Function at 0x41ebd2
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x184
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x41ec37
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xa0], eax
lea eax, [ebp + 0x30]
mov dword [ebp - 0xe0], eax
push 0x6eb1
push 1
push dword [ebp - 0xcc]
push dword [ebp - 0xa0]
mov eax, dword [ebp - 0xe0]
movzx eax, byte [eax]
push eax
push dword [ebp - 0xac]
call fcn.0041f51f
add esp, 0x18
jmp 0x41f51b
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0xf4], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc4], eax
lea eax, [ebp + 0x34]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xe8]
movzx eax, byte [eax]
test eax, eax
je 0x41ecbb
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xf8], eax
push 1
push 0x5339
push dword [ebp - 0xbc]
push dword [ebp - 0xf8]
call fcn.004138a9
add esp, 0x10
jmp 0x41f51b
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xd4]
movzx eax, byte [eax]
test eax, eax
je 0x41ed15
push 0x1699
push 0
push 0
push 0
push 0x159d
push 0
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
jmp 0x41f51b
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x34], eax
push 0
push 1
push 0x75dc
push 0x58e8
push 1
call fcn.00410f5e
add esp, 0x14
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x120], 0xcd8c45cd
mov byte [ebp - 0x15], 0
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x41ed9f
push 0x5e0a
push 0x860
push 0x6ab5
push 0xe53
push 0x213
push 0xfb9
push 1
push 0
push 0x3779
call fcn.004137c3
add esp, 0x24
push 0
push 0x7bae
call fcn.0041e81e
pop ecx
pop ecx
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x48], 0x5ff44426
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x30], 0
jmp 0x41edd2
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x41ede8
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x9c], 0xec0ae971
jmp 0x41edcb
mov dword [ebp - 0x14], 0
jmp 0x41edf8
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x41efb4
mov dword [ebp - 0xc0], 0x943e2f7c
mov eax, dword [ebp - 0x14]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x9c]
cmp dword [ebp + eax*4 - 0x9c], ecx
jl 0x41ee3d
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x9c], 0
je 0x41ee38
jmp 0x41efb4
jmp 0x41efaf
mov dword [ebp - 0x58], 0x51ebf0dd
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0x38], 0
jmp 0x41ee5e
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x41ee74
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x134], 0x166941fc
jmp 0x41ee57
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x134], 0
je 0x41ef37
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x9c]
mov ecx, dword [ebp - 0xe4]
lea eax, [eax + ecx + 0xeab3]
test eax, eax
je 0x41eeb8
cmp dword [ebp - 0xc0], 0
je 0x41eeb8
mov dword [ebp - 0x8c], 1
jmp 0x41eebf
and dword [ebp - 0x8c], 0
cmp dword [ebp - 0x8c], 0xc4dd
je 0x41eed4
mov dword [ebp - 0x60], 1
jmp 0x41eed8
and dword [ebp - 0x60], 0
cmp dword [ebp - 0x60], 0x4c6a
jne 0x41eeea
mov dword [ebp - 0x68], 1
jmp 0x41eeee
and dword [ebp - 0x68], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9c]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x68]
push 4
pop ecx
shl ecx, 1
cmp dword [ebp + ecx - 0x134], eax
jg 0x41ef1b
mov dword [ebp - 0x80], 1
jmp 0x41ef1f
and dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x9c]
cmp eax, dword [ebp - 0x80]
jl 0x41ef37
mov dword [ebp - 0x70], 1
jmp 0x41ef3b
and dword [ebp - 0x70], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x9c]
cmp dword [ebp - 0x70], eax
jg 0x41ef58
mov dword [ebp - 0x88], 1
jmp 0x41ef5f
and dword [ebp - 0x88], 0
cmp dword [ebp - 0x88], 4
ja 0x41ef71
mov dword [ebp - 0x78], 1
jmp 0x41ef75
and dword [ebp - 0x78], 0
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x41ef91
cmp dword [ebp - 0x3c], 0
je 0x41ef8f
jmp 0x41efb4
jmp 0x41efaf
push 0x4b2b
push 1
push 0
push 0
push 0x467e
lea eax, [ebp - 0x3c]
push eax
push 1
call fcn.0040a54a
add esp, 0x1c
jmp 0x41edf1
lea eax, [ebp - 0x48]
push eax
push 0
call fcn.00414b76
pop ecx
pop ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x24], 0x24a8c6a5
mov dword [ebp - 0x44], 0
jmp 0x41efed
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x41f003
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x14c], 0x717be9fb
jmp 0x41efe6
mov dword [ebp - 0x24], 0
jmp 0x41f013
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xfffffff3
jle 0x41f0e4
mov dword [ebp - 0x11c], 0x69f4288a
mov dword [ebp - 0x118], 0x69f4288a
mov dword [ebp - 0x114], 0x69f4288a
mov dword [ebp - 0x110], 0x69f4288a
mov dword [ebp - 0x20], 0xfffffff9
mov dword [ebp - 0x20], 3
jmp 0x41f05c
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x41f0df
mov dword [ebp - 0x40], 0x283066c9
push 0x7a1e
push 0
push 0x7c0f
push 1
push 0
push 1
call fcn.0041e83c
add esp, 0x18
mov dword [ebp - 0x40], 3
jmp 0x41f093
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x41f0da
mov byte [ebp - 0xd], 0
push 0
push 0
lea eax, [ebp - 0xd]
push eax
push 0x12c7
push 1
push 0x355a
push 1
push 0x7bab
push 0
push 0x73d6
push 1
call fcn.00411b4d
add esp, 0x2c
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x11c], 0
je 0x41f0d8
jmp 0x41f08c
jmp 0x41f08c
jmp 0x41f055
jmp 0x41f00c
push 0
lea eax, [ebp - 0x24]
push eax
call fcn.00416e6f
pop ecx
pop ecx
and dword [ebp - 0x54], 0
jmp 0x41f107
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0xc]
add eax, 0x28
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x54], eax
jge 0x41f51b
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0x10], 0
jne 0x41f45d
mov dword [ebp - 0x124], 0x92beaa32
mov byte [ebp - 0x17], 0
movzx eax, byte [ebp - 0x17]
test eax, eax
je 0x41f15e
push 1
push 0x4ab0
push 0x3207
push 0x28ef
push 1
push 0xfd
push 0
call fcn.00409271
add esp, 0x1c
mov byte [ebp - 0xe], 0
lea eax, [ebp - 0xe]
push eax
push 0x584a
push 0x67fa
push 0xf17
push 0x1815
push 0x2840
push 0x14e3
push 0x390c
push 0x4123
push 0x6d94
push 1
push 0x1942
push 0x5bd8
push 1
push 0
push 1
push 0
call fcn.004118cb
add esp, 0x44
push 0x69ca
push 0x601d
lea eax, [ebp - 0x4c]
push eax
push 0x2889
push dword [ebp - 0x90]
push 0x48c4
push 1
push 0x50e7
push dword [ebp - 0xd0]
push 0
push dword [ebp - 0xc]
push 0x4da4
push 1
call fcn.00411283
add esp, 0x34
mov dword [ebp - 0x1c], 0x24039b64
mov dword [ebp - 0x168], 0xe307b5ca
mov dword [ebp - 0x74], 0
mov dword [ebp - 8], 0x5a1fa147
mov dword [ebp - 0xb0], 0x9e3cf957
mov dword [ebp - 0xd8], 0xfff6
mov dword [ebp - 4], 0
jmp 0x41f231
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jge 0x41f247
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x10c], 1
jmp 0x41f22a
mov dword [ebp - 4], 0
jmp 0x41f257
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jge 0x41f26d
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x144], 1
jmp 0x41f250
mov dword [ebp - 0x1c], 0
jmp 0x41f27d
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffe2
jl 0x41f30a
mov dword [ebp - 0x15c], 2
mov dword [ebp - 0x158], 2
mov dword [ebp - 0x154], 2
mov dword [ebp - 0x150], 2
mov dword [ebp - 0x128], 0xffffffff
mov dword [ebp - 0x2c], 0
jmp 0x41f2c9
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x41f2df
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x184], 0
jmp 0x41f2c2
push 1
push 0x307f
push 0
push 0
push 0
lea eax, [ebp - 0xd8]
push eax
push 0x166f
push 0x4ebe
call fcn.004179fd
add esp, 0x20
jmp 0x41f276
mov dword [ebp - 8], 0
jmp 0x41f31a
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jg 0x41f458
mov dword [ebp - 0x160], 7
mov dword [ebp - 0x50], 1
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0x28], 0
jmp 0x41f34f
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x41f365
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x174], 0xa5e0b2f6
jmp 0x41f348
mov dword [ebp - 0x1c], 0x4eb300a9
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x144]
cmp dword [ebp - 0x1c], eax
jne 0x41f384
mov dword [ebp - 0x5c], 1
jmp 0x41f388
and dword [ebp - 0x5c], 0
cmp dword [ebp - 0x5c], 0xa911
jg 0x41f39d
mov dword [ebp - 0xa4], 1
jmp 0x41f3a4
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x10c]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x10c]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x10c]
je 0x41f3ef
cmp dword [ebp - 0xa8], 0
je 0x41f3ef
mov dword [ebp - 0x64], 1
jmp 0x41f3f3
and dword [ebp - 0x64], 0
mov eax, dword [ebp - 0x64]
dec eax
cmp eax, 0xe3f0
jge 0x41f407
mov dword [ebp - 0x6c], 1
jmp 0x41f40b
and dword [ebp - 0x6c], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x74]
sub ecx, dword [ebp + eax*4 - 0x10c]
mov dword [ebp - 0x7c], ecx
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x144], ecx
cmp dword [ebp - 0x7c], 0
jne 0x41f440
mov dword [ebp - 0x84], 1
jmp 0x41f447
and dword [ebp - 0x84], 0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xb0], eax
jmp 0x41f313
jmp 0x41f0f7
push 0
push 0x76b
push 0
push 1
push 1
push 0x1663
push 0x2ec1
push 0x9f4
call fcn.004179fd
add esp, 0x20
push 4
push 0x1000
mov eax, dword [ebp - 0xc]
push dword [eax + 0x10]
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x90]
add ecx, dword [eax + 0xc]
push ecx
push 0x1e74
push 0x1628
call fcn.00406fbd
pop ecx
pop ecx
call eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0xc]
push dword [eax + 0x10]
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0xb8]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x4c]
call fcn.00407a34
add esp, 0xc
mov dword [ebp - 0x148], 0xac78
mov byte [ebp - 0x16], 0
lea eax, [ebp - 0x16]
push eax
push 1
push 0
call fcn.0041108e
add esp, 0xc
push 0x647
push 0x1dc1
push 0
push 0x1f79
push 0x1766
push 0
call fcn.0041a7d1
add esp, 0x18
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x4c]
mov dword [eax + 8], ecx
jmp 0x41f0f7
mov esp, ebp
pop ebp
ret