Function at 0x40fad0
Capabilities:
Enumerate pe sections

Disassembly:
push 0xffffffffffffffff
push 0x43b828
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x50
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x70]
mov ebp, ecx
xor eax, eax
xor ecx, ecx
mov ax, word [edi + 6]
mov cx, word [edi + 4]
imul eax, ecx
mov esi, dword [ebp + 0x478c]
mov ecx, ebp
imul esi, eax
push esi
call fcn.0040bed0
mov edx, dword [ebp + 0x4dc]
push esi
push edx
mov ecx, ebp
call fcn.0040bbc0
mov al, byte [ebp + 0x473a]
mov cx, word [ebp + 0x4734]
mov dl, byte [ebp + 0x473b]
mov byte [esp + 0x38], al
mov ax, word [ebp + 0x4736]
mov word [esp + 0x3c], cx
mov cl, byte [ebp + 0x473c]
mov word [esp + 0x34], ax
mov byte [esp + 0x30], dl
mov dx, word [ebp + 0x4738]
lea eax, [ebp + 0x4fc]
mov byte [esp + 0x28], cl
push eax
lea ecx, [esp + 0x48]
mov word [esp + 0x30], dx
call fcn.00408db0
mov ecx, dword [ebp + 0x3d34]
mov edx, dword [ebp + 0x3d38]
push ecx
push edx
lea ecx, [esp + 0x60]
mov dword [esp + 0x70], 0
call fcn.00408e20
mov eax, dword [ebp + 0x3d3c]
mov ecx, dword [ebp + 0x3d38]
push eax
mov bl, 1
push ecx
lea ecx, [esp + 0x58]
mov byte [esp + 0x70], bl
call fcn.00408e60
xor eax, eax
mov byte [esp + 0x68], 2
mov al, byte [ebp + 0x4730]
lea ecx, [eax - 8]
cmp ecx, 0x18
ja case.0x40fbd0.11
xor edx, edx
mov dl, byte [ecx + 0x410090]
jmp dword [edx*4 + 0x410080]
mov eax, dword [ebp + 0x4dc]
xor ecx, ecx
mov cx, word [edi + 6]
mov dword [esp + 0x20], eax
xor eax, eax
mov ax, word [edi + 2]
add ecx, eax
mov dword [esp + 0x24], eax
cmp eax, ecx
jge 0x410021
xor ecx, ecx
xor edx, edx
mov cx, word [edi]
mov dx, word [edi + 4]
add edx, ecx
mov dword [esp + 0x40], ecx
cmp ecx, edx
jge 0x40fd28
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
mov ebx, dword [esp + 0x34]
and edx, 0xff
and ecx, 0xff
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x38]
and edx, 0xff
and eax, 0xffff
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x3c]
and ebx, 0xffff
and edx, 0xffff
mov dword [esp + 0x10], ecx
mov dword [esp + 0x70], eax
mov dword [esp + 0x1c], edx
jmp 0x40fc6d
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0x20]
mov dl, byte [edx]
mov byte [esp + 0x48], dl
mov esi, dword [esp + 0x48]
and esi, 0xff
mov edx, esi
shr edx, cl
mov ecx, dword [esp + 0x14]
and edx, eax
mov eax, edx
shl eax, 8
sub eax, edx
cdq
idiv dword [esp + 0x70]
mov edx, esi
shr edx, cl
mov ecx, dword [esp + 0x18]
shr esi, cl
mov ecx, dword [esp + 0x1c]
and edx, ebx
and esi, ecx
and eax, 0xff
or ah, 2
shl eax, 8
mov dword [esp + 0x4c], eax
mov eax, edx
shl eax, 8
sub eax, edx
cdq
idiv ebx
mov edx, dword [esp + 0x4c]
and eax, 0xff
or edx, eax
mov eax, esi
shl eax, 8
shl edx, 8
sub eax, esi
mov dword [esp + 0x4c], edx
cdq
idiv ecx
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x24]
mov esi, dword [esp + 0x40]
and eax, 0xff
or ecx, eax
mov eax, dword [ebp + 0x3d38]
push ecx
push edx
push esi
push eax
call dword [sym.imp.GDI32.dll_SetPixelV]
mov edx, dword [esp + 0x20]
xor ecx, ecx
mov cx, word [edi]
inc edx
mov dword [esp + 0x20], edx
xor edx, edx
mov dx, word [edi + 4]
inc esi
add ecx, edx
mov dword [esp + 0x40], esi
cmp esi, ecx
jl 0x40fc65
mov eax, dword [esp + 0x24]
xor ecx, ecx
xor edx, edx
mov cx, word [edi + 2]
mov dx, word [edi + 6]
inc eax
add ecx, edx
cmp eax, ecx
mov dword [esp + 0x24], eax
jl 0x40fbfb
mov byte [esp + 0x68], 1
jmp 0x410041
mov eax, dword [ebp + 0x4dc]
xor ecx, ecx
mov cx, word [edi + 6]
mov dword [esp + 0x24], eax
xor eax, eax
mov ax, word [edi + 2]
add ecx, eax
mov dword [esp + 0x20], eax
cmp eax, ecx
jge 0x410021
xor ecx, ecx
xor edx, edx
mov cx, word [edi]
mov dx, word [edi + 4]
add edx, ecx
mov dword [esp + 0x40], ecx
cmp ecx, edx
jge 0x40fe99
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
mov ebx, dword [esp + 0x34]
and edx, 0xff
and ecx, 0xff
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x38]
and edx, 0xff
and eax, 0xffff
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x3c]
and ebx, 0xffff
and edx, 0xffff
mov dword [esp + 0x10], ecx
mov dword [esp + 0x70], eax
mov dword [esp + 0x1c], edx
jmp 0x40fde3
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0x24]
mov si, word [edx]
and esi, 0xffff
mov edx, esi
shr edx, cl
mov ecx, dword [esp + 0x14]
and edx, eax
mov eax, edx
shl eax, 8
sub eax, edx
cdq
idiv dword [esp + 0x70]
mov edx, esi
shr edx, cl
mov ecx, dword [esp + 0x18]
shr esi, cl
mov ecx, dword [esp + 0x1c]
and edx, ebx
and esi, ecx
and eax, 0xff
or ah, 2
shl eax, 8
mov dword [esp + 0x4c], eax
mov eax, edx
shl eax, 8
sub eax, edx
cdq
idiv ebx
mov edx, dword [esp + 0x4c]
and eax, 0xff
or edx, eax
mov eax, esi
shl eax, 8
shl edx, 8
sub eax, esi
mov dword [esp + 0x4c], edx
cdq
idiv ecx
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x20]
mov esi, dword [esp + 0x40]
and eax, 0xff
or ecx, eax
mov eax, dword [ebp + 0x3d38]
push ecx
push edx
push esi
push eax
call dword [sym.imp.GDI32.dll_SetPixelV]
mov edx, dword [esp + 0x24]
xor ecx, ecx
mov cx, word [edi]
add edx, 2
mov dword [esp + 0x24], edx
xor edx, edx
mov dx, word [edi + 4]
inc esi
add ecx, edx
mov dword [esp + 0x40], esi
cmp esi, ecx
jl 0x40fddb
mov eax, dword [esp + 0x20]
xor ecx, ecx
xor edx, edx
mov cx, word [edi + 2]
mov dx, word [edi + 6]
inc eax
add ecx, edx
cmp eax, ecx
mov dword [esp + 0x20], eax
jl 0x40fd71
mov byte [esp + 0x68], 1
jmp 0x410041
mov eax, dword [ebp + 0x4dc]
xor ecx, ecx
mov cx, word [edi + 6]
mov dword [esp + 0x24], eax
xor eax, eax
mov ax, word [edi + 2]
add ecx, eax
mov dword [esp + 0x20], eax
cmp eax, ecx
jge 0x410021
xor ecx, ecx
xor edx, edx
mov cx, word [edi]
mov dx, word [edi + 4]
add edx, ecx
mov dword [esp + 0x40], ecx
cmp ecx, edx
jge 0x410006
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
mov ebx, dword [esp + 0x34]
and edx, 0xff
and ecx, 0xff
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x38]
and edx, 0xff
and eax, 0xffff
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x3c]
and ebx, 0xffff
and edx, 0xffff
mov dword [esp + 0x10], ecx
mov dword [esp + 0x70], eax
mov dword [esp + 0x1c], edx
jmp 0x40ff54
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0x24]
mov esi, dword [edx]
mov edx, esi
shr edx, cl
mov ecx, dword [esp + 0x14]
and edx, eax
mov eax, edx
shl eax, 8
sub eax, edx
xor edx, edx
div dword [esp + 0x70]
mov edx, esi
shr edx, cl
mov ecx, dword [esp + 0x18]
shr esi, cl
mov ecx, dword [esp + 0x1c]
and edx, ebx
and esi, ecx
and eax, 0xff
or ah, 2
shl eax, 8
mov dword [esp + 0x4c], eax
mov eax, edx
shl eax, 8
sub eax, edx
xor edx, edx
div ebx
mov edx, dword [esp + 0x4c]
and eax, 0xff
or edx, eax
mov eax, esi
shl edx, 8
shl eax, 8
mov dword [esp + 0x4c], edx
sub eax, esi
xor edx, edx
mov esi, dword [esp + 0x40]
div ecx
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x20]
and eax, 0xff
or ecx, eax
mov eax, dword [ebp + 0x3d38]
push ecx
push edx
push esi
push eax
call dword [sym.imp.GDI32.dll_SetPixelV]
mov edx, dword [esp + 0x24]
xor ecx, ecx
mov cx, word [edi]
add edx, 4
mov dword [esp + 0x24], edx
xor edx, edx
mov dx, word [edi + 4]
inc esi
add ecx, edx
mov dword [esp + 0x40], esi
cmp esi, ecx
jl 0x40ff4c
mov eax, dword [esp + 0x20]
xor ecx, ecx
xor edx, edx
mov cx, word [edi + 2]
mov dx, word [edi + 6]
inc eax
add ecx, edx
cmp eax, ecx
mov dword [esp + 0x20], eax
jl 0x40fee2
mov byte [esp + 0x68], 1
jmp 0x410041
push eax
push str.Invalid_number_of_bits_per_pixel:__d_n
push 0
push 0x44a470
call fcn.00406360
add esp, 0x10
mov byte [esp + 0x68], bl
lea ecx, [esp + 0x50]
call fcn.00408e90
lea ecx, [esp + 0x58]
mov byte [esp + 0x68], 0
call fcn.00408e40
lea ecx, [esp + 0x44]
mov dword [esp + 0x68], 0xffffffff
call fcn.00408dd0
mov ecx, dword [esp + 0x60]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x5c
ret 4