, eax
mov byte [esp + 0x13], al
xchg esi, eax
xor eax, eax
xor edi, edi
jmp 0x40ee03
movzx edx, word [ebx + 6]
cmp cl, 0xf
jbe 0x40eece
mov ecx, 0xf
and ecx, 0xf
mov ebp, 1
shl ebp, cl
cmp dx, bp
jae 0x40ee53
test eax, eax
je 0x40ef24
test byte [eax], al
mov ecx, edi
and edi, 7
movzx edx, byte [esp + 0x13]
mov byte [eax + edi], dl
mov edx, eax
lea edi, [eax + ecx*8 + 8]
mov ebp, dword [esp + 0x48]
mov eax, dword [esp + 0x44]
mov dword [edi + 4], ebp
mov ebp, dword [0xbc7270]
test ebp, ebp
jne 0x40ef1d
mov dword [edi], eax
mov ebp, dword [ebx]
inc ebp
mov dword [ebx], ebp
mov eax, edx
jmp 0x40edc3
call fcn.0044cc20
jmp 0x40ef11
mov dword [esp], ebx
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 8], ecx
call fcn.0040a5d0
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x40]
xor edi, edi
jmp 0x40eee5
mov ecx, esi
xor edx, edx
jmp 0x40ee4f
mov ecx, esi
mov esi, eax
jmp 0x40eeb1
mov dword [esp + 0x20], ebx
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
call fcn.0040f260
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0x40]
jmp 0x40ee94
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0x28]
mov dword [esp], ecx
call fcn.00409dc0
mov eax, dword [0xbc7270]
mov ecx, dword [esp + 4]
test eax, eax
jne 0x40efb2
mov edx, dword [esp + 0x40]
mov dword [edx + 0xc], ecx
mov eax, dword [esp + 0x1c]
mov ecx, edx
jmp 0x40ed11
mov edx, dword [esp + 0x40]
lea edi, [edx + 0xc]
mov eax, ecx
call fcn.0044cc20
jmp 0x40efa7
lea eax, [0x7e3125]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.00427a40
ud2
lea eax, [0x7e3125]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.00427a40
ud2
lea eax, [0x78aba0]
mov dword [esp], eax
lea eax, [0x8f7950]
mov dword [esp + 4], eax
call fcn.00427510
ud2
call fcn.0044b4c0
jmp fcn.0040eca0