Function at 0x40f760
Capabilities:
Enumerate pe sections

Disassembly:
push 0xffffffffffffffff
push 0x43b118
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x50
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x70]
mov ebp, ecx
xor eax, eax
xor ecx, ecx
mov ax, word [edi + 6]
mov cx, word [edi + 4]
imul eax, ecx
mov esi, dword [ebp + 0x4474]
mov ecx, ebp
imul esi, eax
push esi
call fcn.0040bb90
mov edx, dword [ebp + 0x1c4]
push esi
push edx
mov ecx, ebp
call fcn.0040b880
mov al, byte [ebp + 0x4422]
mov cx, word [ebp + 0x441c]
mov dl, byte [ebp + 0x4423]
mov byte [esp + 0x38], al
mov ax, word [ebp + 0x441e]
mov word [esp + 0x3c], cx
mov cl, byte [ebp + 0x4424]
mov word [esp + 0x34], ax
mov byte [esp + 0x30], dl
mov dx, word [ebp + 0x4420]
lea eax, [ebp + 0x1e4]
mov byte [esp + 0x28], cl
push eax
lea ecx, [esp + 0x48]
mov word [esp + 0x30], dx
call fcn.00408cb0
mov ecx, dword [ebp + 0x3a1c]
mov edx, dword [ebp + 0x3a20]
push ecx
push edx
lea ecx, [esp + 0x60]
mov dword [esp + 0x70], 0
call fcn.00408d20
mov eax, dword [ebp + 0x3a24]
mov ecx, dword [ebp + 0x3a20]
push eax
mov bl, 1
push ecx
lea ecx, [esp + 0x58]
mov byte [esp + 0x70], bl
call fcn.00408d60
xor eax, eax
mov byte [esp + 0x68], 2
mov al, byte [ebp + 0x4418]
lea ecx, [eax - 8]
cmp ecx, 0x18
ja case.0x40f860.11
xor edx, edx
mov dl, byte [ecx + 0x40fd20]
jmp dword [edx*4 + 0x40fd10]
mov eax, dword [ebp + 0x1c4]
xor ecx, ecx
mov cx, word [edi + 6]
mov dword [esp + 0x20], eax
xor eax, eax
mov ax, word [edi + 2]
add ecx, eax
mov dword [esp + 0x24], eax
cmp eax, ecx
jge 0x40fcb1
xor ecx, ecx
xor edx, edx
mov cx, word [edi]
mov dx, word [edi + 4]
add edx, ecx
mov dword [esp + 0x40], ecx
cmp ecx, edx
jge 0x40f9b8
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
mov ebx, dword [esp + 0x34]
and edx, 0xff
and ecx, 0xff
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x38]
and edx, 0xff
and eax, 0xffff
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x3c]
and ebx, 0xffff
and edx, 0xffff
mov dword [esp + 0x10], ecx
mov dword [esp + 0x70], eax
mov dword [esp + 0x1c], edx
jmp 0x40f8fd
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0x20]
mov dl, byte [edx]
mov byte [esp + 0x48], dl
mov esi, dword [esp + 0x48]
and esi, 0xff
mov edx, esi
shr edx, cl
mov ecx, dword [esp + 0x14]
and edx, eax
mov eax, edx
shl eax, 8
sub eax, edx
cdq
idiv dword [esp + 0x70]
mov edx, esi
shr edx, cl
mov ecx, dword [esp + 0x18]
shr esi, cl
mov ecx, dword [esp + 0x1c]
and edx, ebx
and esi, ecx
and eax, 0xff
or ah, 2
shl eax, 8
mov dword [esp + 0x4c], eax
mov eax, edx
shl eax, 8
sub eax, edx
cdq
idiv ebx
mov edx, dword [esp + 0x4c]
and eax, 0xff
or edx, eax
mov eax, esi
shl eax, 8
shl edx, 8
sub eax, esi
mov dword [esp + 0x4c], edx
cdq
idiv ecx
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x24]
mov esi, dword [esp + 0x40]
and eax, 0xff
or ecx, eax
mov eax, dword [ebp + 0x3a20]
push ecx
push edx
push esi
push eax
call dword [sym.imp.GDI32.dll_SetPixelV]
mov edx, dword [esp + 0x20]
xor ecx, ecx
mov cx, word [edi]
inc edx
mov dword [esp + 0x20], edx
xor edx, edx
mov dx, word [edi + 4]
inc esi
add ecx, edx
mov dword [esp + 0x40], esi
cmp esi, ecx
jl 0x40f8f5
mov eax, dword [esp + 0x24]
xor ecx, ecx
xor edx, edx
mov cx, word [edi + 2]
mov dx, word [edi + 6]
inc eax
add ecx, edx
cmp eax, ecx
mov dword [esp + 0x24], eax
jl 0x40f88b
mov byte [esp + 0x68], 1
jmp 0x40fcd1
mov eax, dword [ebp + 0x1c4]
xor ecx, ecx
mov cx, word [edi + 6]
mov dword [esp + 0x24], eax
xor eax, eax
mov ax, word [edi + 2]
add ecx, eax
mov dword [esp + 0x20], eax
cmp eax, ecx
jge 0x40fcb1
xor ecx, ecx
xor edx, edx
mov cx, word [edi]
mov dx, word [edi + 4]
add edx, ecx
mov dword [esp + 0x40], ecx
cmp ecx, edx
jge 0x40fb29
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
mov ebx, dword [esp + 0x34]
and edx, 0xff
and ecx, 0xff
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x38]
and edx, 0xff
and eax, 0xffff
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x3c]
and ebx, 0xffff
and edx, 0xffff
mov dword [esp + 0x10], ecx
mov dword [esp + 0x70], eax
mov dword [esp + 0x1c], edx
jmp 0x40fa73
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0x24]
mov si, word [edx]
and esi, 0xffff
mov edx, esi
shr edx, cl
mov ecx, dword [esp + 0x14]
and edx, eax
mov eax, edx
shl eax, 8
sub eax, edx
cdq
idiv dword [esp + 0x70]
mov edx, esi
shr edx, cl
mov ecx, dword [esp + 0x18]
shr esi, cl
mov ecx, dword [esp + 0x1c]
and edx, ebx
and esi, ecx
and eax, 0xff
or ah, 2
shl eax, 8
mov dword [esp + 0x4c], eax
mov eax, edx
shl eax, 8
sub eax, edx
cdq
idiv ebx
mov edx, dword [esp + 0x4c]
and eax, 0xff
or edx, eax
mov eax, esi
shl eax, 8
shl edx, 8
sub eax, esi
mov dword [esp + 0x4c], edx
cdq
idiv ecx
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x20]
mov esi, dword [esp + 0x40]
and eax, 0xff
or ecx, eax
mov eax, dword [ebp + 0x3a20]
push ecx
push edx
push esi
push eax
call dword [sym.imp.GDI32.dll_SetPixelV]
mov edx, dword [esp + 0x24]
xor ecx, ecx
mov cx, word [edi]
add edx, 2
mov dword [esp + 0x24], edx
xor edx, edx
mov dx, word [edi + 4]
inc esi
add ecx, edx
mov dword [esp + 0x40], esi
cmp esi, ecx
jl 0x40fa6b
mov eax, dword [esp + 0x20]
xor ecx, ecx
xor edx, edx
mov cx, word [edi + 2]
mov dx, word [edi + 6]
inc eax
add ecx, edx
cmp eax, ecx
mov dword [esp + 0x20], eax
jl 0x40fa01
mov byte [esp + 0x68], 1
jmp 0x40fcd1
mov eax, dword [ebp + 0x1c4]
xor ecx, ecx
mov cx, word [edi + 6]
mov dword [esp + 0x24], eax
xor eax, eax
mov ax, word [edi + 2]
add ecx, eax
mov dword [esp + 0x20], eax
cmp eax, ecx
jge 0x40fcb1
xor ecx, ecx
xor edx, edx
mov cx, word [edi]
mov dx, word [edi + 4]
add edx, ecx
mov dword [esp + 0x40], ecx
cmp ecx, edx
jge 0x40fc96
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
mov ebx, dword [esp + 0x34]
and edx, 0xff
and ecx, 0xff
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x38]
and edx, 0xff
and eax, 0xffff
mov dword [esp + 0x18], edx
mov edx, dword [esp + 0x3c]
and ebx, 0xffff
and edx, 0xffff
mov dword [esp + 0x10], ecx
mov dword [esp + 0x70], eax
mov dword [esp + 0x1c], edx
jmp 0x40fbe4
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0x24]
mov esi, dword [edx]
mov edx, esi
shr edx, cl
mov ecx, dword [esp + 0x14]
and edx, eax
mov eax, edx
shl eax, 8
sub eax, edx
xor edx, edx
div dword [esp + 0x70]
mov edx, esi
shr edx, cl
mov ecx, dword [esp + 0x18]
shr esi, cl
mov ecx, dword [esp + 0x1c]
and edx, ebx
and esi, ecx
and eax, 0xff
or ah, 2
shl eax, 8
mov dword [esp + 0x4c], eax
mov eax, edx
shl eax, 8
sub eax, edx
xor edx, edx
div ebx
mov edx, dword [esp + 0x4c]
and eax, 0xff
or edx, eax
mov eax, esi
shl edx, 8
shl eax, 8
mov dword [esp + 0x4c], edx
sub eax, esi
xor edx, edx
mov esi, dword [esp + 0x40]
div ecx
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x20]
and eax, 0xff
or ecx, eax
mov eax, dword [ebp + 0x3a20]
push ecx
push edx
push esi
push eax
call dword [sym.imp.GDI32.dll_SetPixelV]
mov edx, dword [esp + 0x24]
xor ecx, ecx
mov cx, word [edi]
add edx, 4
mov dword [esp + 0x24], edx
xor edx, edx
mov dx, word [edi + 4]
inc esi
add ecx, edx
mov dword [esp + 0x40], esi
cmp esi, ecx
jl 0x40fbdc
mov eax, dword [esp + 0x20]
xor ecx, ecx
xor edx, edx
mov cx, word [edi + 2]
mov dx, word [edi + 6]
inc eax
add ecx, edx
cmp eax, ecx
mov dword [esp + 0x20], eax
jl 0x40fb72
mov byte [esp + 0x68], 1
jmp 0x40fcd1
push eax
push str.Invalid_number_of_bits_per_pixel:__d_n
push 0
push 0x44a3a0
call fcn.004063e0
add esp, 0x10
mov byte [esp + 0x68], bl
lea ecx, [esp + 0x50]
call fcn.00408d90
lea ecx, [esp + 0x58]
mov byte [esp + 0x68], 0
call fcn.00408d40
lea ecx, [esp + 0x44]
mov dword [esp + 0x68], 0xffffffff
call fcn.00408cd0
mov ecx, dword [esp + 0x60]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x5c
ret 4