Function at 0x40950a
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x240
movzx eax, byte [ebp + 0x24]
test eax, eax
je 0x40a0de
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x110], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0xb8], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x144]
movzx eax, byte [eax]
test eax, eax
je 0x40a0d4
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0xc0]
movzx eax, byte [eax]
test eax, eax
je 0x40962c
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x18]
mov dword [eax], 0
jmp 0x409607
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
mov eax, dword [ebp - 0x18]
cmp dword [eax], 3
jge 0x409627
mov eax, dword [ebp - 0x18]
push dword [eax]
mov ecx, dword [ebp - 0x140]
call fcn.0042daea
mov dword [eax], 0xb6f9b691
jmp 0x4095fc
jmp 0x40a0d2
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x134], 0xfffc
mov dword [ebp - 0xa4], 0xfffffffa
push 3
lea ecx, [ebp - 0x1c0]
call fcn.0042d9fc
push 2
lea ecx, [ebp - 0x1b4]
call fcn.0042d9fc
mov dword [ebp - 0xf4], 8
mov dword [ebp - 0xec], 0xbc35240c
mov dword [ebp - 0xfc], 0x7a67d926
mov dword [ebp - 0x12c], 0xffffffff
push 0
push 0x5a05
push 0x4737
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0xe4]
push eax
call fcn.0040a886
add esp, 0x14
lea eax, [ebp - 0xe4]
push eax
push 0x344f
lea eax, [ebp - 0x1b4]
push eax
push 0x2678
push 0
push 0
call fcn.0040a8fc
add esp, 0x18
push 0
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.00425e76
add esp, 0x24
lea ecx, [ebp - 0x1b4]
call fcn.0042dace
lea ecx, [ebp - 0x1c0]
call fcn.0042dace
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 4]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x1c4], 0xffffffff
mov dword [ebp - 0x1c8], 0xffb871c7
mov dword [ebp - 0x10], 0xa2cb51db
mov dword [ebp - 0x1cc], 0x443250e6
mov dword [ebp - 0x10c], 1
mov dword [ebp - 8], 0xedcad208
mov dword [ebp - 0x2c], 0xfffffffc
mov dword [ebp - 0x14], 0xc4f27d27
mov dword [ebp - 0x1c], 0x50315362
mov dword [ebp - 0x1d4], 0x21a35ca4
mov dword [ebp - 0x190], 0x26f3f17e
mov dword [ebp - 0x18c], 0x26f3f17e
mov dword [ebp - 0x188], 0x26f3f17e
mov dword [ebp - 0x184], 0x26f3f17e
lea ecx, [ebp - 0x35]
call fcn.0042daf9
push eax
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x234]
call fcn.0042dafc
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x19c]
call fcn.0042daa8
mov dword [ebp - 0x14c], 1
push 0x709c
push 0x748b
push 0x6c14
push 0
push 0x5895
push 1
push 0x5233
push 0x1105
lea eax, [ebp - 0x14c]
push eax
push 1
push 0
call fcn.0040d75c
add esp, 0x2c
mov dword [ebp - 0x2c], 0
jmp 0x40984b
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xfffffff3
jl 0x409c48
push 1
lea ecx, [ebp - 0xa0]
call fcn.0042d9fc
mov dword [ebp - 0x54], 0x9a1248f7
push 0x2b9d
push 0
push 0x140a
push 0x6f2d
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.00411b6b
add esp, 0x18
mov dword [ebp - 0x24], 0
jmp 0x40989d
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x4098b3
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x124], 0
jmp 0x409896
mov dword [ebp - 0x1c], 0
jmp 0x4098c3
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xfffffffb
je 0x409c38
mov dword [ebp - 0x40], 0x6d99
mov dword [ebp - 0x7c], 1
mov dword [ebp - 0xc], 8
mov dword [ebp - 0x58], 1
push 0x55f0
push 0
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x10]
push eax
push 1
push 0
push 0x2b4
call fcn.0040daea
add esp, 0x1c
mov dword [ebp - 0x14], 0
jmp 0x409919
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xc
jne 0x409c33
mov dword [ebp - 0x84], 0x5c526587
mov dword [ebp - 0x10], 0
jmp 0x40993d
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jg 0x409c2e
mov dword [ebp - 0x17c], 1
mov dword [ebp - 0x178], 1
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x170], 1
lea ecx, [ebp - 0x49]
call fcn.0042daf9
push eax
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0x22c]
call fcn.0042dafc
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x168]
call fcn.0042daa8
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0xc]
push eax
push 0
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x84]
push eax
call fcn.0040a798
add esp, 0x28
mov dword [ebp - 8], 0
jmp 0x4099eb
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jg 0x409c1e
mov dword [ebp - 0x104], 0x21979897
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0x114], 7
mov dword [ebp - 0xc], 0
jmp 0x409a20
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jg 0x409c19
mov dword [ebp - 0x3c], 0
mov eax, 0x3c9e
test eax, eax
je 0x409a4c
cmp dword [ebp - 0x40], 0
je 0x409a4c
mov dword [ebp - 0x90], 1
jmp 0x409a53
and dword [ebp - 0x90], 0
push dword [ebp - 8]
lea ecx, [ebp - 0xa0]
call fcn.0042daea
mov eax, dword [eax]
cmp eax, dword [ebp - 0x90]
jne 0x409a74
mov dword [ebp - 0x48], 1
jmp 0x409a78
and dword [ebp - 0x48], 0
push dword [ebp - 0xc]
lea ecx, [ebp - 0x19c]
call fcn.0042daea
mov ecx, dword [ebp - 0x48]
mov dword [eax], ecx
cmp dword [ebp - 0x48], 0
je 0x409aa6
cmp dword [ebp - 0x104], 0
je 0x409aa6
mov dword [ebp - 0x8c], 1
jmp 0x409aad
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1ec], eax
or eax, 0xffffffff
cmp eax, 8
jne 0x409ae2
mov dword [ebp - 0x64], 1
jmp 0x409ae6
and dword [ebp - 0x64], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x64], eax
jg 0x409af7
mov dword [ebp - 0x50], 1
jmp 0x409afb
and dword [ebp - 0x50], 0
push dword [ebp - 8]
lea ecx, [ebp - 0xa0]
call fcn.0042daea
mov eax, dword [eax]
cmp eax, dword [ebp - 0x50]
jg 0x409b1c
mov dword [ebp - 0x13c], 1
jmp 0x409b23
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x1f8], eax
push 0
lea ecx, [ebp - 0x168]
call fcn.0042daea
cmp dword [eax], 1
jb 0x409b4a
mov dword [ebp - 0x6c], 1
jmp 0x409b4e
and dword [ebp - 0x6c], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x1f4], eax
push 0
lea ecx, [ebp - 0xa0]
call fcn.0042daea
cmp dword [eax], 1
jge 0x409b7e
mov dword [ebp - 0x74], 1
jmp 0x409b82
and dword [ebp - 0x74], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
je 0x409bad
push 9
pop eax
test eax, eax
je 0x409bad
mov dword [ebp - 0x34], 1
jmp 0x409bb1
and dword [ebp - 0x34], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x34]
mov dword [ebp + eax - 0x124], ecx
cmp dword [ebp - 0x34], 0xffff
jbe 0x409bd3
mov dword [ebp - 0x60], 1
jmp 0x409bd7
and dword [ebp - 0x60], 0
cmp dword [ebp - 0x60], 0x970e
jl 0x409be9
mov dword [ebp - 0x68], 1
jmp 0x409bed
and dword [ebp - 0x68], 0
imul eax, dword [ebp - 0x68], 0xc1c0
add eax, dword [ebp - 0x3c]
mov dword [ebp - 0x114], eax
push 0
lea ecx, [ebp - 0x168]
call fcn.0042daea
cmp dword [eax], 0
je 0x409c14
jmp 0x409a19
jmp 0x409a19
jmp 0x4099e4
lea ecx, [ebp - 0x168]
call fcn.0042dace
jmp 0x409936
jmp 0x409912
jmp 0x4098bc
lea ecx, [ebp - 0xa0]
call fcn.0042dace
jmp 0x409844
lea ecx, [ebp - 0x19c]
call fcn.0042dace
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x70], 0xe6d058a8
push 3
lea ecx, [ebp - 0x1a8]
call fcn.0042d9fc
mov dword [ebp - 0x11c], 0xfffffff7
mov dword [ebp - 0x78], 0x90c6d21c
mov dword [ebp - 0x128], 0xfffffffe
push 1
push 0x325b
push 0x282a
push 0x7495
push 0x554
push 0x1563
push 0x5977
push 0x4ac1
push 0x7be6
lea eax, [ebp - 0x1a8]
push eax
push 0x7ea8
push 0
push 0x5547
push 0x399a
lea eax, [ebp - 0x1d0]
push eax
push 1
call fcn.0040859c
add esp, 0x40
push 0
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.00413c3a
add esp, 0x1c
push 0
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.00422a64
add esp, 0xc
lea ecx, [ebp - 0x1a8]
call fcn.0042dace
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 4], eax
push 2
lea ecx, [ebp - 0x158]
call fcn.0042d9fc
push 0
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.004108c3
add esp, 0xc
push 0
lea ecx, [ebp - 0x158]
call fcn.0042daea
mov dword [eax], 0xfffffff7
jmp 0x409d94
push 0
lea ecx, [ebp - 0x158]
call fcn.0042daea
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x80]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x158]
call fcn.0042daea
cmp dword [eax], 0xfffffffd
jne 0x409dca
push 0x610f
push 1
push 0x3ab6
push 0x4be4
push 0x14bd
push 0
push 1
call fcn.00411868
add esp, 0x1c
jmp 0x409d79
push 0
call fcn.00413744
pop ecx
lea ecx, [ebp - 0x158]
call fcn.0042dace
and dword [ebp - 0x44], 0
jmp 0x409df3
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 4]
add eax, 0x28
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x44], eax
jge 0x40a0d2
mov dword [ebp - 0x88], 0xffffffff
push 0
lea eax, [ebp - 0x88]
push eax
call fcn.00415a5d
pop ecx
pop ecx
lea eax, [ebp - 0x88]
push eax
push 0x545e
push 0
call fcn.004187a6
add esp, 0xc
mov eax, dword [ebp - 4]
cmp dword [eax + 0x10], 0
jne 0x409eba
push 0x6a8f
push 0x288d
push 0
push 1
push 0x148f
push 0
call fcn.0041492b
add esp, 0x18
lea eax, [ebp - 0xd4]
push eax
push 0x71bc
push 0x2c4d
push 1
lea eax, [ebp - 0x94]
push eax
push 0x1c35
lea eax, [ebp - 4]
push eax
push 1
push 0
push 0x2f72
push 0x46eb
push 0x1106
push 0
push 0x75be
lea eax, [ebp - 0x30]
push eax
call fcn.00411bae
add esp, 0x3c
push 0
push 0x7026
push 0
call fcn.0040ac9a
add esp, 0xc
jmp 0x409de3
mov dword [ebp - 0xd8], 0xa049fe38
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xe8], 0x54384f3a
mov dword [ebp - 0xf0], 0xffffffff
push 0x7259
push 0x4b00
push 1
push 0xecd
lea eax, [ebp - 0xd8]
push eax
push 1
push 0x7c0e
lea eax, [ebp - 0xe0]
push eax
push 0x1b6d
push 0x1b6
push 0x445b
push 0x2c4e
push 0x6e56
lea eax, [ebp - 0xe8]
push eax
push 0x636b
push 0
push 0x65c9
push 0x58bb
push 0
push 0x5d34
lea eax, [ebp - 0xf0]
push eax
call fcn.00416da8
add esp, 0x54
push 1
push 0x3f2e
push 0x55ce
push 0x25b6
push 0x7e6d
push 0x31c6
push 0x5dda
push 0x3c12
push 0x4872
push 0
push 0
push 0x3c62
call fcn.0040aea0
add esp, 0x30
push 4
push 0x1000
mov eax, dword [ebp - 4]
push dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x94]
add ecx, dword [eax + 0xc]
push ecx
push 0x5b7f
push 0x79fb
call fcn.00406e9d
pop ecx
pop ecx
call eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 4]
push dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0xf8]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x30]
call fcn.00407693
add esp, 0xc
mov dword [ebp - 0x1d8], 0xa53d06ce
mov dword [ebp - 0x1fc], 0x2743
mov dword [ebp - 0x1e0], 0x250db856
push 1
lea ecx, [ebp - 0x208]
call fcn.0042d9fc
mov dword [ebp - 0x21c], 1
mov dword [ebp - 0x218], 1
mov dword [ebp - 0x214], 1
mov dword [ebp - 0x210], 1
mov dword [ebp - 0x220], 0x2e3f9150
mov dword [ebp - 0xa8], 0x9740826f
mov dword [ebp - 0x1e8], 0x15ee56e3
mov dword [ebp - 0x20], 0
jmp 0x40a059
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x40a06f
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x240], 0xf251d69f
jmp 0x40a052
push 0
lea eax, [ebp - 0x20]
push eax
push 0xbc9
lea eax, [ebp - 0x208]
push eax
push 0x60a0
push 0x2f7a
push 0
push 0xc7e
call fcn.0040bfb5
add esp, 0x20
push 0x5fc
push 0
lea eax, [ebp - 0xa8]
push eax
call fcn.0040a1aa
add esp, 0xc
lea ecx, [ebp - 0x208]
call fcn.0042dace
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x30]
push eax
push 0
call fcn.0040da23
add esp, 0xc
jmp 0x409de3
jmp 0x40a0dc
push 0
call fcn.0040afd9
pop ecx
jmp 0x40a149
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xc4], eax
lea eax, [ebp + 0x28]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xac]
movzx eax, byte [eax]
test eax, eax
je 0x40a123
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xbc], eax
push dword [ebp - 0xbc]
push 0
call fcn.00408195
pop ecx
pop ecx
jmp 0x40a149
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xcc], eax
push dword [ebp - 0xcc]
push 0x1600
push 0
push 0x1d5e
call fcn.004083ce
add esp, 0x10
mov esp, ebp
pop ebp
ret