Function at 0x414690
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x34
push ebx
push esi
mov esi, dword [ebp + 8]
mov ebx, ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x18], ebx
push edi
test esi, esi
je 0x4146f3
push 1
lea eax, [esp + 0x24]
mov dword [esp + 0x40], 1
push 0
push eax
mov edx, 1
mov ecx, esi
call fcn.004545c0
add esp, 0xc
test eax, eax
jne 0x4146f3
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x4146e7
cmp eax, 8
mov eax, 0x20000000
jne 0x414b3a
mov eax, 0xa0000000
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [esp + 0x13]
mov ecx, ebx
push eax
lea edx, [esp + 0x1c]
call fcn.00415e10
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x41472c
mov edi, dword [ebx + 0x20]
test edi, edi
je 0x41472c
mov eax, dword [0x4e4788]
mov eax, dword [eax + 0x58]
nop dword [eax + eax]
cmp dword [edi + 8], eax
je 0x41472e
mov edi, dword [edi + 0xc]
test edi, edi
jne 0x414720
xor edi, edi
mov eax, dword [ebp + 0xc]
movzx ecx, ax
mov byte [esp + 0x11], 0
mov byte [esp + 0x12], 0
sub ecx, 1
je 0x414873
sub ecx, 1
je 0x414873
sub ecx, 1
je 0x414873
test ebx, ebx
jne 0x4147a3
test ax, ax
je 0x414768
mov edx, eax
xor ecx, ecx
jmp 0x414774
test esi, esi
je 0x414877
xor edx, edx
mov ecx, esi
push dword [esp + 0x18]
push dword [esp + 0x20]
call fcn.00414b80
mov ebx, eax
add esp, 8
test ebx, ebx
jne 0x414791
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, dword [ebx + 0x24]
mov byte [esp + 0x11], 1
mov byte [esp + 0x12], 1
jmp 0x414945
cmp word [ebx + 6], ax
je 0x4147c7
mov word [ebx + 6], ax
test ax, ax
jne 0x4147b8
mov byte [ebx + 0x19], 1
jmp 0x4147c2
cmp byte [ebx + 0x12], 0
jne 0x4147c2
mov byte [ebx + 0x14], 1
mov byte [esp + 0x11], 1
test esi, esi
je 0x41481f
test edi, edi
je 0x4147e9
cmp esi, dword [edi]
je 0x414827
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov ecx, dword [edi]
test ecx, ecx
je 0x4147e5
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [edi], esi
jmp 0x414827
push dword [esp + 0x18]
mov ecx, ebx
push esi
call fcn.004154a0
mov edi, eax
test edi, edi
jne 0x414807
mov eax, 0xa00e0001
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [0x4e8c6f], 0
mov al, 1
mov byte [esp + 0x12], 1
mov byte [esp + 0x11], al
je 0x41482b
mov dl, al
jmp 0x41482f
test edi, edi
je 0x41494f
mov al, byte [esp + 0x11]
mov dl, byte [esp + 0x13]
mov ecx, dword [esp + 0x18]
mov byte [edi + 0x1d], cl
mov cl, byte [ebx + 0x13]
or cl, byte [esp + 0x18]
test byte [esp + 0x18], 2
mov byte [ebx + 0x13], cl
jne 0x41484d
or cl, 4
mov byte [ebx + 0x13], cl
cmp byte [ebx + 0x14], 0
jne 0x414949
test dl, dl
jne 0x414865
cmp byte [esp + 0x18], dl
je 0x414949
mov byte [esp + 0x11], 1
mov byte [ebx + 0x14], 1
jmp 0x414945
test ebx, ebx
jne 0x4148a9
push dword [0x4e9d9c]
push 0
push 9
push dword [esp + 0x28]
push str.Nonexistent_hotkey.
mov ecx, 0x4e9ec0
call fcn.0040c9d0
neg eax
sbb eax, eax
and eax, 0x80000000
add eax, 0xa0000000
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test edi, edi
jne 0x4148c8
cmp word [ebx + 6], di
jne 0x4148c8
push dword [0x4e9d9c]
push 0
push 9
push dword [esp + 0x28]
push str.Nonexistent_hotkey_variant__IfWin_.
jmp 0x41488a
cmp ax, 3
jne 0x4148e5
xor eax, eax
cmp word [ebx + 6], ax
je 0x4148db
cmp byte [ebx + 0x19], al
jmp 0x4148de
cmp byte [edi + 0x20], al
setne al
inc eax
movzx eax, ax
movzx ecx, word [ebx + 6]
cmp ax, 1
jne 0x414915
test cx, cx
je 0x414903
cmp byte [ebx + 0x19], 0
jne 0x414940
mov byte [ebx + 0x19], al
mov byte [esp + 0x11], al
jmp 0x414945
cmp byte [edi + 0x20], 0
jne 0x414940
mov al, 1
mov byte [edi + 0x20], 1
mov byte [esp + 0x11], al
jmp 0x414949
test cx, cx
je 0x41492c
cmp byte [ebx + 0x19], 0
je 0x414945
mov al, 1
mov byte [ebx + 0x19], 0
mov byte [esp + 0x11], al
jmp 0x414949
cmp byte [edi + 0x20], 0
je 0x414945
mov al, 1
mov word [edi + 0x1f], 0
mov byte [esp + 0x11], al
jmp 0x414949
mov byte [esp + 0x11], 0
mov al, byte [esp + 0x11]
test edi, edi
jne 0x41495e
jmp 0x414953
mov al, byte [esp + 0x11]
cmp word [ebx + 6], 0
je 0x4148b3
mov esi, dword [esp + 0x14]
movzx ecx, word [esi]
test cx, cx
je 0x414b2c
mov edx, ecx
movzx ecx, dx
lea eax, [edx - 0x61]
mov edx, ecx
and edx, 0xffffffdf
cmp ax, 0x19
cmova edx, ecx
add edx, 0xffffffbe
cmp edx, 0x12
ja case.0x414995.67
movzx eax, byte [edx + 0x414b60]
jmp dword [eax*4 + 0x414b44]
lea eax, [esi + 2]
mov dword [esp + 0x1c], eax
movzx eax, word [eax]
mov edx, eax
mov esi, eax
and eax, 0xffdf
add edx, 0xffffff9f
movzx ecx, ax
cmp dx, 0x19
mov eax, esi
cmova ecx, eax
cmp cx, 0x4e
jne 0x4149ff
cmp word [ebx + 6], 0
mov esi, dword [esp + 0x1c]
je 0x4149e7
cmp byte [ebx + 0x19], 0
jne case.0x414995.67
mov byte [ebx + 0x19], 1
mov byte [esp + 0x11], 1
jmp case.0x414995.67
cmp byte [edi + 0x20], 0
jne case.0x414995.67
mov byte [edi + 0x20], 1
mov byte [esp + 0x11], 1
jmp case.0x414995.67
push 3
push 0x4d3e18
push dword [esp + 0x1c]
call fcn.0049f432
mov esi, dword [esp + 0x20]
add esp, 0xc
test eax, eax
jne case.0x414995.67
add esi, 4
cmp word [ebx + 6], ax
je 0x414a31
cmp byte [ebx + 0x19], al
je 0x414a42
mov byte [ebx + 0x19], al
jmp 0x414a3d
cmp byte [edi + 0x20], 0
je 0x414a42
mov word [edi + 0x1f], 0
mov byte [esp + 0x11], 1
cmp byte [esp + 0x12], 0
je case.0x414995.67
mov byte [esp + 0x11], 0
jmp case.0x414995.67
test edi, edi
je case.0x414995.67
mov eax, dword [esp + 0x14]
cmp word [eax + 2], 0x30
setne al
mov byte [edi + 0x1e], al
jmp 0x414b0e
test edi, edi
je case.0x414995.67
mov eax, dword [esp + 0x14]
add eax, 2
push eax
call fcn.004a4f0d
add esp, 4
mov dword [edi + 0x14], eax
jmp 0x414b0e
test edi, edi
je case.0x414995.67
mov eax, dword [esp + 0x14]
cmp word [eax + 2], 0x30
setne al
mov byte [edi + 0x21], al
jmp 0x414b0e
test edi, edi
je case.0x414995.67
mov eax, dword [esp + 0x14]
add eax, 2
push eax
call fcn.004a4f0d
mov edx, dword [0x4e4784]
mov cl, al
mov esi, dword [esp + 0x18]
add esp, 4
movzx eax, cl
mov byte [edi + 0x1b], cl
cmp eax, edx
jle 0x414ad4
mov byte [edi + 0x1b], dl
jmp case.0x414995.67
cmp cl, 1
jae case.0x414995.67
mov byte [edi + 0x1b], 1
jmp case.0x414995.67
test edi, edi
je case.0x414995.67
mov eax, dword [esp + 0x14]
add eax, 2
push eax
call fcn.004a4f0d
add esp, 4
cmp eax, 0x64
ja 0x414b0e
test eax, eax
je 0x414b0b
cmp byte [ebx + 0x14], 0
jne 0x414b0b
mov byte [ebx + 0x14], 1
mov byte [esp + 0x11], 1
mov byte [edi + 0x1c], al
mov esi, dword [esp + 0x14]
movzx eax, word [esi + 2]
add esi, 2
mov dword [esp + 0x14], esi
mov edx, eax
test ax, ax
jne 0x414970
mov al, byte [esp + 0x11]
test al, al
je 0x414b35
call fcn.00413de0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret