Function at 0x41df00
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x41e1d5
sub esp, 0x1c
mov eax, 0x4c2de0
mov ecx, dword [esp + 0x20]
mov ebp, dword [eax + 0xa80]
cmp ecx, ebp
jb 0x41e1ce
mov ebp, dword [eax + 0xa84]
cmp ecx, ebp
jae 0x41e1ce
mov ebx, dword [eax + 0xa80]
mov ebp, ecx
sub ebp, ebx
mov ebx, ebp
shr ebx, 0xd
mov ebp, dword [0x4c1234]
cmp ebx, ebp
jae 0x41e1c7
mov ebp, dword [0x4c1230]
shl ebx, 2
add ebp, ebx
mov eax, dword [ebp]
xor ebp, ebp
cmp eax, ebp
je 0x41e1c0
mov edx, dword [eax + 0xc]
cmp ecx, edx
jb 0x41e1c0
mov ebp, dword [eax + 0x50]
cmp ecx, ebp
jae 0x41e1c0
movzx ebp, byte [eax + 0x3c]
xchg ebp, eax
cmp al, 0
xchg ebp, eax
jne 0x41e1c0
mov esi, eax
mov dword [esp + 0x14], eax
xor ebp, ebp
cmp eax, ebp
jne 0x41dfbd
mov ebx, 0x48755d
mov dword [esp], ebx
mov dword [esp + 4], 0x1d
call fcn.00424fa0
mov esi, dword [esp + 0x14]
mov ebx, dword fs:[0x14]
mov ecx, dword [ebx]
mov eax, dword [ecx + 0x18]
mov edx, dword [eax + 0x70]
inc edx
mov dword [eax + 0x70], edx
mov ebp, dword [ecx + 0x18]
mov dword [esp + 0x18], ebp
mov dword [esp], esi
call fcn.004194d0
mov edx, dword [esp + 0x14]
mov ebx, dword [edx + 0xc]
mov ebp, dword [esp + 0x20]
sub ebp, ebx
mov dword [esp + 0xc], ebp
mov ebx, dword [esp + 0x24]
movzx ebp, byte [ebx + 6]
xchg ebp, eax
mov byte [esp + 0xb], al
xchg ebp, eax
mov dword [esp], edx
cmp dword [esp], 0
je 0x41e1b5
add dword [esp], 0x54
call fcn.00409a60
movzx edi, byte [esp + 0xb]
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
cmp ecx, 0
je 0x41e1ae
add ecx, 0x58
mov eax, dword [ecx]
xor ebp, ebp
cmp eax, ebp
jne 0x41e104
mov ebx, dword [esp + 0x24]
mov word [ebx + 4], dx
mov dword [esp + 0x10], ecx
mov ebp, dword [ecx]
mov ebx, dword [esp + 0x24]
cmp ebx, 0
je 0x41e0fd
cmp byte [0x4d1078], 0
jne 0x41e0e8
mov dword [ebx], ebp
mov eax, dword [esp + 0x24]
cmp ecx, 0
je 0x41e0e4
cmp byte [0x4d1078], 0
jne 0x41e0d6
mov dword [ecx], eax
mov ebx, dword [esp + 0x14]
mov dword [esp], ebx
cmp dword [esp], 0
je 0x41e0ce
add dword [esp], 0x54
call fcn.00409ca0
mov eax, dword [esp + 0x18]
mov ebx, dword fs:[0x14]
mov ecx, dword [ebx]
mov edx, dword [eax + 0x70]
dec edx
mov dword [eax + 0x70], edx
mov ebp, dword [eax + 0x70]
cmp ebp, 0
jne 0x41e0c5
movzx ebx, byte [ecx + 0x80]
cmp bl, 0
je 0x41e0c5
mov eax, 0xfffffade
mov dword [ecx + 8], eax
mov byte [esp + 0x28], 1
add esp, 0x1c
ret
mov dword [0], eax
jmp 0x41e088
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040c2a0
jmp 0x41e07b
mov dword [ecx], eax
jmp 0x41e070
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0040c2a0
mov ecx, dword [esp + 0x10]
jmp 0x41e067
mov dword [ebx], eax
jmp 0x41e058
movzx ebp, word [eax + 4]
cmp ebp, edx
jne 0x41e175
movzx ebp, byte [eax + 6]
xchg ebp, eax
xchg edi, ebx
cmp al, bl
xchg edi, ebx
xchg ebp, eax
jne 0x41e175
mov ebx, dword [esp + 0x14]
mov dword [esp], ebx
cmp dword [esp], 0
je 0x41e16d
add dword [esp], 0x54
call fcn.00409ca0
mov eax, dword [esp + 0x18]
mov ebx, dword fs:[0x14]
mov ecx, dword [ebx]
mov edx, dword [eax + 0x70]
dec edx
mov dword [eax + 0x70], edx
mov ebp, dword [eax + 0x70]
cmp ebp, 0
jne 0x41e164
movzx ebx, byte [ecx + 0x80]
cmp bl, 0
je 0x41e164
mov eax, 0xfffffade
mov dword [ecx + 8], eax
mov byte [esp + 0x28], 0
add esp, 0x1c
ret
mov dword [0], eax
jmp 0x41e127
movzx ebp, word [eax + 4]
cmp ebp, edx
ja 0x41e03d
movzx ebp, word [eax + 4]
cmp ebp, edx
jne 0x41e19b
movzx ebp, byte [eax + 6]
xchg ebp, eax
xchg edi, ebx
cmp al, bl
xchg edi, ebx
xchg ebp, eax
ja 0x41e03d
mov ecx, eax
cmp eax, 0
je 0x41e1a7
jmp 0x41e031
mov dword [eax], eax
jmp 0x41e031
mov dword [ecx], eax
jmp 0x41e02e
mov dword [0], eax
jmp 0x41e00f
xor eax, eax
jmp 0x41df98
call fcn.00423330
ud2
xor eax, eax
jmp 0x41df98
call fcn.00448770
jmp fcn.0041df00