Function at 0x43fd80
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x168
mov eax, dword [0x4d8300]
xor eax, esp
mov dword [esp + 0x164], eax
mov eax, dword [ebp + 8]
push esi
push edi
mov edi, ecx
mov dword [esp + 0x28], eax
mov dword [esp + 0x10], edi
mov esi, edx
test edi, edi
jne 0x43fdb5
mov byte [esp + 0xf], cl
jmp 0x43fdbb
mov al, byte [edi]
mov byte [esp + 0xf], al
push 0xff
lea eax, [esp + 0x6d]
mov byte [esp + 0x6c], 0
push 0
push eax
call fcn.00478bc0
add esp, 0xc
cmp byte [esp + 0xf], 0
je 0x4403ae
mov al, byte [edi + 0x20]
mov byte [esp + 0xd], al
movzx eax, al
mov dword [esp + 0x2c], eax
add eax, 0xfa
mov dword [esp + 0x20], eax
test esi, esi
jne 0x43fe37
push eax
push 1
call fcn.0047b53f
mov esi, eax
mov byte [esp + 0x16], 1
add esp, 8
test esi, esi
jne 0x43fe4c
push dword [esp + 0x20]
push str.Couldnt_calloc_1___d_
call fcn.0043f3c0
add esp, 8
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x164]
xor ecx, esp
call fcn.00475c80
mov esp, ebp
pop ebp
ret
test dword [esi + 0xaa], 0x400
jne 0x44038e
mov byte [esp + 0xe], 0
test byte [edi + 0x19], 2
mov eax, 0
setne al
inc eax
mov dword [esi + 0xf0], eax
mov edx, dword [edi + 6]
mov eax, edx
mov ecx, dword [edi + 2]
shrd ecx, eax, 0x18
movzx eax, cl
mov ecx, dword [edi + 2]
shl eax, 8
mov dword [esp + 0x14], eax
mov eax, edx
shrd ecx, eax, 0x10
movzx eax, cl
mov ecx, dword [esp + 0x14]
or ecx, eax
shl ecx, 8
mov dword [esp + 0x14], ecx
mov ecx, dword [edi + 2]
mov eax, ecx
shrd eax, edx, 8
mov edx, dword [esp + 0x14]
movzx eax, al
or edx, eax
movzx eax, cl
mov ecx, dword [esi + 0xd8]
shl edx, 8
or edx, eax
cmp dword [esi + 0xdc], 0
mov dword [esp + 0x14], edx
ja 0x43fecd
test ecx, ecx
jne 0x43fecd
cmp byte [esp + 0xe], cl
je 0x43ff1c
mov dword [esi + 0xd4], edx
jmp 0x43ff1c
mov eax, dword [esi + 0xd4]
cdq
mov edi, eax
mov eax, ecx
mov ecx, dword [esi + 0xdc]
shrd eax, ecx, 0xb
shr ecx, 0xb
add edi, eax
mov eax, dword [esp + 0x14]
adc edx, ecx
mov dword [esp + 0x18], edx
cdq
cmp edi, eax
jne 0x44037a
cmp dword [esp + 0x18], edx
jne 0x44037a
mov eax, dword [esi + 0xd8]
and eax, 0x7ff
or eax, 0
jne 0x44037a
mov edi, dword [esp + 0x10]
mov ecx, dword [edi + 0xa]
mov edi, dword [edi + 0xe]
mov eax, edi
shrd ecx, eax, 0x18
movzx eax, cl
cdq
shld edx, eax, 8
shl eax, 8
mov dword [esp + 0x18], eax
mov eax, edi
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x10]
mov ecx, dword [edx + 0xa]
shrd ecx, eax, 0x10
movzx eax, cl
mov ecx, dword [esp + 0x18]
cdq
or ecx, eax
mov eax, dword [esp + 0x14]
or eax, edx
shld eax, ecx, 8
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x10]
shl ecx, 8
mov eax, dword [eax + 0xa]
shrd eax, edi, 8
mov edi, dword [esp + 0x14]
movzx eax, al
cdq
or edi, edx
or ecx, eax
mov edx, dword [esp + 0x10]
shld edi, ecx, 8
shl ecx, 8
mov eax, dword [edx + 0xa]
movzx eax, al
cdq
or ecx, eax
or edi, edx
add dword [esi + 0xd8], ecx
mov eax, dword [esp + 0x28]
adc edi, dword [esi + 0xdc]
mov dword [esi + 0xdc], edi
test eax, eax
je 0x43ffbf
cmp word [eax], 1
jne 0x43ffb9
test byte [eax + 0x1011], 8
je 0x43ffbf
mov dword [esi], 2
mov edi, dword [esp + 0x10]
mov byte [esi + 0xf4], 0
cmp byte [edi + 0x19], 0
jl 0x44011e
cmp byte [esp + 0xe], 0
jne 0x44002a
lea edx, [esi + 0xf5]
mov ecx, edx
lea eax, [ecx + 1]
mov dword [esp + 0x18], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x43fff0
sub ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x2c]
cmp ecx, eax
jne 0x44001b
push eax
lea eax, [edi + 0x21]
push eax
push edx
call fcn.00487510
add esp, 0xc
test eax, eax
je 0x440026
lea edx, [esi + 0xf5]
push edx
push str.Non_consecutive_multiextent_file_parts_for__s
jmp 0x440386
mov eax, dword [esp + 0x28]
lea ecx, [esp + 0x68]
mov edx, eax
push esi
push ecx
mov ecx, edi
call fcn.00441940
add esp, 8
mov dword [esp + 0x28], eax
test eax, eax
jle 0x44009a
cmp eax, dword [esp + 0x2c]
jle 0x44008f
add eax, 0xfa
push eax
push 1
mov dword [esp + 0x20], eax
call fcn.0047b53f
mov edi, eax
add esp, 8
test edi, edi
jne 0x440072
push dword [esp + 0x18]
push str.Couldnt_calloc_1___d_
jmp 0x440386
push dword [esp + 0x20]
push esi
push edi
call fcn.00476fc0
add esp, 0xc
push esi
call fcn.004812c6
mov eax, dword [esp + 0x2c]
add esp, 4
mov esi, edi
inc eax
push eax
lea eax, [esp + 0x6c]
jmp 0x440127
mov al, byte [edi + 0x21]
add edi, 0x21
test al, al
jne 0x4400b5
mov al, byte [esp + 0xd]
cmp al, 1
jne 0x4400ca
push 2
push 0x4ba134
jmp 0x440128
cmp al, 1
mov al, byte [esp + 0xd]
jne 0x4400ca
cmp al, 1
jne 0x4400ca
push 3
push 0x4ba138
jmp 0x440128
cmp byte [ebp + 0x10], 0
movzx eax, al
je 0x44011a
push ecx
lea ecx, [esp + 0x24]
mov dword [esp + 0x24], 0
push ecx
mov edx, eax
mov ecx, edi
call fcn.004521c0
add esp, 8
test al, al
je 0x44038e
movzx eax, byte [esp + 0xd]
mov edi, dword [esp + 0x20]
push eax
lea eax, [esi + 0xf5]
push edi
push eax
call fcn.00489a40
add esp, 0xc
push edi
call fcn.004812c6
add esp, 4
jmp 0x440137
push eax
push edi
jmp 0x440128
movzx eax, byte [esp + 0xd]
push eax
lea eax, [edi + 0x21]
push eax
lea eax, [esi + 0xf5]
push eax
call fcn.00489a40
add esp, 0xc
mov edx, dword [esp + 0x10]
lea edi, [esi + 0xb0]
lea ecx, [edx + 0x12]
test ecx, ecx
je 0x440281
cmp byte [ecx], 0
jne 0x4401bf
cmp byte [ecx + 1], 0
jne 0x4401bf
cmp byte [ecx + 2], 0
jne 0x4401bf
cmp byte [ecx + 3], 0
jne 0x4401bf
cmp byte [ecx + 4], 0
jne 0x4401bf
cmp byte [ecx + 5], 0
jne 0x4401bf
lea eax, [esp + 0x18]
xorps xmm0, xmm0
push eax
movlpd qword [esp + 0x1c], xmm0
call fcn.004902b6
add esp, 4
test eax, eax
je 0x4401a2
movups xmm0, xmmword [eax]
movups xmm1, xmmword [eax + 0x10]
mov eax, dword [eax + 0x20]
movups xmmword [edi], xmm0
movups xmmword [edi + 0x10], xmm1
mov dword [edi + 0x20], eax
jmp 0x44027d
movaps xmm0, xmmword [esp + 0x30]
movaps xmm1, xmmword [esp + 0x40]
mov eax, dword [esp + 0x50]
movups xmmword [edi], xmm0
movups xmmword [edi + 0x10], xmm1
mov dword [edi + 0x20], eax
jmp 0x44027d
xorps xmm0, xmm0
movups xmmword [edi], xmm0
push 0x4d120c
movups xmmword [edi + 0x10], xmm0
mov dword [edi + 0x20], 0
movzx eax, byte [ecx]
mov dword [edi + 0x14], eax
movzx eax, byte [ecx + 1]
dec eax
mov dword [edi + 0x10], eax
movzx eax, byte [ecx + 2]
mov dword [edi + 0xc], eax
movzx eax, byte [ecx + 3]
mov dword [edi + 8], eax
movzx eax, byte [ecx + 4]
mov dword [edi + 4], eax
movsx eax, byte [ecx + 6]
movzx ecx, byte [ecx + 5]
imul eax, eax, 0x384
mov dword [edi + 0x20], 0xffffffff
sub ecx, eax
mov dword [edi], ecx
call fcn.0048efff
add esp, 4
call fcn.0048fd97
push edi
call fcn.0048ac3b
add esp, 4
mov dword [esp + 0x18], edx
mov edi, eax
call fcn.0048fd97
mov eax, dword [esp + 0x18]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x20]
push eax
mov dword [esp + 0x24], edi
call fcn.004902b6
add esp, 4
test eax, eax
je 0x44025b
movups xmm0, xmmword [eax]
movups xmm1, xmmword [eax + 0x10]
mov eax, dword [eax + 0x20]
jmp 0x440269
mov eax, dword [esp + 0x50]
movaps xmm1, xmmword [esp + 0x40]
movaps xmm0, xmmword [esp + 0x30]
movups xmmword [esi + 0xb0], xmm0
movups xmmword [esi + 0xc0], xmm1
mov dword [esi + 0xd0], eax
mov edx, dword [esp + 0x10]
cmp byte [esp + 0xf], 0x21
jae 0x440295
test esi, esi
je 0x4403ae
jmp 0x44038e
movzx edi, byte [edx]
movzx eax, byte [esp + 0xd]
mov ecx, edi
sub ecx, eax
lea eax, [ecx - 1]
and eax, 1
sub ecx, eax
add ecx, 0xffffffdf
mov dword [esp + 0x18], ecx
js 0x440364
cmp ecx, 0xe
jb 0x440364
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x440364
sub edi, ecx
dec eax
add edi, edx
neg eax
sbb eax, eax
add eax, 3
cmp byte [edi + 6], 0x58
lea ecx, [edi + 7]
mov dword [esp + 0x20], ecx
jne 0x440325
cmp byte [ecx], 0x41
jne 0x440329
mov byte [esi + 0xf4], 1
mov eax, esi
movq xmm0, qword [edi]
movq qword [esi + 0xe0], xmm0
mov ecx, dword [edi + 8]
mov dword [esi + 0xe8], ecx
mov cx, word [edi + 0xc]
mov word [esi + 0xec], cx
pop edi
pop esi
mov ecx, dword [esp + 0x164]
xor ecx, esp
call fcn.00475c80
mov esp, ebp
pop ebp
ret
mov dword [esp + 0x20], ecx
push str.XA_signature_not_found_in_ISO9660s_system_use_area__ignoring_XA_attributes_for_this_file_entry.
push eax
call fcn.0043f360
mov eax, dword [esp + 0x18]
movsx ecx, byte [edi + 6]
mov dl, byte [eax]
mov eax, dword [esp + 0x28]
movsx eax, byte [eax]
push eax
push ecx
push eax
movzx eax, byte [esp + 0x21]
push ecx
push dword [esp + 0x30]
push eax
movzx eax, dl
push eax
push str._d__d__d___c_c___d___d_
call fcn.0043f380
add esp, 0x28
mov eax, esi
pop edi
pop esi
mov ecx, dword [esp + 0x164]
xor ecx, esp
call fcn.00475c80
mov esp, ebp
pop ebp
ret
lea eax, [esi + 0xf5]
push eax
push str.Non_contiguous_data_extents_with__s
call fcn.0043f3c0
add esp, 8
mov eax, dword [esi + 0x1d]
test eax, eax
je 0x4403a5
push eax
call fcn.004812c6
add esp, 4
mov dword [esi + 0x1d], 0
push esi
call fcn.004812c6
add esp, 4
mov ecx, dword [esp + 0x16c]
xor eax, eax
pop edi
pop esi
xor ecx, esp
call fcn.00475c80
mov esp, ebp
pop ebp
ret