Function at 0x42f6f0
Capabilities:
Enumerate pe sections
Inspect section memory permissions

Disassembly:
sub esp, 0x4c
push ebx
push ebp
push esi
mov esi, dword [esp + 0x5c]
push edi
mov eax, dword [esi + 0x268]
mov ebx, dword [esi + 0x28]
cmp eax, 3
jl 0x42f72a
mov eax, dword [esi + 0x54]
mov ecx, dword [esi + 0x274]
mov edx, dword [esi + 0x44]
push eax
push ecx
push edx
push str._______d_in_block___d_after_MTF__1_2_coding___d2_syms_in_use_n
push 0x45fbd0
call fcn.00439b75
add esp, 0x14
mov edx, dword [esi + 0x54]
lea eax, [esi + 0x9324]
add edx, 2
mov edi, eax
mov dword [esp + 0x14], edx
mov dword [esp + 0x60], edi
mov dword [esp + 0x30], 6
test edx, edx
jle 0x42f761
mov ecx, edx
mov eax, 0xf0f0f0f
mov ebp, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, ebp
and ecx, 3
rep stosb byte es:[edi], al
mov edi, dword [esp + 0x60]
mov eax, dword [esp + 0x30]
add edi, 0x102
dec eax
mov dword [esp + 0x60], edi
mov dword [esp + 0x30], eax
jne 0x42f748
mov eax, dword [esi + 0x274]
xor edi, edi
cmp eax, edi
jg 0x42f793
push 0xbb9
call fcn.0042cbe0
add esp, 4
mov ecx, dword [esi + 0x274]
cmp ecx, 0xc8
jge 0x42f7a8
mov eax, 2
jmp 0x42f7d4
cmp ecx, 0x258
jge 0x42f7b7
mov eax, 3
jmp 0x42f7d4
cmp ecx, 0x4b0
jge 0x42f7c6
mov eax, 4
jmp 0x42f7d4
xor eax, eax
cmp ecx, 0x960
setge al
add eax, 5
cmp eax, edi
mov dword [esp + 0x10], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x28], ecx
mov dword [esp + 0x60], edi
jle 0x42f917
add eax, 0x91
mov dword [esp + 0x24], edi
mov ecx, eax
shl ecx, 7
add ecx, eax
lea edx, [esi + ecx*2]
mov dword [esp + 0x18], edx
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x60]
cdq
idiv dword [esp + 0x20]
xor ebp, ebp
lea edi, [ecx - 1]
mov dword [esp + 0x1c], ebp
test eax, eax
jle 0x42f840
mov ecx, dword [esp + 0x14]
lea edx, [esi + edi*4 + 0x278]
dec ecx
cmp edi, ecx
jge 0x42f838
add ebp, dword [edx + 4]
add edx, 4
inc edi
cmp ebp, eax
jl 0x42f829
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x1c], ebp
cmp edi, ecx
jle 0x42f879
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x10]
cmp eax, edx
je 0x42f879
cmp eax, 1
je 0x42f879
mov edx, dword [esp + 0x24]
and edx, 0x80000001
jns 0x42f866
dec edx
or edx, 0xfffffffe
inc edx
cmp edx, 1
jne 0x42f879
mov edx, dword [esi + edi*4 + 0x278]
sub ebp, edx
dec edi
mov dword [esp + 0x1c], ebp
cmp dword [esi + 0x268], 3
jl 0x42f8bd
fild dword [esp + 0x1c]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x20]
sub esp, 8
fmul qword [0x447ba0]
fidiv dword [esi + 0x274]
fstp qword [esp]
push ebp
push edi
push eax
push ecx
push str.______initial_group__d____d_..__d___has__d_syms___4.1f____n
push 0x45fbd0
call fcn.00439b75
mov ecx, dword [esp + 0x80]
add esp, 0x20
mov edx, dword [esp + 0x14]
xor eax, eax
test edx, edx
mov edx, dword [esp + 0x18]
jle 0x42f8e4
cmp eax, ecx
jl 0x42f8d9
cmp eax, edi
jg 0x42f8d9
mov byte [edx + eax], 0
jmp 0x42f8dd
mov byte [edx + eax], 0xf
inc eax
cmp eax, dword [esp + 0x14]
jl 0x42f8cb
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
sub edx, 0x102
dec eax
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x28]
inc ecx
inc edi
sub edx, ebp
mov dword [esp + 0x20], eax
test eax, eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x60], edi
mov dword [esp + 0x28], edx
jg 0x42f803
mov dword [esp + 0x30], 0
mov ebp, dword [esp + 0x10]
test ebp, ebp
jle 0x42f95e
mov ecx, ebp
xor eax, eax
lea edi, [esp + 0x44]
mov dword [esp + 0x60], ebp
mov ebp, dword [esp + 0x14]
lea edx, [esi + 0xb160]
rep stosd dword es:[edi], eax
test ebp, ebp
jle 0x42f94b
mov ecx, ebp
xor eax, eax
mov edi, edx
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x60]
add edx, 0x408
dec eax
mov dword [esp + 0x60], eax
jne 0x42f93f
jmp 0x42f962
mov ebp, dword [esp + 0x14]
cmp dword [esp + 0x10], 6
jne 0x42f9d3
test ebp, ebp
jle 0x42f9d3
mov ebp, 0xffff6cdc
lea eax, [esi + 0x9324]
lea edi, [esi + 0xc994]
sub ebp, esi
xor edx, edx
xor ecx, ecx
mov dl, byte [eax + 0x102]
mov cl, byte [eax]
shl edx, 0x10
or edx, ecx
xor ecx, ecx
mov dword [edi - 4], edx
mov cl, byte [eax + 0x204]
xor edx, edx
add edi, 0x10
mov dl, byte [eax + 0x306]
shl edx, 0x10
or edx, ecx
xor ecx, ecx
mov dword [edi - 0x10], edx
mov cl, byte [eax + 0x408]
xor edx, edx
mov dl, byte [eax + 0x50a]
shl edx, 0x10
or edx, ecx
mov ecx, dword [esp + 0x14]
inc eax
mov dword [edi - 0xc], edx
lea edx, [eax + ebp]
cmp edx, ecx
jl 0x42f980
xor ebp, ebp
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], ebp
mov ecx, dword [esi + 0x274]
mov edx, dword [esp + 0x10]
cmp ebp, ecx
jge 0x430881
lea eax, [ebp + 0x31]
cmp eax, ecx
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], eax
jl 0x42fa05
lea eax, [ecx - 1]
mov dword [esp + 0x18], eax
test edx, edx
jle 0x42fa1e
mov ecx, edx
xor eax, eax
lea edi, [esp + 0x34]
shr ecx, 1
rep stosd dword es:[edi], eax
adc ecx, ecx
rep stosw word es:[edi], ax
mov eax, dword [esp + 0x18]
cmp edx, 6
jne 0x4303b9
mov ecx, eax
sub ecx, ebp
inc ecx
cmp ecx, 0x32
jne 0x4303b9
mov cx, word [ebx + ebp*2]
mov di, word [ebx + ebp*2 + 2]
and ecx, 0xffff
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
lea edx, [ecx + 0xc99]
shl edx, 4
shl edi, 4
mov eax, dword [edx + esi]
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl ecx, 4
shl edi, 4
lea edx, [ecx + esi]
add edi, esi
mov ecx, dword [edx + 0xc994]
mov edx, dword [edx + 0xc998]
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 4]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 6]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 8]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0xa]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0xc]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0xe]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x10]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x12]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x14]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x16]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x18]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x1a]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x1c]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x1e]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x20]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x22]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x24]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x26]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x28]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x2a]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x2c]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x2e]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x30]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x32]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x34]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x36]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x38]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x3a]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x3c]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x3e]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x40]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x42]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x44]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x46]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x48]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x4a]
and edi, 0xffff
mov dword [esp + 0x60], edi
add edi, 0xc99
shl edi, 4
add eax, dword [edi + esi]
mov edi, dword [esp + 0x60]
shl edi, 4
add edi, esi
add ecx, dword [edi + 0xc994]
add edx, dword [edi + 0xc998]
mov di, word [ebx + ebp*2 + 0x4c]
invalid
invalid