Function at 0x444aa0
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x90
push ebx
push ebp
push esi
mov esi, dword [esp + 0xa0]
push edi
mov edi, ecx
mov dword [esp + 0x14], edi
test esi, esi
je 0x444fb2
nop
mov dl, byte [esi + 1]
lea ecx, [esi + 8]
test dl, dl
je 0x444ad1
mov eax, dword [ecx]
mov ebp, dword [eax + 8]
jmp 0x444ad6
mov ebp, 0x4ceea8
movzx eax, byte [esi]
add eax, 0xfffffffd
cmp eax, 0x14
ja case.0x444aec.5
movzx eax, byte [eax + 0x445208]
jmp dword [eax*4 + 0x4451e8]
mov ecx, dword [esi + 0xc]
test ecx, ecx
je case.0x444aec.5
mov eax, dword [0x4e47f8]
mov dword [eax + 0x18], ecx
jmp case.0x444aec.5
mov edx, dword [esi + 0xc]
test edx, edx
je case.0x444aec.5
mov eax, dword [0x4e47f8]
mov ecx, dword [edx + 0x3c]
mov dword [eax + 0x18], ecx
cmp byte [edx + 0x74], 0
mov eax, dword [esi + 0x1c]
mov edi, dword [eax + 0x1c]
je 0x444b6a
test edi, edi
je case.0x444aec.5
cmp byte [edi], 3
je case.0x444aec.5
mov ebx, dword [esi + 0x14]
cmp byte [ebx], 3
je case.0x444efa.8
mov edx, dword [edi + 0x18]
mov ecx, dword [edi + 0x14]
mov eax, dword [edx + 0x10]
mov dword [edi + 0x14], ebx
mov dword [ebx + 0x10], edi
mov dword [eax + 0x14], ecx
mov dword [ecx + 0x10], eax
mov dword [esi + 0x14], edx
mov dword [edx + 0x10], esi
jmp case.0x444aec.5
test edi, edi
je case.0x444aec.5
cmp byte [edi], 3
je case.0x444aec.5
cmp byte [0x4ea604], 0
mov ecx, 0x4e9f30
je 0x444fc2
push 0
push eax
push 0
push 0x4ceea8
push 0x4d8690
call fcn.0040c830
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x90
ret 4
test dl, dl
je 0x444bd0
mov eax, dword [esi + 8]
mov cl, byte [eax]
test cl, cl
jne 0x444bc2
mov al, byte [eax + 1]
jmp 0x444bc8
cmp cl, 1
sete al
test al, al
jne 0x445014
xor ebx, ebx
xor edi, edi
cmp word [ebp], bx
je 0x444c71
push ecx
push ebx
push 1
xor edx, edx
mov ecx, ebp
call fcn.00481610
add esp, 0xc
test eax, eax
jne 0x444c5e
cmp word [ebp], bx
je 0x444c2a
mov eax, dword [0x4e47f8]
mov edi, dword [eax + 0x18]
test edi, edi
je 0x444c09
mov edi, dword [edi + 0x34]
jmp 0x444c10
mov edi, dword [esp + 0x14]
mov edi, dword [edi + 8]
test edi, edi
je 0x444c2a
push ebp
push dword [edi]
call fcn.0049ee91
add esp, 8
test eax, eax
je 0x444c5a
mov edi, dword [edi + 0xc]
test edi, edi
jne 0x444c14
mov ecx, 0x4e9f30
cmp byte [0x4ea604], bl
je 0x445097
push 0
push esi
push 0
push ebp
push 0x4d86b8
call fcn.0040c830
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x90
ret 4
xor ebp, ebp
jmp 0x444c76
cmp word [ebp], bx
je 0x444c71
push ebp
call fcn.004a4aed
add esp, 4
mov ebp, eax
jmp 0x444c76
mov ebp, 1
mov ecx, dword [esi + 0x1c]
test ecx, ecx
je 0x4450e0
mov dl, byte [ecx]
lea eax, [edx - 0xa]
cmp al, 6
ja 0x444ca1
test ebx, ebx
mov eax, ecx
cmovne eax, ebx
mov ebx, eax
sub ebp, 1
je 0x444cc0
test edi, edi
je 0x444ca1
cmp dword [edi + 4], ecx
je 0x444cba
cmp dl, 3
jne 0x444cac
cmp dword [ecx + 0xc], 0
jne 0x444cbe
cmp dl, 0x18
je 0x444cbe
mov ecx, dword [ecx + 0x1c]
test ecx, ecx
jne 0x444c81
jmp 0x444cc0
mov ebx, eax
jmp 0x444cc0
xor ecx, ecx
test ebx, ebx
je 0x4450e0
test ecx, ecx
je 0x445014
cmp ecx, ebx
je case.0x444aec.5
cmp byte [esi], 0x12
jne 0x444ce8
mov ecx, dword [ecx + 0x18]
cmp byte [ecx], 0x11
jne 0x444ce8
mov ecx, dword [ecx + 0x14]
mov dword [esi + 0x18], ecx
jmp case.0x444aec.5
test dl, dl
je 0x444d17
mov eax, dword [ecx]
mov cl, byte [eax]
test cl, cl
jne 0x444d01
mov al, byte [eax + 1]
jmp 0x444d07
cmp cl, 1
sete al
test al, al
je 0x444d17
mov dword [esi + 0x18], 0
jmp case.0x444aec.5
push 0
mov ecx, esi
call fcn.00450e30
jmp 0x444e97
mov eax, dword [ecx]
mov edi, dword [eax + 0x10]
cmp dword [edi + 8], 5
jne 0x444e5d
push 0
push 0x4e7b68
push 0x4e7ccc
push 0
push dword [edi]
call fcn.004b5fa8
mov ecx, eax
add esp, 0x14
test ecx, ecx
je 0x444e5d
cmp dword [ecx + 0x28], 0x437e90
jne 0x444e5d
add edi, 0x10
xor ebx, ebx
mov dword [esp + 0x1c], edi
cmp dword [edi + 8], ebx
lea eax, [edi + 8]
jne 0x444d7d
lea eax, [eax + 0x10]
inc ebx
cmp dword [eax], 0
je 0x444d74
mov eax, ebx
add eax, eax
cmp dword [edi + eax*8 + 8], 0x46
jne 0x444e5d
cmp ebx, 2
jg 0x444e5d
mov eax, dword [edi + eax*8 + 0x18]
cmp eax, 0x3d
je 0x444db1
cmp eax, 0x41
je 0x444db1
mov byte [esp + 0x1b], 1
xor eax, eax
mov byte [esp + 0x1a], 3
jmp 0x444dc0
mov byte [esp + 0x1b], 2
mov eax, 1
mov byte [esp + 0x1a], 4
add eax, ebx
add eax, eax
cmp dword [edi + eax*8 + 0x18], 0x49
jne 0x444e5d
mov eax, dword [ecx + 0x14]
mov ebp, dword [esi + 0xc]
movzx eax, word [eax + 6]
mov ecx, eax
mov edx, eax
add ecx, 0xffffff9f
mov eax, 0xffdf
and ax, dx
cmp cx, 0x19
movzx ecx, byte [esp + 0x1a]
movzx edi, ax
mov eax, edx
cmova edi, eax
movzx eax, byte [esp + 0x1b]
cmp di, 0x41
cmove ecx, eax
mov byte [ebp], cl
test ebx, ebx
jle 0x444e1f
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov dword [ebp + 4], eax
cmp ebx, 1
jle 0x444e26
mov eax, dword [ecx + 0x10]
jmp 0x444e2b
mov dword [ebp + 4], 0x4ceea8
mov eax, 0x4ceea8
cmp dword [0x4e8ee8], 0
mov dword [ebp + 8], eax
mov dword [ebp + 0x14], 0
jne 0x444e4f
mov dword [0x4e8ee8], ebp
mov dword [0x4e8ee4], ebp
mov byte [esi], 0x15
jmp case.0x444aec.5
mov eax, dword [0x4e8ee4]
mov dword [0x4e8ee4], ebp
mov dword [eax + 0x14], ebp
mov byte [esi], 0x15
jmp case.0x444aec.5
mov eax, dword [esi + 0x1c]
test eax, eax
je case.0x444aec.5
nop dword [eax]
mov cl, byte [eax]
cmp cl, 0x18
je 0x445163
cmp cl, 3
jne 0x444e86
cmp dword [eax + 0xc], 0
jne case.0x444aec.5
mov eax, dword [eax + 0x1c]
test eax, eax
jne 0x444e70
jmp case.0x444aec.5
push esi
mov ecx, edi
call fcn.00445460
test eax, eax
je 0x4451d7
xor edi, edi
cmp byte [esi + 1], 0
jbe 0x444ed7
xor ebx, ebx
nop dword [eax]
mov eax, dword [esi + 8]
add eax, ebx
cmp dword [eax + 0x10], 0
je 0x444ecb
push eax
mov ecx, esi
call fcn.004480a0
test eax, eax
je 0x4451d7
movzx eax, byte [esi + 1]
inc edi
add ebx, 0x1c
cmp edi, eax
jl 0x444eb0
cmp dword [0x4e4d6c], 0
je case.0x444efa.8
movzx eax, byte [esi]
add eax, 0xfffffff9
cmp eax, 0x12
ja case.0x444efa.8
movzx eax, byte [eax + 0x445228]
jmp dword [eax*4 + 0x445220]
mov edi, dword [esi + 0x14]
test edi, edi
je case.0x444efa.8
mov eax, dword [edi + 0x1c]
cmp eax, dword [esi + 0x1c]
jne case.0x444efa.8
cmp byte [edi], 3
jne 0x444f2e
nop dword [eax]
cmp dword [edi + 0xc], 0
je 0x444f2e
mov edi, dword [edi + 0x18]
cmp byte [edi], 3
je 0x444f20
mov al, byte [edi]
cmp al, 4
je case.0x444efa.8
cmp al, 7
je case.0x444efa.8
cmp al, 0x1b
je case.0x444efa.8
mov eax, dword [0x4e47f8]
mov eax, dword [eax + 0x18]
test eax, eax
je 0x444f4d
mov eax, dword [eax + 0x34]
jmp 0x444f54
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 8]
test eax, eax
je 0x444f64
cmp dword [eax + 4], edi
je case.0x444efa.8
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x444f58
movzx eax, byte [esi]
lea eax, [eax + eax*2]
push dword [eax*2 + 0x4e4810]
lea eax, [esp + 0x24]
push 0x4d87a0
push 0x40
push eax
call fcn.00481800
add esp, 0x10
lea eax, [esp + 0x20]
push edi
mov edi, dword [esp + 0x18]
mov ecx, edi
push 0x4ceea8
push eax
push dword [0x4e4d6c]
call fcn.0040e770
jmp 0x444fa7
mov edi, dword [esp + 0x14]
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x444ac0
mov eax, dword [edi + 4]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x90
ret 4
cmp byte [0x4ea607], 0
je 0x444ff1
push dword [eax + 4]
movzx eax, word [eax + 2]
push eax
push 0x4ceea8
push 0x4d8690
call fcn.0040c730
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x90
ret 4
push 0
push eax
push 0x4ceea8
push 0
push 0x4d8690
call fcn.0040d460
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x90
ret 4
cmp byte [0x4ea604], 0
mov ecx, 0x4e9f30
je 0x445045
push 0
push esi
push 0
push 0x4ceea8
push 0x4d4b44
call fcn.0040c830
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x90
ret 4
cmp byte [0x4ea607], 0
je 0x445074
push dword [esi + 4]
movzx eax, word [esi + 2]
push eax
push 0x4ceea8
push 0x4d4b44
call fcn.0040c730
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x90
ret 4
push 0
push esi
push 0x4ceea8
push 0
push 0x4d4b44
call fcn.0040d460
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x90
ret 4
cmp byte [0x4ea607], bl
je 0x4450c1
push dword [esi + 4]
movzx eax, word [esi + 2]
push eax
push ebp
push 0x4d86b8
call fcn.0040c730
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x90
ret 4
push 0
push esi
push ebp
push 0
push 0x4d86b8
call fcn.0040d460
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x90
ret 4
cmp byte [0x4ea604], 0
mov ecx, 0x4e9f30
je 0x445111
push 0
push esi
push 0
push 0x4ceea8
push 0x4d8700
call fcn.0040c830
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x90
ret 4
cmp byte [0x4ea607], 0
je 0x445140
push dword [esi + 4]
movzx eax, word [esi + 2]
push eax
push 0x4ceea8
push 0x4d8700
call fcn.0040c730
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x90
ret 4
push 0
push esi
push 0x4ceea8
push 0
push 0x4d8700
call fcn.0040d460
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x90
ret 4
cmp byte [0x4ea604], 0
mov ecx, 0x4e9f30
je 0x445194
push 0
push esi
push 0
push 0x4ceea8
push 0x4d8758
call fcn.0040c830
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x90
ret 4
cmp byte [0x4ea607], 0
je 0x4451c3
push dword [esi + 4]
movzx eax, word [esi + 2]
push eax
push 0x4ceea8
push 0x4d8758
call fcn.0040c730
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x90
ret 4
push 0
push esi
push 0x4ceea8
push 0
push 0x4d8758
call fcn.0040d460
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x90
ret 4