Function at 0x41c77c70
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x2c
push ebx
push esi
mov esi, dword [esp + 0x38]
mov eax, ecx
mov dword [esi], 0
mov ebx, dword [eax + 8]
test ebx, ebx
lea ecx, [ebx + ebx*2]
lea ecx, [ecx*4 + 6]
push edi
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], ecx
jle 0x41c77cb2
mov eax, dword [eax + 4]
mov edx, ebx
mov edi, dword [eax]
movzx edi, word [edi + 8]
add ecx, edi
add eax, 4
dec edx
jne 0x41c77ca0
mov dword [esp + 0x1c], ecx
cmp ecx, 0x10000
jb 0x41c77cc5
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x2c
ret 4
lea edi, [ecx + 3]
shr edi, 2
shl edi, 2
test edi, edi
mov eax, edi
jne 0x41c77cd9
mov eax, 1
push eax
call fcn.41c671c0
mov edx, eax
add esp, 4
test edx, edx
jne 0x41c77ced
call fcn.41c43850
mov ecx, edi
xor eax, eax
push ebp
mov ebp, ecx
shr ecx, 2
mov edi, edx
rep stosd dword es:[edi], eax
mov ecx, ebp
and ecx, 3
rep stosb byte es:[edi], al
mov dword [esi], edx
mov byte [edx], 0
mov byte [edx + 1], 0
lea eax, [edx + 2]
lea edi, [ebx + ebx*2]
mov byte [eax], bh
lea edi, [edi*4 + 6]
mov byte [eax + 1], bl
add eax, 2
mov cx, di
shr cx, 8
mov word [esp + 0x2c], di
mov dl, byte [esp + 0x2c]
mov byte [eax], cl
mov byte [eax + 1], dl
lea eax, [ebx*4]
test eax, eax
jne 0x41c77d45
mov eax, 1
push eax
call fcn.41c671c0
mov ebp, eax
add esp, 4
test ebp, ebp
mov dword [esp + 0x1c], ebp
jne 0x41c77d5d
call fcn.41c43850
xor eax, eax
test ebx, ebx
jle 0x41c77d6c
mov dword [ebp + eax*4], eax
inc eax
cmp eax, ebx
jl 0x41c77d63
mov eax, dword [esp + 0x14]
push eax
push 0x41c77c00
push 4
push ebx
push ebp
call fcn.41c7d3a0
mov esi, dword [esi]
xor ecx, ecx
add esp, 0x14
add esi, 6
cmp ebx, ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x18], ecx
jle 0x41c77ea7
movzx edx, di
mov dword [esp + 0x28], edx
lea eax, [esi + 9]
mov di, cx
jmp 0x41c77db0
mov esi, dword [esp + 0x24]
lea esp, [esp]
mov ecx, dword [ebp + ecx*4]
mov edx, dword [esp + 0x14]
mov edx, dword [edx + 4]
mov edx, dword [edx + ecx*4]
mov cx, word [edx]
mov word [esp + 0x30], cx
mov cx, word [edx + 2]
mov word [esp + 0x32], cx
mov cx, word [edx + 4]
mov word [esp + 0x34], cx
mov cx, word [edx + 6]
mov word [esp + 0x36], cx
mov cx, word [edx + 8]
mov word [esp + 0x38], cx
mov cx, word [esp + 0x30]
shr cx, 8
mov byte [esi], cl
mov cl, byte [esp + 0x30]
mov byte [eax - 8], cl
mov cx, word [esp + 0x32]
shr cx, 8
mov byte [eax - 7], cl
mov cl, byte [esp + 0x32]
mov byte [eax - 6], cl
mov cx, word [esp + 0x34]
shr cx, 8
mov byte [eax - 5], cl
mov cl, byte [esp + 0x34]
mov byte [eax - 4], cl
mov cx, word [esp + 0x36]
shr cx, 8
mov byte [eax - 3], cl
mov cl, byte [esp + 0x36]
mov byte [eax - 2], cl
mov cx, word [esp + 0x38]
mov ebp, dword [esp + 0x28]
shr cx, 8
mov byte [eax - 1], cl
mov cl, byte [esp + 0x38]
mov byte [eax], cl
mov cl, byte [esp + 0x11]
mov byte [eax + 1], cl
mov cl, byte [esp + 0x10]
mov byte [eax + 2], cl
movzx ecx, word [edx + 8]
movzx edi, di
add edi, ebp
mov ebp, dword [esp + 0x40]
add edi, dword [ebp]
mov ebp, ecx
add esi, 0xc
shr ecx, 2
mov dword [esp + 0x24], esi
mov esi, dword [edx + 0xc]
rep movsd dword es:[edi], dword [esi]
mov ecx, ebp
mov ebp, dword [esp + 0x1c]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov di, word [esp + 0x10]
add di, word [edx + 8]
mov ecx, dword [esp + 0x18]
add eax, 0xc
inc ecx
cmp ecx, ebx
mov word [esp + 0x10], di
mov dword [esp + 0x18], ecx
jl 0x41c77da8
push ebp
call fcn.41c67200
mov eax, dword [esp + 0x24]
add esp, 4
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x2c
ret 4