Function at 0x445730
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
test edi, edi
mov ebx, ecx
mov dword [esp + 0x1c], ebx
je 0x44588f
lea eax, [esp + 0x10]
mov esi, edi
call fcn.00409710
mov esi, eax
lea eax, [esp + 0x18]
call fcn.004097c0
mov esi, eax
lea eax, [esp + 0x14]
call fcn.004097c0
mov eax, dword [edi + 0x1050]
mov cx, word [esp + 0x14]
mov word [eax], cx
mov eax, dword [edi + 0x1060]
push eax
call fcn.00422f90
add esp, 4
test eax, eax
jne 0x4457a6
mov dx, word [edi + 0x103e]
mov word [edi + 0x103c], dx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov edx, dword [0x4ffe00]
movzx ecx, word [eax + 6]
movzx edx, word [edx]
cmp cx, dx
jne 0x4457be
movzx esi, word [eax + 4]
jmp 0x4457c1
movzx esi, cx
cmp word [esp + 0x18], dx
jne 0x4457e4
mov ecx, dword [esp + 0x10]
mov eax, dword [ebx]
mov edx, dword [eax + 0x20]
push 0
push 0
push ecx
push edi
mov ecx, ebx
call edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
lea eax, [edi + 0x1044]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
push 0
push ecx
push esi
push edx
mov esi, edi
mov eax, ebx
call fcn.00445eb0
test al, al
jne 0x445a43
mov eax, dword [0x4ffd40]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x48]
push 0
push eax
call edx
mov esi, eax
mov eax, dword [esi + 0x1050]
lea ecx, [esp + 0xf]
mov word [eax], 0xa008
push ecx
mov ebx, 1
mov eax, esi
mov byte [esp + 0x13], 2
call fcn.00409ef0
lea edx, [esp + 0x10]
push edx
mov ebx, 4
mov eax, esi
call fcn.00409ef0
lea eax, [esp + 0x14]
push eax
mov ebx, 2
mov eax, esi
call fcn.00409ef0
mov edx, dword [edi + 0x1060]
mov eax, dword [0x4ffd40]
mov ecx, dword [eax]
push esi
push edx
push eax
mov eax, dword [ecx + 0x50]
call eax
mov eax, dword [0x4ffd40]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x4c]
push esi
push eax
call edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov edi, dword [ebp + 0x14]
test edi, edi
je 0x445a3e
push 4
lea eax, [esp + 0x14]
push eax
mov ebx, edi
call fcn.0041df20
push 2
lea ecx, [esp + 0x1c]
push ecx
call fcn.0041df20
push 2
lea edx, [esp + 0x18]
push edx
call fcn.0041df20
mov ecx, dword [esp + 0x14]
mov eax, edi
call fcn.0041e1f0
mov eax, dword [edi + 0x24]
push eax
call fcn.00422f90
add esp, 4
test eax, eax
je 0x445a43
mov edx, dword [0x4ffe00]
movzx ecx, word [eax + 6]
movzx edx, word [edx]
cmp cx, dx
jne 0x4458f7
movzx esi, word [eax + 4]
jmp 0x4458fa
movzx esi, cx
cmp word [esp + 0x18], dx
jne 0x44591f
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
push edi
push 0
push edx
push 0
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 1
call fcn.0041de00
mov ecx, dword [esp + 0x18]
add esp, 4
mov ebx, eax
call fcn.0041e1f0
push 1
push edi
push ebx
call fcn.0041e460
add esp, 0xc
test al, al
jne 0x4459a7
mov eax, ebx
call fcn.0041de20
mov eax, dword [0x4ffd40]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x48]
push 0
push eax
call edx
mov esi, eax
mov eax, dword [esi + 0x1050]
lea ecx, [esp + 0xf]
mov word [eax], 0xa008
push ecx
mov ebx, 1
mov eax, esi
mov byte [esp + 0x13], 2
call fcn.00409ef0
lea edx, [esp + 0x10]
push edx
mov ebx, 4
mov eax, esi
call fcn.00409ef0
lea eax, [esp + 0x14]
push eax
mov ebx, 2
mov eax, esi
call fcn.00409ef0
mov edx, dword [edi + 0x24]
jmp 0x445869
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
push eax
mov eax, dword [esp + 0x20]
push esi
push ecx
call fcn.00446040
test al, al
jne 0x445a43
mov eax, dword [0x4ffd40]
mov edx, dword [eax]
push 0
push eax
mov eax, dword [edx + 0x48]
call eax
mov esi, eax
mov ecx, dword [esi + 0x1050]
lea edx, [esp + 0xf]
push edx
mov ebx, 1
mov word [ecx], 0xa008
mov byte [esp + 0x13], 2
call fcn.00409ef0
lea eax, [esp + 0x10]
push eax
mov ebx, 4
mov eax, esi
call fcn.00409ef0
lea ecx, [esp + 0x14]
push ecx
mov ebx, 2
mov eax, esi
call fcn.00409ef0
mov eax, dword [0x4ffd40]
mov ecx, dword [edi + 0x24]
mov edx, dword [eax]
mov edx, dword [edx + 0x50]
push esi
push ecx
push eax
call edx
mov eax, dword [0x4ffd40]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x4c]
push esi
push eax
call edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
call fcn.0046e510
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10