Function at 0x4173cf
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x38
push ebx
mov ebx, dword [esp + 0x40]
push ebp
push esi
mov esi, ecx
cmp byte [ebx + 0x2c], 0
lea ebp, [ebx + 4]
push edi
mov dword [esp + 0x24], esi
lea edi, [ebx + 0x18]
mov dword [esp + 0x10], ebp
jne 0x417405
lea eax, [ebx + 0x30]
mov byte [ebx + 0x2c], 1
push eax
push edi
push ebp
call fcn.00413f9f
test al, al
je 0x417415
jmp 0x417409
mov dword [esp + 0x10], ebp
mov eax, dword [ebx + 0x24]
mov ecx, dword [edi]
add eax, ecx
cmp dword [ebp], eax
jle 0x417423
mov byte [ebx + 0x4ad0], 1
xor al, al
jmp 0x417dc5
mov eax, dword [ebx + 0x20]
mov ebp, dword [ebx + 0x4acc]
dec eax
add eax, ecx
sub ebp, 0x10
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ebp
mov dword [esp + 0x2c], eax
cmp eax, ebp
jl 0x417446
mov dword [esp + 0x2c], ebp
mov ecx, dword [esp + 0x10]
jmp 0x417454
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x14]
mov edx, dword [esi + 0x7c]
mov edi, dword [esi + 0xe6dc]
and edx, edi
mov dword [esi + 0x7c], edx
mov ecx, dword [ecx]
cmp ecx, dword [esp + 0x2c]
jl 0x41749d
cmp ecx, eax
jg 0x417dc3
jne 0x417480
mov eax, dword [ebx + 8]
cmp eax, dword [ebx + 0x1c]
jge 0x417dc3
cmp ecx, ebp
jl 0x417491
cmp byte [ebx + 0x4ad2], 0
je 0x417dbc
cmp ecx, dword [ebx + 0x4acc]
jge 0x417dbc
mov ecx, dword [esi + 0x4b3c]
mov eax, ecx
sub eax, edx
and eax, edi
cmp eax, 0x1004
jae 0x4174e1
cmp ecx, edx
je 0x4174e1
mov ecx, esi
call fcn.00414de2
mov eax, dword [esi + 0x4c5c]
cmp eax, dword [esi + 0x4c4c]
jg 0x41741c
jl 0x4174e1
mov eax, dword [esi + 0x4c58]
cmp eax, dword [esi + 0x4c48]
ja 0x41741c
mov edi, dword [esp + 0x10]
mov ecx, edi
call fcn.0040a86d
mov edx, eax
mov eax, dword [ebx + 0xb4]
and edx, 0xfffe
cmp edx, dword [ebx + eax*4 + 0x34]
jae 0x417531
push 0x10
pop ecx
sub ecx, eax
shr edx, cl
mov ecx, edi
movzx ebp, byte [edx + ebx + 0xb8]
add ebp, dword [ecx + 4]
mov eax, ebp
shr eax, 3
add dword [ecx], eax
and ebp, 7
mov eax, dword [ecx]
mov dword [ecx + 4], ebp
movzx edx, word [ebx + edx*2 + 0x4b8]
mov dword [esp + 0x1c], eax
jmp 0x4175a0
push 0xf
pop ecx
inc eax
mov dword [esp + 0x28], ecx
cmp eax, ecx
jae 0x41755c
lea ecx, [eax + 0xd]
lea ecx, [ebx + ecx*4]
cmp edx, dword [ecx]
jb 0x417556
inc eax
add ecx, 4
cmp eax, 0xf
jb 0x417543
mov ecx, dword [esp + 0x28]
jmp 0x41755c
mov ecx, eax
mov dword [esp + 0x28], eax
mov ebp, dword [edi + 4]
add ebp, ecx
mov eax, ebp
and ebp, 7
shr eax, 3
add dword [edi], eax
mov eax, dword [edi]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x28]
mov dword [edi + 4], ebp
push 0x10
pop ecx
sub edx, dword [ebx + eax*4 + 0x30]
sub ecx, eax
shr edx, cl
mov ecx, dword [ebx + eax*4 + 0x74]
add ecx, edx
cmp ecx, dword [ebx + 0x30]
sbb eax, eax
and eax, ecx
mov ecx, dword [esp + 0x10]
movzx edx, word [ebx + eax*2 + 0xcb8]
mov eax, dword [esp + 0x1c]
movzx edx, dx
mov edi, 0x100
cmp edx, edi
jae 0x4175c8
mov eax, dword [esi + 0x7c]
mov ecx, dword [esi + 0x4b40]
mov byte [ecx + eax], dl
inc dword [esi + 0x7c]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
jmp 0x417450
cmp edx, 0x106
jb 0x417a60
lea edi, [edx - 0x106]
cmp edi, 8
jae 0x417649
mov dword [esp + 0x1c], eax
add edi, 2
mov eax, dword [esp + 0x10]
mov ecx, eax
call fcn.0040a86d
mov edx, eax
mov eax, dword [ebx + 0xfa0]
and edx, 0xfffe
cmp edx, dword [ebx + eax*4 + 0xf20]
jae 0x41769c
push 0x10
pop ecx
sub ecx, eax
shr edx, cl
movzx ecx, byte [edx + ebx + 0xfa4]
add ecx, ebp
mov ebp, dword [esp + 0x1c]
mov eax, ecx
shr eax, 3
add ebp, eax
mov eax, dword [esp + 0x10]
and ecx, 7
mov dword [esp + 0x20], ebp
mov dword [esp + 0x1c], ecx
mov dword [eax], ebp
mov dword [eax + 4], ecx
movzx eax, word [ebx + edx*2 + 0x13a4]
jmp 0x417712
mov eax, edi
and edi, 3
shr eax, 2
or edi, 4
dec eax
mov ecx, eax
mov dword [esp + 0x34], eax
shl edi, cl
add edi, 2
test eax, eax
je 0x4175e6
mov ecx, dword [esp + 0x10]
call fcn.0040a86d
add ebp, dword [esp + 0x34]
push 0x10
pop ecx
sub ecx, dword [esp + 0x34]
shr eax, cl
mov ecx, dword [esp + 0x1c]
add edi, eax
mov eax, ebp
shr eax, 3
add ecx, eax
mov eax, dword [esp + 0x10]
and ebp, 7
mov dword [esp + 0x1c], ecx
mov dword [eax], ecx
mov dword [eax + 4], ebp
jmp 0x4175ea
push 0xf
pop ebp
inc eax
mov dword [esp + 0x28], ebp
cmp eax, ebp
jae 0x4176c3
lea ecx, [eax + 0x3c8]
lea ecx, [ebx + ecx*4]
cmp edx, dword [ecx]
jb 0x4176bf
inc eax
add ecx, 4
cmp eax, ebp
jb 0x4176b1
jmp 0x4176c3
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x10]
push 0x10
mov ebp, dword [ecx + 4]
add ebp, dword [esp + 0x2c]
mov eax, ebp
and ebp, 7
shr eax, 3
add dword [ecx], eax
mov eax, dword [ecx]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x2c]
mov dword [ecx + 4], ebp
pop ecx
sub ecx, eax
mov dword [esp + 0x1c], ebp
sub edx, dword [ebx + eax*4 + 0xf1c]
shr edx, cl
mov ecx, dword [ebx + eax*4 + 0xf60]
add ecx, edx
cmp ecx, dword [ebx + 0xf1c]
sbb eax, eax
and eax, ecx
movzx eax, word [ebx + eax*2 + 0x1ba4]
movzx edx, ax
cmp edx, 4
jae 0x417722
lea ebp, [edx + 1]
jmp 0x4178a5
mov eax, edx
and edx, 1
shr eax, 1
or edx, 2
dec eax
mov ecx, eax
mov dword [esp + 0x30], eax
shl edx, cl
lea ecx, [edx + 1]
mov dword [esp + 0x34], ecx
mov ebp, ecx
mov dword [esp + 0x28], ebp
test eax, eax
je 0x4178a9
cmp eax, 4
jb 0x417870
jbe 0x41779c
mov ecx, dword [esp + 0x10]
call fcn.00418514
mov edx, dword [esp + 0x20]
mov ebp, eax
mov eax, dword [esp + 0x30]
push 0x24
pop ecx
sub ecx, eax
add eax, 0xfffffffc
shr ebp, cl
mov ecx, dword [esp + 0x1c]
add ecx, eax
shl ebp, 4
add ebp, dword [esp + 0x34]
mov eax, ecx
shr eax, 3
add edx, eax
mov eax, dword [esp + 0x10]
and ecx, 7
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], ecx
mov dword [eax], edx
mov dword [eax + 4], ecx
jmp 0x4177a0
mov eax, dword [esp + 0x10]
mov ecx, eax
call fcn.0040a86d
mov edx, eax
mov eax, dword [ebx + 0x1e8c]
and edx, 0xfffe
cmp edx, dword [ebx + eax*4 + 0x1e0c]
jae 0x4177f2
mov esi, dword [esp + 0x10]
push 0x10
pop ecx
sub ecx, eax
shr edx, cl
movzx ecx, byte [edx + ebx + 0x1e90]
add ecx, dword [esp + 0x1c]
mov eax, ecx
shr eax, 3
add eax, dword [esp + 0x20]
and ecx, 7
mov dword [esi], eax
mov eax, esi
mov dword [eax + 4], ecx
movzx eax, word [ebx + edx*2 + 0x2290]
jmp 0x417865
push 0xf
pop ecx
inc eax
mov dword [esp + 0x28], ecx
cmp eax, ecx
jae 0x41781a
lea ecx, [eax + 0x783]
lea ecx, [ebx + ecx*4]
cmp edx, dword [ecx]
jb 0x417816
inc eax
add ecx, 4
cmp eax, 0xf
jb 0x417807
jmp 0x41781a
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x10]
push 0x10
mov ecx, dword [eax + 4]
add ecx, dword [esp + 0x2c]
mov eax, ecx
and ecx, 7
shr eax, 3
add dword [esi], eax
mov eax, esi
mov dword [eax + 4], ecx
mov eax, dword [esp + 0x2c]
pop ecx
sub ecx, eax
sub edx, dword [ebx + eax*4 + 0x1e08]
shr edx, cl
mov ecx, dword [ebx + eax*4 + 0x1e4c]
add ecx, edx
cmp ecx, dword [ebx + 0x1e08]
sbb eax, eax
and eax, ecx
movzx eax, word [ebx + eax*2 + 0x2a90]
mov esi, dword [esp + 0x24]
movzx eax, ax
add ebp, eax
jmp 0x4178a5
mov ecx, dword [esp + 0x10]
call fcn.00418514
mov edx, dword [esp + 0x10]
mov ebp, eax
push 0x20
pop ecx
sub ecx, dword [esp + 0x30]
shr ebp, cl
mov ecx, dword [esp + 0x1c]
add ecx, dword [esp + 0x30]
add ebp, dword [esp + 0x34]
mov eax, ecx
shr eax, 3
add eax, dword [esp + 0x20]
and ecx, 7
mov dword [edx], eax
mov dword [edx + 4], ecx
mov dword [esp + 0x28], ebp
cmp ebp, 0x100
jbe 0x4178c4
inc edi
cmp ebp, 0x2000
jbe 0x4178c4
inc edi
cmp ebp, 0x40000
jbe 0x4178c4
inc edi
mov eax, dword [esi + 0x68]
mov dword [esi + 0x6c], eax
mov eax, dword [esi + 0x64]
mov dword [esi + 0x68], eax
mov eax, dword [esi + 0x60]
mov dword [esi + 0x64], eax
mov dword [esi + 0x60], ebp
mov edx, dword [esi + 0x7c]
mov ecx, edx
mov eax, dword [esi + 0xe6d8]
sub ecx, ebp
add eax, 0xffffeffc
mov dword [esi + 0x74], edi
mov dword [esp + 0x34], ecx
cmp ecx, eax
jae 0x417a1a
cmp edx, eax
jae 0x417a1a
mov eax, dword [esi + 0x4b40]
push 8
lea ebp, [eax + edx]
lea ebx, [eax + ecx]
lea eax, [edx + edi]
pop edx
mov dword [esi + 0x7c], eax
cmp edi, edx
jb 0x41798a
cmp dword [esp + 0x28], edi
jae 0x417962
mov ecx, edi
shr ecx, 3
mov al, byte [ebx]
sub edi, edx
mov byte [ebp], al
mov al, byte [ebx + 1]
mov byte [ebp + 1], al
mov al, byte [ebx + 2]
mov byte [ebp + 2], al
mov al, byte [ebx + 3]
mov byte [ebp + 3], al
mov al, byte [ebx + 4]
mov byte [ebp + 4], al
mov al, byte [ebx + 5]
mov byte [ebp + 5], al
mov al, byte [ebx + 6]
mov byte [ebp + 6], al
mov al, byte [ebx + 7]
add ebx, edx
mov byte [ebp + 7], al
add ebp, edx
sub ecx, 1
jne 0x417926
jmp 0x41798a
mov eax, edi
shr eax, 3
mov dword [esp + 0x34], eax
mov esi, eax
push edx
push ebx
push ebp
call fcn.0041fc00
add esp, 0xc
push 8
pop edx
add ebx, edx
add ebp, edx
sub edi, edx
sub esi, 1
jne 0x41796d
mov esi, dword [esp + 0x24]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
test edi, edi
je 0x41744c
mov al, byte [ebx]
mov byte [ebp], al
mov eax, dword [esp + 0x18]
cmp edi, 1
jbe 0x41744c
mov al, byte [ebx + 1]
mov byte [ebp + 1], al
mov eax, dword [esp + 0x18]
cmp edi, 2
jbe 0x41744c
mov al, byte [ebx + 2]
mov byte [ebp + 2], al
mov eax, dword [esp + 0x18]
cmp edi, 3
jbe 0x41744c
mov al, byte [ebx + 3]
mov byte [ebp + 3], al
mov eax, dword [esp + 0x18]
cmp edi, 4
jbe 0x41744c
mov al, byte [ebx + 4]
mov byte [ebp + 4], al
mov eax, dword [esp + 0x18]
cmp edi, 5
jbe 0x41744c
mov al, byte [ebx + 5]
mov byte [ebp + 5], al
mov eax, dword [esp + 0x18]
cmp edi, 6
jbe 0x41744c
mov al, byte [ebx + 6]
mov ebx, dword [esp + 0x4c]
mov byte [ebp + 6], al
jmp 0x4175bb
mov ecx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
test edi, edi
je 0x417454
mov eax, dword [esi + 0xe6dc]
mov ebp, dword [esp + 0x34]
mov ecx, dword [esi + 0x4b40]
and eax, ebp
inc ebp
mov al, byte [eax + ecx]
mov byte [ecx + edx], al
mov edx, dword [esi + 0x7c]
mov eax, dword [esi + 0xe6dc]
inc edx
and edx, eax
mov dword [esi + 0x7c], edx
sub edi, 1
jne 0x417a38
jmp 0x4175bb
cmp edx, edi
jne 0x417a92
lea eax, [esp + 0x38]
push eax
push ecx
mov ecx, esi
call fcn.00413b7d
test al, al
je 0x417dc3
lea eax, [esp + 0x38]
mov ecx, esi
push eax
call fcn.0041211e
test al, al
je 0x417dc3
jmp 0x4175bb
cmp edx, 0x101
jne 0x417b92
mov edi, dword [esi + 0x74]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
test edi, edi
je 0x417454
mov edx, dword [esi + 0x7c]
mov ebp, edx
mov eax, dword [esi + 0xe6d8]
mov ecx, dword [esi + 0x60]
add eax, 0xffffeffc
sub ebp, ecx
cmp ebp, eax
jae 0x417b64
cmp edx, eax
jae 0x417b64
mov eax, dword [esi + 0x4b40]
push 8
lea ebx, [eax + ebp]
lea ebp, [eax + edx]
lea eax, [edx + edi]
pop edx
mov dword [esi + 0x7c], eax
cmp edi, edx
jb 0x41798a
cmp ecx, edi
jae 0x417b3b
mov ecx, edi
shr ecx, 3
mov al, byte [ebx]
sub edi, edx
mov byte [ebp], al
mov al, byte [ebx + 1]
mov byte [ebp + 1], al
mov al, byte [ebx + 2]
mov byte [ebp + 2], al
mov al, byte [ebx + 3]
mov byte [ebp + 3], al
mov al, byte [ebx + 4]
mov byte [ebp + 4], al
mov al, byte [ebx + 5]
mov byte [ebp + 5], al
mov al, byte [ebx + 6]
mov byte [ebp + 6], al
mov al, byte [ebx + 7]
add ebx, edx
mov byte [ebp + 7], al
add ebp, edx
sub ecx, 1
jne 0x417afc
jmp 0x41798a
mov eax, edi
shr eax, 3
mov dword [esp + 0x34], eax
mov esi, eax
push edx
push ebx
push ebp
call fcn.0041fc00
add esp, 0xc
push 8
pop edx
add ebx, edx
add ebp, edx
sub edi, edx
sub esi, 1
jne 0x417b46
jmp 0x417986
mov eax, dword [esi + 0xe6dc]
mov ecx, dword [esi + 0x4b40]
and eax, ebp
inc ebp
mov al, byte [eax + ecx]
mov byte [ecx + edx], al
mov edx, dword [esi + 0x7c]
mov eax, dword [esi + 0xe6dc]
inc edx
and edx, eax
mov dword [esi + 0x7c], edx
sub edi, 1
jne 0x417b6a
jmp 0x4175bb
add edx, 0xfffffefe
lea ecx, [edx + 0x18]
lea ecx, [esi + ecx*4]
mov ebp, dword [ecx]
mov dword [esp + 0x28], ebp
je 0x417bb3
mov eax, dword [ecx - 4]
mov dword [ecx], eax
lea ecx, [ecx - 4]
sub edx, 1
jne 0x417ba6
mov dword [esi + 0x60], ebp
mov ebp, dword [esp + 0x10]
mov ecx, ebp
call fcn.0040a86d
mov edx, eax
mov eax, dword [ebx + 0x2d78]
and edx, 0xfffe
cmp edx, dword [ebx + eax*4 + 0x2cf8]
jae 0x417c0d
push 0x10
pop ecx
sub ecx, eax
shr edx, cl
movzx ecx, byte [edx + ebx + 0x2d7c]
add ecx, dword [ebp + 4]
mov eax, ecx
shr eax, 3
add dword [ebp], eax
and ecx, 7
mov eax, dword [ebp]
mov dword [esp + 0x30], eax
mov dword [ebp + 4], ecx
movzx eax, word [ebx + edx*2 + 0x317c]
mov dword [esp + 0x34], ecx
jmp 0x417c76
push 0xf
pop edi
inc eax
cmp eax, edi
jae 0x417c2f
lea ecx, [eax + 0xb3e]
lea ecx, [ebx + ecx*4]
cmp edx, dword [ecx]
jb 0x417c2d
inc eax
add ecx, 4
cmp eax, 0xf
jb 0x417c1e
jmp 0x417c2f
mov edi, eax
mov ecx, dword [ebp + 4]
add ecx, edi
mov eax, ecx
and ecx, 7
mov dword [ebp + 4], ecx
shr eax, 3
add dword [ebp], eax
sub edx, dword [ebx + edi*4 + 0x2cf4]
mov eax, dword [ebp]
mov dword [esp + 0x34], ecx
push 0x10
pop ecx
sub ecx, edi
mov dword [esp + 0x30], eax
shr edx, cl
mov ecx, dword [ebx + edi*4 + 0x2d38]
add ecx, edx
cmp ecx, dword [ebx + 0x2cf4]
sbb eax, eax
and eax, ecx
movzx eax, word [ebx + eax*2 + 0x397c]
movzx edi, ax
cmp edi, 8
jae 0x417c83
add edi, 2
jmp 0x417cc7
mov ebp, edi
and edi, 3
shr ebp, 2
or edi, 4
dec ebp
mov ecx, ebp
shl edi, cl
add edi, 2
test ebp, ebp
je 0x417cc7
mov ecx, dword [esp + 0x10]
call fcn.0040a86d
mov edx, dword [esp + 0x10]
push 0x10
pop ecx
sub ecx, ebp
shr eax, cl
mov ecx, dword [esp + 0x34]
add edi, eax
add ecx, ebp
mov eax, ecx
shr eax, 3
add eax, dword [esp + 0x30]
and ecx, 7
mov dword [edx], eax
mov dword [edx + 4], ecx
mov edx, dword [esi + 0x7c]
mov ebp, edx
mov eax, dword [esi + 0xe6d8]
mov ecx, dword [esp + 0x28]
add eax, 0xffffeffc
sub ebp, ecx
mov dword [esi + 0x74], edi
cmp ebp, eax
jae 0x417d7e
cmp edx, eax
jae 0x417d7e
mov eax, dword [esi + 0x4b40]
push 8
lea ebx, [eax + ebp]
lea ebp, [eax + edx]
lea eax, [edx + edi]
pop edx
mov dword [esi + 0x7c], eax
cmp edi, edx
jb 0x41798a
cmp ecx, edi
jae 0x417d55
mov ecx, edi
shr ecx, 3
mov al, byte [ebx]
sub edi, edx
mov byte [ebp], al
mov al, byte [ebx + 1]
mov byte [ebp + 1], al
mov al, byte [ebx + 2]
mov byte [ebp + 2], al
mov al, byte [ebx + 3]
mov byte [ebp + 3], al
mov al, byte [ebx + 4]
mov byte [ebp + 4], al
mov al, byte [ebx + 5]
mov byte [ebp + 5], al
mov al, byte [ebx + 6]
mov byte [ebp + 6], al
mov al, byte [ebx + 7]
add ebx, edx
mov byte [ebp + 7], al
add ebp, edx
sub ecx, 1
jne 0x417d16
jmp 0x41798a
mov eax, edi
shr eax, 3
mov dword [esp + 0x34], eax
mov esi, eax
push edx
push ebx
push ebp
call fcn.0041fc00
add esp, 0xc
push 8
pop edx
add ebx, edx
add ebp, edx
sub edi, edx
sub esi, 1
jne 0x417d60
jmp 0x417986
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
test edi, edi
je 0x417450
mov eax, dword [esi + 0xe6dc]
mov ecx, dword [esi + 0x4b40]
and eax, ebp
inc ebp
mov al, byte [eax + ecx]
mov byte [ecx + edx], al
mov edx, dword [esi + 0x7c]
mov eax, dword [esi + 0xe6dc]
inc edx
and edx, eax
mov dword [esi + 0x7c], edx
sub edi, 1
jne 0x417d94
jmp 0x4175bb
mov byte [ebx + 0x4ad3], 1
mov al, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x38
ret 4