Function at 0x411080
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
push edi
mov eax, 1
push esi
push ebx
sub esp, 0x4c
mov edi, dword [esp + 0x60]
test edi, edi
je 0x41109c
cmp dword [edi], 0xbab1e
je 0x4110a4
add esp, 0x4c
pop ebx
pop esi
pop edi
pop ebp
ret
mov esi, dword [edi + 0x3c]
test esi, esi
je 0x411335
lea eax, [edi + 0x3c]
lea edx, [esp + 0x28]
call fcn.00410580
mov eax, dword [esp + 0x28]
cmp eax, dword [esp + 0x6c]
mov dword [esp + 0x18], eax
jge 0x4110cd
test eax, eax
jns 0x4110d5
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x18], eax
mov ebp, dword [edi + 4]
test ebp, ebp
je 0x411373
lea esi, [esp + 0x2c]
xor ebx, ebx
lea esi, [esi]
lea edi, [edi]
mov edx, esi
mov eax, ebp
call fcn.00410800
mov ecx, 0x10
lea edx, [ecx - 0x10]
bt eax, edx
jae 0x4111f0
add ebx, 1
bt eax, ecx
mov edx, dword [esi + ecx*4 - 0x40]
jae 0x411119
add ebx, 1
cmp edx, 0xffffffff
je 0x411126
add ecx, 1
cmp ecx, 0x15
jne 0x4110fe
mov ebp, dword [ebp]
test ebp, ebp
jne 0x4110f0
mov eax, dword [esp + 0x68]
mov dword [esp + 0x14], 0
add eax, ebx
mov esi, eax
or esi, dword [esp + 0x68]
jne 0x411348
test ebx, ebx
jne 0x411202
mov edx, dword [esp + 0x68]
test edx, edx
je 0x4111bb
xor edi, edi
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x64]
mov ebp, dword [esp + 0x68]
lea eax, [eax + edi*8 + 4]
lea edx, [esi + 4]
xor esi, esi
nop
mov ecx, dword [edx - 4]
mov dword [eax - 4], ecx
xor ecx, ecx
mov word [eax], cx
movzx ecx, word [edx]
test cl, 1
je 0x41118e
mov ecx, 1
mov word [eax], cx
movzx ecx, word [edx]
test cl, 2
je 0x41119a
or word [eax], 2
movzx ecx, word [edx]
and ecx, 4
je 0x4111a3
or word [eax], 4
add esi, 1
add edi, 1
add eax, 8
add edx, 8
cmp ebp, esi
ja 0x411170
test edi, edi
jne 0x41129f
xor edi, edi
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call dword [0x58c0cc]
mov ecx, dword [esp + 0x70]
test ecx, ecx
je 0x41136c
mov eax, dword [esp + 0x70]
mov dword [eax], edi
add esp, 0x4c
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret
bt eax, ecx
jae 0x411126
mov edx, dword [esi + ecx*4 - 0x40]
jmp 0x411116
mov eax, dword [edi + 4]
test eax, eax
mov dword [esp + 0x10], eax
je 0x41114f
mov ebp, dword [esp + 0x14]
lea esi, [esp + 0x2c]
xor edi, edi
mov dword [esp + 0x1c], ebx
nop
mov eax, dword [esp + 0x10]
mov edx, esi
call fcn.00410800
xor ecx, ecx
bt eax, ecx
mov edx, 0xffffffff
jae 0x41124f
mov ebx, dword [esi + ecx*4]
lea edx, [ebp + edi*8]
add edi, 1
mov dword [edx], ebx
mov ebx, 1
mov word [edx + 4], bx
mov edx, dword [esi + ecx*4]
lea ebx, [ecx + 0x10]
bt eax, ebx
jae 0x41126f
mov ebx, dword [esi + ecx*4]
lea edx, [ebp + edi*8]
add edi, 1
mov dword [edx], ebx
mov ebx, 4
mov word [edx + 4], bx
mov edx, dword [esi + ecx*4]
cmp edx, 0xffffffff
je 0x41127c
add ecx, 1
cmp ecx, 5
jne 0x41122d
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
test eax, eax
mov dword [esp + 0x10], eax
jne 0x411220
mov esi, dword [esp + 0x68]
mov ebx, dword [esp + 0x1c]
test esi, esi
jne 0x411159
jmp 0x4111b3
mov esi, dword [esp + 0x18]
mov dword [esp + 8], edi
mov dword [esp + 4], 0x594770
mov dword [esp], 0
mov dword [esp + 0xc], esi
call fcn.00408300
mov eax, dword [esp + 0x14]
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp], eax
call fcn.004060e0
test eax, eax
mov edi, eax
je 0x4111bb
mov esi, dword [esp + 0x68]
test esi, esi
je 0x4111bd
mov eax, dword [esp + 0x14]
mov ebp, dword [esp + 0x68]
xor ecx, ecx
lea eax, [eax + ebx*8]
lea esi, [esi]
lea edi, [edi]
movzx ebx, word [eax + ecx*8 + 6]
mov edx, ebx
and edx, 1
mov esi, edx
or esi, 4
test bl, 4
cmovne edx, esi
mov esi, edx
or esi, 2
and ebx, 2
mov ebx, dword [esp + 0x64]
cmovne edx, esi
mov word [ebx + ecx*8 + 6], dx
add ecx, 1
cmp ecx, ebp
jne 0x411300
jmp 0x4111bd
mov dword [esp + 0x28], 0xffffffff
jmp 0x4110cd
mov eax, dword [esp + 0x68]
xor ebx, ebx
shl eax, 3
mov dword [esp], eax
call dword [0x58c0d0]
mov esi, eax
mov dword [esp + 0x14], eax
mov eax, 3
test esi, esi
jne 0x411147
jmp 0x41109c
xor eax, eax
jmp 0x41109c
mov eax, dword [esp + 0x68]
test eax, eax
jne 0x411342
mov dword [esp + 0x14], 0
jmp 0x4111bb