Function at 0x436da0
Capabilities:
Enumerate pe sections

Disassembly:
push 0xffffffffffffffff
push 0x4b95aa
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe0
push ebx
push ebp
push esi
push edi
mov esi, ecx
xor edi, edi
push 2
push 0x4d7970
lea ecx, [esp + 0x24]
mov dword [esp + 0x100], edi
call fcn.0048d140
push ecx
lea eax, [esp + 0x104]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
mov byte [esp + 0x100], 1
call fcn.0048d0b0
mov ecx, dword [0x4e1f54]
call fcn.0049f1d0
lea ecx, [esi + 4]
push 0xff
push ecx
push ecx
lea edx, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.0048d0b0
lea ecx, [esi + 0xd0]
call fcn.0048c760
cmp ax, 0x3e
jge 0x436e9f
push edi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x4d7358
call fcn.0048d140
push ecx
mov byte [esp + 0x108], 2
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x4d7350
call fcn.0048d140
mov ecx, 0x4e1f40
mov byte [esp + 0x108], 1
call fcn.00496d10
lea ecx, [esp + 0x1c]
mov byte [esp + 0xf8], 0
call fcn.0048d1e0
lea ecx, [esp + 0x100]
mov dword [esp + 0xf8], 0xffffffff
call fcn.0048d1e0
xor ax, ax
jmp 0x43740c
xor eax, eax
xor ecx, ecx
mov al, byte [esi + 0x14]
mov cl, byte [esi + 0x13]
xor edx, edx
push eax
mov dl, byte [esi + 0x12]
push ecx
xor eax, eax
push edx
mov al, byte [esi + 0x11]
xor ecx, ecx
mov cl, byte [esi + 0x10]
xor edx, edx
mov dl, byte [esi + 0xf]
push eax
push ecx
xor eax, eax
mov al, byte [esi + 0xe]
push edx
xor ecx, ecx
xor edx, edx
mov cl, byte [esi + 0xd]
mov dl, byte [esi + 0xc]
push eax
push ecx
xor eax, eax
push edx
mov al, byte [esi + 0xb]
xor ecx, ecx
mov cl, byte [esi + 0xa]
xor edx, edx
mov dl, byte [esi + 9]
push eax
push ecx
xor eax, eax
mov al, byte [esi + 8]
push edx
xor ecx, ecx
xor edx, edx
mov cl, byte [esi + 7]
mov dl, byte [esi + 6]
push eax
push ecx
push edx
lea eax, [esp + 0xc4]
push str._02X_02X_02X_02X_02X_02X_02X_02X_02X_02X_02X_02X_02X_02X_02X
push eax
call fcn.004ad4e5
xor ecx, ecx
add esp, 0x44
mov cl, byte [esi + 0x23]
xor edx, edx
mov dl, byte [esi + 0x22]
push ecx
xor eax, eax
xor ecx, ecx
mov al, byte [esi + 0x21]
mov cl, byte [esi + 0x20]
push edx
push eax
xor edx, edx
push ecx
mov dl, byte [esi + 0x1f]
xor eax, eax
mov al, byte [esi + 0x1e]
xor ecx, ecx
mov cl, byte [esi + 0x1d]
push edx
push eax
xor edx, edx
mov dl, byte [esi + 0x1c]
push ecx
xor eax, eax
xor ecx, ecx
mov al, byte [esi + 0x1b]
mov cl, byte [esi + 0x1a]
push edx
push eax
push ecx
xor edx, edx
mov dl, byte [esi + 0x19]
xor eax, eax
mov al, byte [esi + 0x18]
push edx
xor ecx, ecx
push eax
mov cl, byte [esi + 0x17]
xor edx, edx
mov dl, byte [esi + 0x16]
xor eax, eax
mov al, byte [esi + 0x15]
push ecx
push edx
push eax
lea ecx, [esp + 0x5c]
push str._02X_02X_02X_02X_02X_02X_02X_02X_02X_02X_02X_02X_02X_02X_02X
push ecx
call fcn.004ad4e5
xor edx, edx
add esp, 0x44
mov dl, byte [esi + 0x32]
xor eax, eax
mov al, byte [esi + 0x31]
xor ecx, ecx
mov cl, byte [esi + 0x30]
push edx
push eax
xor edx, edx
mov dl, byte [esi + 0x2f]
push ecx
xor eax, eax
xor ecx, ecx
mov al, byte [esi + 0x2e]
mov cl, byte [esi + 0x2d]
push edx
push eax
xor edx, edx
push ecx
mov dl, byte [esi + 0x2c]
xor eax, eax
mov al, byte [esi + 0x2b]
xor ecx, ecx
mov cl, byte [esi + 0x2a]
push edx
push eax
xor edx, edx
mov dl, byte [esi + 0x29]
push ecx
xor eax, eax
xor ecx, ecx
mov al, byte [esi + 0x28]
mov cl, byte [esi + 0x27]
push edx
push eax
xor edx, edx
push ecx
mov dl, byte [esi + 0x26]
xor eax, eax
mov al, byte [esi + 0x25]
xor ecx, ecx
mov cl, byte [esi + 0x24]
push edx
push eax
push ecx
lea edx, [esp + 0x90]
push str._02X_02X_02X_02X_02X_02X_02X_02X_02X_02X_02X_02X_02X_02X_02X
push edx
call fcn.004ad4e5
xor eax, eax
add esp, 0x44
mov al, byte [esi + 0x41]
xor ecx, ecx
mov cl, byte [esi + 0x40]
push eax
xor edx, edx
xor eax, eax
mov dl, byte [esi + 0x3f]
mov al, byte [esi + 0x3e]
push ecx
push edx
push eax
xor ecx, ecx
xor edx, edx
mov cl, byte [esi + 0x3d]
mov dl, byte [esi + 0x3c]
push ecx
xor eax, eax
mov al, byte [esi + 0x3b]
push edx
xor ecx, ecx
xor edx, edx
mov cl, byte [esi + 0x3a]
mov dl, byte [esi + 0x39]
push eax
push ecx
xor eax, eax
push edx
mov al, byte [esi + 0x38]
xor ecx, ecx
mov cl, byte [esi + 0x37]
xor edx, edx
mov dl, byte [esi + 0x36]
push eax
push ecx
xor eax, eax
mov al, byte [esi + 0x35]
push edx
xor ecx, ecx
xor edx, edx
mov cl, byte [esi + 0x34]
mov dl, byte [esi + 0x33]
push eax
push ecx
push edx
lea eax, [esp + 0xf8]
push str._02X_02X_02X_02X_02X_02X_02X_02X_02X_02X_02X_02X_02X_02X_02X
push eax
call fcn.004ad4e5
mov cl, byte [esp + 0x57]
add esp, 0x34
mov ebp, esp
xor eax, eax
mov dword [esp + 0x28], esp
mov byte [ebp], cl
mov dword [ebp + 4], edi
mov dword [ebp + 8], edi
mov dword [ebp + 0xc], edi
lea edi, [esp + 0x98]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebx, ecx
mov ecx, ebp
call fcn.00403520
cmp eax, ebx
jae 0x437091
call fcn.004ac91b
mov ecx, dword [ebp + 4]
xor esi, esi
cmp ecx, esi
je 0x4370b8
mov al, byte [ecx - 1]
test al, al
je 0x4370b8
cmp al, 0xff
je 0x4370b8
cmp ebx, esi
jne 0x4370dc
dec al
push esi
mov byte [ecx - 1], al
mov ecx, ebp
call fcn.00403270
jmp 0x43710b
cmp ebx, esi
jne 0x4370c7
push 1
mov ecx, ebp
call fcn.00403270
jmp 0x43710b
mov eax, dword [ebp + 0xc]
cmp eax, 0x1f
ja 0x4370d3
cmp eax, ebx
jae 0x4370e4
push 1
mov ecx, ebp
call fcn.00403270
push ebx
mov ecx, ebp
call fcn.00403530
mov edi, dword [ebp + 4]
mov ecx, ebx
mov edx, ecx
lea esi, [esp + 0x98]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp + 4]
mov dword [ebp + 8], ebx
add ebx, eax
xor esi, esi
mov byte [ebx], 0
push ecx
mov byte [esp + 0x10c], 3
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x4d79a0
call fcn.0048d140
mov ecx, dword [0x4e1f54]
mov byte [esp + 0x10c], 1
call fcn.0049f450
mov al, byte [esp + 0x13]
sub esp, 0x10
mov ebp, esp
lea edi, [esp + 0x30]
or ecx, 0xffffffff
mov dword [esp + 0x28], esp
mov byte [ebp], al
xor eax, eax
mov dword [ebp + 4], esi
mov dword [ebp + 8], esi
mov dword [ebp + 0xc], esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebx, ecx
mov ecx, ebp
call fcn.00403520
cmp eax, ebx
jae 0x437172
call fcn.004ac91b
mov ecx, dword [ebp + 4]
cmp ecx, esi
je 0x437197
mov al, byte [ecx - 1]
test al, al
je 0x437197
cmp al, 0xff
je 0x437197
cmp ebx, esi
jne 0x4371bb
dec al
push esi
mov byte [ecx - 1], al
mov ecx, ebp
call fcn.00403270
jmp 0x4371e8
cmp ebx, esi
jne 0x4371a6
push 1
mov ecx, ebp
call fcn.00403270
jmp 0x4371e8
mov eax, dword [ebp + 0xc]
cmp eax, 0x1f
ja 0x4371b2
cmp eax, ebx
jae 0x4371c3
push 1
mov ecx, ebp
call fcn.00403270
push ebx
mov ecx, ebp
call fcn.00403530
mov edi, dword [ebp + 4]
mov ecx, ebx
mov edx, ecx
lea esi, [esp + 0x30]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
mov ebp, dword [ebp + 4]
add ebp, ebx
xor esi, esi
mov byte [ebp], 0
push ecx
mov byte [esp + 0x10c], 4
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x4d7998
call fcn.0048d140
mov ecx, dword [0x4e1f54]
mov byte [esp + 0x10c], 1
call fcn.0049f450
mov al, byte [esp + 0x13]
sub esp, 0x10
mov ebp, esp
lea edi, [esp + 0x64]
or ecx, 0xffffffff
mov dword [esp + 0x28], esp
mov byte [ebp], al
xor eax, eax
mov dword [ebp + 4], esi
mov dword [ebp + 8], esi
mov dword [ebp + 0xc], esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebx, ecx
mov ecx, ebp
call fcn.00403520
cmp eax, ebx
jae 0x43724f
call fcn.004ac91b
mov ecx, dword [ebp + 4]
xor esi, esi
cmp ecx, esi
je 0x437276
mov al, byte [ecx - 1]
test al, al
je 0x437276
cmp al, 0xff
je 0x437276
cmp ebx, esi
jne 0x43729a
dec al
push esi
mov byte [ecx - 1], al
mov ecx, ebp
call fcn.00403270
jmp 0x4372c6
cmp ebx, esi
jne 0x437285
push 1
mov ecx, ebp
call fcn.00403270
jmp 0x4372c6
mov eax, dword [ebp + 0xc]
cmp eax, 0x1f
ja 0x437291
cmp eax, ebx
jae 0x4372a2
push 1
mov ecx, ebp
call fcn.00403270
push ebx
mov ecx, ebp
call fcn.00403530
mov edi, dword [ebp + 4]
mov ecx, ebx
mov edx, ecx
lea esi, [esp + 0x64]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp + 4]
mov dword [ebp + 8], ebx
add ebx, eax
xor esi, esi
mov byte [ebx], 0
push ecx
mov byte [esp + 0x10c], 5
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x4d7990
call fcn.0048d140
mov ecx, dword [0x4e1f54]
mov byte [esp + 0x10c], 1
call fcn.0049f450
mov al, byte [esp + 0x13]
sub esp, 0x10
mov ebp, esp
lea edi, [esp + 0xcc]
or ecx, 0xffffffff
mov dword [esp + 0x28], esp
mov byte [ebp], al
xor eax, eax
mov dword [ebp + 4], esi
mov dword [ebp + 8], esi
mov dword [ebp + 0xc], esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebx, ecx
mov ecx, ebp
call fcn.00403520
cmp eax, ebx
jae 0x437330
call fcn.004ac91b
mov ecx, dword [ebp + 4]
cmp ecx, esi
je 0x437355
mov al, byte [ecx - 1]
test al, al
je 0x437355
cmp al, 0xff
je 0x437355
cmp ebx, esi
jne 0x437379
dec al
push esi
mov byte [ecx - 1], al
mov ecx, ebp
call fcn.00403270
jmp 0x4373a7
cmp ebx, esi
jne 0x437364
push 1
mov ecx, ebp
call fcn.00403270
jmp 0x4373a7
mov eax, dword [ebp + 0xc]
cmp eax, 0x1f
ja 0x437370
cmp eax, ebx
jae 0x437381
push 1
mov ecx, ebp
call fcn.00403270
push ebx
mov ecx, ebp
call fcn.00403530
mov edi, dword [ebp + 4]
mov ecx, ebx
mov edx, ecx
lea esi, [esp + 0xcc]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
mov ebp, dword [ebp + 4]
add ebp, ebx
mov byte [ebp], 0
push ecx
mov byte [esp + 0x10c], 6
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x4d7988
call fcn.0048d140
mov ecx, dword [0x4e1f54]
mov byte [esp + 0x10c], 1
call fcn.0049f450
mov ecx, dword [0x4e1f54]
call fcn.0049f560
lea ecx, [esp + 0x1c]
mov byte [esp + 0xf8], 0
call fcn.0048d1e0
lea ecx, [esp + 0x100]
mov dword [esp + 0xf8], 0xffffffff
call fcn.0048d1e0
mov ax, 1
mov ecx, dword [esp + 0xf0]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xec
ret 4