Function at 0x411160
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x1c
push ebx
mov ebx, dword [esp + 0x24]
xor eax, eax
mov ax, word [ebx + 8]
push ebp
push edi
mov ebp, ecx
mov ecx, dword [0x69e758]
mov dword [esp + 0x18], ebp
push eax
call fcn.005473a0
mov edi, eax
test edi, edi
jne 0x411193
pop edi
pop ebp
xor al, al
pop ebx
add esp, 0x1c
ret 0xc
mov eax, dword [esp + 0x34]
test eax, eax
push esi
je 0x411222
test byte [edi + 0x20], 8
je 0x411222
mov eax, dword [ebp + 0x45c]
mov esi, dword [eax]
cmp esi, eax
je 0x411222
mov ecx, dword [esi + 8]
call fcn.00438af0
movzx ecx, ax
cmp ecx, dword [ebx + 8]
jne 0x411218
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x10]
test ecx, ecx
jne 0x411218
mov edx, dword [eax + 0x1a8]
mov ecx, dword [edx + 4]
test byte [ecx + 0x20], 8
je 0x411218
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x4111f0
mov edx, dword [eax + 0x1a8]
mov cl, byte [edx + 0x2a8]
jmp 0x4111f9
mov ecx, dword [eax + 0x1a8]
mov cl, byte [ecx + 0x18]
mov edx, dword [eax + 0x1a8]
movzx edx, byte [edx + 0x15]
movzx eax, cl
sub eax, edx
test eax, eax
jle 0x411218
movzx ecx, byte [ebx + 0x12]
cmp ecx, eax
jle 0x41131c
mov esi, dword [esi]
cmp esi, dword [ebp + 0x45c]
jne 0x4111b2
movzx edx, byte [edi + 6]
movzx ebp, byte [edi + 5]
mov eax, 6
sub eax, edx
mov dword [esp + 0x28], eax
mov eax, 6
sub eax, ebp
mov dword [esp + 0x24], eax
xor eax, eax
mov dword [esp + 0x20], edx
mov dword [esp + 0x38], 0
mov dword [esp + 0x18], eax
xor ecx, ecx
mov dword [esp + 0x14], ecx
xor ebx, ebx
lea ebx, [ebx]
xor edi, edi
test edx, edx
mov dword [esp + 0x10], 1
jbe 0x41137f
test ebp, ebp
jbe 0x4112c8
mov edx, dword [esp + 0x1c]
add eax, edi
add eax, ecx
lea eax, [eax + eax*2]
lea ecx, [ebx + eax*2]
lea eax, [edx + ecx*8 + 0x1578]
mov esi, ebp
lea ecx, [ecx]
mov ecx, dword [eax]
cmp ecx, 0xffffffff
mov edx, dword [eax + 4]
jne 0x4112ae
cmp edx, 0xfeffffff
je 0x4112b6
cmp ecx, ecx
jne 0x4112ae
cmp edx, 0xfdffffff
je 0x4112b6
mov dword [esp + 0x10], 0
add eax, 8
dec esi
jne 0x411290
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x20]
inc edi
cmp edi, edx
jb 0x411272
mov esi, dword [esp + 0x10]
test esi, esi
jne 0x41137f
mov esi, dword [esp + 0x24]
inc ebx
cmp ebx, esi
jbe 0x411260
mov esi, dword [esp + 0x28]
inc ecx
cmp ecx, esi
mov dword [esp + 0x14], ecx
jbe 0x411258
mov edi, dword [esp + 0x38]
add eax, 6
inc edi
cmp eax, 0x12
mov dword [esp + 0x38], edi
mov dword [esp + 0x18], eax
jb 0x411252
pop esi
pop edi
pop ebp
xor al, al
pop ebx
add esp, 0x1c
ret 0xc
mov ecx, dword [esp + 0x34]
xor edx, edx
mov dx, word [ecx]
and edx, 0xfff2
or edx, 2
mov word [ecx], dx
mov eax, dword [esi + 8]
mov edx, dword [eax + 0x1a8]
mov ax, word [edx + 0x12]
mov word [esp + 0x34], ax
mov edx, dword [esp + 0x34]
shr edx, 0xc
and edx, 0xffffff0f
push edx
xor edx, edx
mov dl, byte [esp + 0x38]
xor eax, eax
mov al, byte [esp + 0x39]
shr dl, 4
and eax, 0xffffff0f
push eax
and edx, 0xffffff0f
push edx
call fcn.0040bd50
mov al, byte [ebx + 0x12]
pop esi
pop edi
pop ebp
pop ebx
add esp, 0x1c
ret 0xc
movzx ax, byte [esp + 0x38]
movzx cx, cl
movzx dx, bl
shl eax, 4
pop esi
pop edi
add eax, ecx
mov ecx, dword [esp + 0x2c]
shl eax, 4
add eax, edx
mov edx, dword [esp + 0x28]
shl eax, 4
and eax, 0xfff2
or eax, 2
pop ebp
mov word [ecx], ax
mov al, byte [edx + 0x12]
pop ebx
add esp, 0x1c
ret 0xc