Function at 0x442897
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x64
mov ebx, dword [esp + 0x78]
mov dword [esp], 0x97ff4c87
mov esi, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
mov eax, dword [esp]
cmp eax, 0x96558f
jg 0x442918
cmp eax, 0xb20ab612
jg 0x442971
cmp eax, 0x994678c1
jle 0x442a25
cmp eax, 0xa38b3575
jle 0x442bb9
cmp eax, 0xaa6cd37c
jle 0x442dd0
cmp eax, 0xaa6cd37d
je 0x4430f0
cmp eax, 0xab37cb0b
je 0x443128
cmp eax, 0xaf376a67
jne 0x4428b1
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x1c], eax
mov dword [esp], 0x1866a9bb
jmp 0x4428b1
cmp eax, 0x37798934
jg 0x4429c8
cmp eax, 0x1c1889e0
jle 0x442a8f
cmp eax, 0x28d9e977
jle 0x442bf7
cmp eax, 0x3030874c
jle 0x442e04
cmp eax, 0x3030874d
je 0x443168
cmp eax, 0x31f71011
je 0x443185
cmp eax, 0x3517361b
jne 0x4428b1
mov dword [esp], 0x995e198d
jmp 0x4428b1
cmp eax, 0xdb186947
jle 0x442afa
cmp eax, 0xeef09630
jle 0x442c30
cmp eax, 0xf4db464d
jle 0x442e35
cmp eax, 0xf4db464e
je 0x4431b4
cmp eax, 0xf6c53369
je 0x4431c0
cmp eax, 0xf6c8217e
jne 0x4428b1
mov eax, dword [esp + 0x18]
inc eax
mov dword [esp + 0x20], eax
mov dword [esp], 0xdf54df61
jmp 0x4428b1
cmp eax, 0x6710ffc3
jle 0x442b50
cmp eax, 0x71f59ce5
jle 0x442c82
cmp eax, 0x7a9f4da7
jle 0x442e71
cmp eax, 0x7a9f4da8
je 0x4431dc
cmp eax, 0x7d4c09e0
je 0x4431f7
cmp eax, 0x7e6487db
jne 0x4428b1
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 0x78]
add eax, dword [esp + 0xc]
mov dword [esp + 0x14], eax
mov dword [esp], 0x9b505cb6
jmp 0x4428b1
cmp eax, 0x8cb46b40
jle 0x442cb7
cmp eax, 0x97ff4c86
jg 0x442e93
cmp eax, 0x8d797533
je 0x443212
cmp eax, 0x8fc45ff3
jne 0x44358c
mov eax, dword [esp + 8]
imul ecx, eax, 0xf9
imul ecx, ecx
imul eax, eax, 0x7c8
imul edx, ecx, 0x5b09
shr eax, 0xd
dec edx
imul eax, eax, 0x8f
mov dword [esp + 8], eax
mov eax, 0xab37cb0b
cmp ecx, edx
je 0x443568
mov eax, 0x26f93f81
jmp 0x443568
cmp eax, 0x75a5d0b
jg 0x442d17
cmp eax, 0x4425cdc
jg 0x442ebf
cmp eax, 0x965590
je 0x443226
cmp eax, 0x3018cd3
jne 0x4428b1
mov eax, dword [esp + 8]
shl eax, 7
add eax, 0x5800
shr eax, 0xc
lea ecx, [eax + eax]
add ecx, 0xfffffe34
mov edx, eax
imul edx, eax
imul edi, edx, 0x7fb1
dec edi
mov dword [esp + 8], ecx
mov eax, 0x5b64d412
cmp edx, edi
je 0x443568
mov eax, 0x3517361b
jmp 0x443568
cmp eax, 0xcb85f81d
jg 0x442d44
cmp eax, 0xbb98ae38
jg 0x442eed
cmp eax, 0xb20ab613
je 0x44325b
cmp eax, 0xb8531cfc
jne 0x4428b1
mov eax, dword [esp + 4]
shl eax, 9
add eax, 0xfffdd46e
mov dword [esp + 4], eax
push eax
push 0x22df
call fcn.00442630
add esp, 8
mov dword [esp], 0x8711ec9b
jmp 0x4428b1
cmp eax, 0x4d1d7094
jg 0x442d8c
cmp eax, 0x403530b4
jg 0x442f1c
cmp eax, 0x37798935
je 0x443289
cmp eax, 0x3ee6d010
jne 0x4428b1
mov eax, dword [esp + 8]
shr eax, 0xd
add eax, 0xffffffe9
mov ecx, eax
shr ecx, 0x11
imul eax, eax
imul edx, eax, 0x4051
dec edx
lea ecx, [ecx + ecx*8]
lea ecx, [ecx*8 + 0x49]
mov dword [esp + 8], ecx
mov ecx, 0x2a6dfe1d
cmp eax, edx
je 0x442bb1
mov ecx, 0x79c0952b
mov dword [esp], ecx
jmp 0x4428b1
cmp eax, 0x9b505cb5
jg 0x442f61
cmp eax, 0x994678c2
je 0x4432a6
cmp eax, 0x995e198d
jne 0x4428b1
mov ecx, dword [esp + 0x50]
mov eax, 0x201a69a6
cmp ecx, dword [esp + 0x7c]
je 0x443568
mov eax, 0x1b599df1
jmp 0x443568
cmp eax, 0x201a69a5
jg 0x442f8f
cmp eax, 0x1c1889e1
je 0x4432b6
cmp eax, 0x1c9c7716
jne 0x4428b1
mov eax, dword [esp + 0xc]
add eax, dword [esp + 0x2c]
mov dword [esp + 0x30], eax
mov dword [esp], 0xcc08c088
jmp 0x4428b1
cmp eax, 0xe6572b22
jg 0x442fbb
cmp eax, 0xdb186948
je 0x4432e6
cmp eax, 0xdf54df61
jne 0x4428b1
mov eax, dword [esp + 8]
lea ecx, [eax + 0x20]
imul ecx, ecx
imul edx, ecx, 0x134b
dec edx
add eax, 0xfffffed5
mov dword [esp + 8], eax
mov eax, 0x8d797533
cmp ecx, edx
je 0x443568
mov eax, 0xa38b3576
jmp 0x443568
cmp eax, 0x71ad8329
jg 0x442fde
cmp eax, 0x6710ffc4
je 0x443300
cmp eax, 0x6c4ba64c
jne 0x4428b1
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x40], eax
mov dword [esp], 0x3ee6d010
jmp 0x4428b1
cmp eax, 0x86873a31
jg 0x443000
cmp eax, 0x80bd0680
je 0x44330c
cmp eax, 0x80f48718
jne 0x4428b1
mov edi, dword [esp + 4]
shl edi, 0xf
and edi, 0xf8000000
mov dword [esp + 4], edi
push 0x5fc0
push edi
call fcn.00442630
add esp, 8
call fcn.00444282
mov eax, 0x1c9c7716
cmp edi, 0xf5
jl 0x443568
mov eax, 0x52bbfe74
jmp 0x443568
cmp eax, 0x1866a9ba
jg 0x443052
cmp eax, 0x75a5d0c
je 0x443352
cmp eax, 0x1347f9d4
jne 0x4428b1
mov dword [esp], 0x3030874d
jmp 0x4428b1
cmp eax, 0xce5130fe
jg 0x443074
cmp eax, 0xcb85f81e
je 0x443378
cmp eax, 0xcc08c088
jne 0x4428b1
mov eax, dword [esp + 8]
shl eax, 0xc
add eax, 0x7c000
shr eax, 6
and eax, 0x7fffc0
lea eax, [eax + eax*8]
mov dword [esp + 8], eax
mov dword [esp], 0x7e6487db
jmp 0x4428b1
cmp eax, 0x5b64d411
jg 0x4430ae
cmp eax, 0x4d1d7095
je 0x4433a8
cmp eax, 0x52bbfe74
jne 0x4428b1
movzx eax, word [esp + 0x12]
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx + 0x1c]
add ecx, dword [esp + 0xc]
lea eax, [ecx + eax*4]
mov dword [esp + 0x54], eax
mov dword [esp], 0x75a5d0c
jmp 0x4428b1
cmp eax, 0xa38b3576
je 0x4433e4
cmp eax, 0xa6bb1f9e
jne 0x4428b1
imul ecx, dword [esp + 4], 0x99
add ecx, 0xffffff9a
mov dword [esp + 4], ecx
mov eax, 0xb8531cfc
cmp ecx, 0x5a
jb 0x442e67
jmp 0x443568
cmp eax, 0x28d9e978
je 0x4433f0
cmp eax, 0x2a6dfe1d
jne 0x4428b1
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x24]
add eax, dword [esp + 0xc]
mov dword [esp + 0x3c], eax
mov dword [esp], 0x472e4a92
jmp 0x4428b1
cmp eax, 0xeef09631
je 0x44340b
cmp eax, 0xf1e17779
jne 0x4428b1
mov ecx, dword [esp + 4]
shl ecx, 6
mov eax, 0x6c4ba64c
and ecx, 0x3fff8000
mov dword [esp + 4], ecx
je 0x443568
mov eax, 0x2a6dfe1d
jmp 0x443568
cmp eax, 0x71f59ce6
je 0x44341b
cmp eax, 0x79c0952b
jne 0x4428b1
mov dword [esp], 0xf4db464e
jmp 0x4428b1
cmp eax, 0x97ff4c87
je 0x443454
cmp eax, 0x97ffa163
jne 0x4428b1
mov eax, dword [esp + 0x54]
mov eax, dword [eax]
mov dword [esp + 0x58], eax
mov dword [esp], 0x9bcf1a36
jmp 0x4428b1
cmp eax, 0x4425cdd
je 0x44346b
cmp eax, 0x55e53d6
jne 0x4428b1
mov eax, dword [esp + 0xc]
add eax, dword [esp + 0x48]
mov dword [esp + 0x4c], eax
mov dword [esp], 0x71c813f8
jmp 0x4428b1
cmp eax, 0xbb98ae39
je 0x44349d
cmp eax, 0xbfbf37ae
jne 0x4428b1
mov dword [esp + 4], 0
call fcn.00444282
mov dword [esp], 0x1c9c7716
jmp 0x4428b1
cmp eax, 0x403530b5
je 0x4434ca
cmp eax, 0x472e4a92
jne 0x4428b1
mov ecx, dword [esp + 8]
add ecx, 0x23
imul eax, ecx, 0x77
imul ecx, ecx
imul edx, ecx, 0x2481
dec edx
mov dword [esp + 8], eax
mov eax, 0x8d797533
cmp edx, ecx
je 0x443568
mov eax, 0x6c4ba64c
jmp 0x443568
cmp eax, 0x9b505cb6
je 0x4433ff
cmp eax, 0x9bcf1a36
jne 0x4428b1
mov eax, dword [esp + 0xc]
add eax, dword [esp + 0x58]
mov dword [esp + 0x5c], eax
mov dword [esp], 0xe6572b23
jmp 0x4428b1
cmp eax, 0x201a69a6
je 0x4434e5
cmp eax, 0x26f93f81
jne 0x4428b1
mov eax, dword [esp + 0x44]
mov eax, dword [eax]
mov dword [esp + 0x48], eax
mov dword [esp], 0x55e53d6
jmp 0x4428b1
cmp eax, 0xe6572b23
je 0x4434ff
cmp eax, 0xeab2a06a
jne 0x4428b1
imul eax, dword [esp + 4], 0x4010000
jmp 0x4433fb
cmp eax, 0x71ad832a
je 0x443513
cmp eax, 0x71c813f8
jne 0x4428b1
mov dword [esp], 0x5b64d412
jmp 0x4428b1
cmp eax, 0x86873a32
je 0x443532
cmp eax, 0x8711ec9b
jne 0x4428b1
mov edi, dword [esp + 4]
shr edi, 1
and edi, 0xffffffe0
lea eax, [edi - 0x1240]
mov dword [esp + 4], eax
push 0x48ec
push eax
call fcn.00442897
add esp, 8
mov eax, 0x403530b5
cmp edi, 0x130c
jae 0x443568
mov eax, 0xaf376a67
jmp 0x443568
cmp eax, 0x1866a9bb
je 0x44353e
cmp eax, 0x1b599df1
jne 0x4428b1
mov dword [esp], 0xf6c8217e
jmp 0x4428b1
cmp eax, 0xce5130ff
je 0x44354a
cmp eax, 0xd0c2f2e7
jne 0x4428b1
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov eax, 0x8cb46b41
cmp edx, ecx
je 0x4430a0
mov eax, 0x994678c2
mov dword [esp], eax
xor esi, esi
mov ebp, dword [esp + 0x20]
jmp 0x4428b1
cmp eax, 0x5b64d412
je 0x443570
cmp eax, 0x6449d673
jne 0x4428b1
mov ecx, dword [esp + 4]
shl ecx, 0x18
or ecx, 0x5d00e3
mov dword [esp + 4], ecx
mov eax, 0xbb98ae39
cmp ecx, 0x88
jl 0x443568
mov eax, 0x4425cdd
jmp 0x443568
mov eax, dword [esp + 8]
imul ecx, eax, 0x6cb1
imul eax, eax, 0x6cb1000
imul ecx, ecx
imul edx, ecx, 0x14eb
shr eax, 2
dec edx
mov dword [esp + 8], eax
mov eax, 0x6c4ba64c
cmp edx, ecx
je 0x443568
mov eax, 0x6710ffc4
jmp 0x443568
imul edi, dword [esp + 4], 0xba
add edi, 0x111
mov eax, edi
shr eax, 3
mov dword [esp + 4], eax
push eax
call fcn.004435a9
add esp, 4
call fcn.00444282
mov eax, 0x8d797533
cmp edi, 0x2a8
jb 0x443568
mov eax, 0xcb85f81e
jmp 0x443568
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x18]
movzx eax, word [eax + ecx*2]
mov word [esp + 0x12], ax
mov dword [esp], 0xaa6cd37d
jmp 0x4428b1
mov eax, dword [esp + 4]
shr eax, 0xa
imul ecx, eax, 0x731fd0
add ecx, 0xc9eacbd0
mov dword [esp + 4], ecx
mov eax, 0xaf376a67
cmp ecx, 0x2b
jb 0x443568
mov eax, 0x28d9e978
jmp 0x443568
mov dword [esp], 0xaf376a67
jmp 0x4428b1
mov eax, dword [esp + 8]
shl eax, 0x18
or eax, 0x8d8035
mov dword [esp + 8], eax
mov dword [esp], 0x52bbfe74
jmp 0x4428b1
cmp word [esp + 0x12], 0
mov eax, 0x8cb46b41
je 0x4433da
mov eax, 0xf6c53369
jmp 0x4433da
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x18]
lea eax, [eax + ecx*4]
mov dword [esp + 0x44], eax
mov dword [esp], 0x8fc45ff3
jmp 0x4428b1
mov eax, dword [esp + 0x34]
mov dword [esp + 0x38], eax
mov dword [esp], 0x2a6dfe1d
jmp 0x4428b1
mov eax, dword [esp + 8]
shr eax, 0xc
imul ecx, eax, 0x37
mov eax, ecx
shr eax, 0xf
imul ecx, ecx
imul edx, ecx, 0x191d
dec edx
mov dword [esp + 8], eax
mov eax, 0xb20ab613
cmp edx, ecx
je 0x443251
mov eax, 0x994678c2
mov dword [esp], eax
xor ebp, ebp
jmp 0x4428b1
mov eax, dword [esp + 4]
shr eax, 1
imul edi, eax, 0x7a
mov dword [esp + 4], edi
push edi
call fcn.004435a9
add esp, 4
mov eax, 0x1c9c7716
cmp edi, 0x2e
jb 0x443568
mov eax, 0x6449d673
jmp 0x443568
imul eax, dword [esp + 8], 0x2a0
add eax, 0x1d520
mov dword [esp + 8], eax
mov dword [esp], 0x8d797533
jmp 0x4428b1
mov dword [esp + 0x18], ebp
mov dword [esp], 0x86873a32
jmp 0x4428b1
mov eax, dword [esp + 4]
shr eax, 7
imul edi, eax, 0x36000
add edi, 0xfffca800
mov dword [esp + 4], edi
push 0x1289
push edi
call fcn.00442630
add esp, 8
push edi
push 0x1cce
jmp 0x4434b6
cmp dword [esp + 0x1c], 0
mov eax, 0x4d1d7095
je 0x443568
mov eax, 0x965590
jmp 0x443568
mov dword [esp], 0x7a9f4da8
jmp 0x4428b1
mov eax, dword [esp + 4]
shr eax, 7
and eax, 0x1fffe00
add eax, 0x9a00
shr eax, 4
lea edi, [eax + eax*8]
mov dword [esp + 4], edi
push 0x5ab8
push edi
call fcn.00442897
add esp, 8
call fcn.00444282
mov eax, 0xaf376a67
cmp edi, 0x3a
jb 0x443568
mov eax, 0x403530b5
jmp 0x443568
imul eax, dword [esp + 8], 0x1f4
add eax, 0xffffffc4
shr eax, 4
imul eax, eax, 0x76
add eax, 0x4610
mov dword [esp + 8], eax
mov dword [esp], 0x97ffa163
jmp 0x4428b1
imul eax, dword [esp + 4], 0xcf0
add eax, 0x141d20
mov dword [esp + 4], eax
push 0x507d
push eax
call fcn.00442630
add esp, 8
call fcn.00444282
mov dword [esp], 0x80bd0680
jmp 0x4428b1
mov ecx, dword [esp + 8]
mov eax, 0xffffff42
add ecx, eax
imul eax, ecx, 0xc6c
imul ecx, ecx
imul edx, ecx, 0x5393
dec edx
add eax, 0xf50
mov dword [esp + 8], eax
mov eax, 0xdb186948
cmp edx, ecx
je 0x4433da
mov eax, 0x8cb46b41
mov dword [esp], eax
xor esi, esi
jmp 0x4428b1
mov dword [esp], 0xd0c2f2e7
jmp 0x4428b1
imul eax, dword [esp + 4], 0xad
add eax, 0xfffffffe
mov dword [esp + 4], eax
mov dword [esp], 0x403530b5
jmp 0x4428b1
mov dword [esp], 0x8cb46b41
mov esi, dword [esp + 0x60]
jmp 0x4428b1
mov eax, dword [esp + 4]
mov ecx, 0x17c
add eax, ecx
shr eax, 0xe
imul ecx, eax, 0x1762
lea eax, [ecx - 0x15d47e]
mov dword [esp + 4], eax
mov eax, 0x2a6dfe1d
cmp ecx, 0x15d529
jb 0x443568
mov eax, 0x31f71011
jmp 0x443568
mov dword [esp + 0xc], ebx
mov eax, dword [ebx + 0x3c]
mov dword [esp + 0x2c], eax
mov dword [esp], 0x1c9c7716
jmp 0x4428b1
mov eax, dword [esp + 4]
shl eax, 0xb
mov edi, 0xaf376a67
and eax, 0xffc00000
mov dword [esp + 4], eax
je 0x443487
mov edi, 0x1c9c7716
push 0x2026
push eax
call fcn.00442897
add esp, 8
mov dword [esp], edi
jmp 0x4428b1
mov eax, dword [esp + 4]
add eax, 0x34
shr eax, 5
add eax, 0xa5
mov dword [esp + 4], eax
push eax
push 0x2a9b
call fcn.00442630
add esp, 8
mov dword [esp], 0x1c9c7716
jmp 0x4428b1
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x20]
add eax, dword [esp + 0xc]
mov dword [esp + 0x34], eax
mov dword [esp], 0x37798935
jmp 0x4428b1
mov eax, dword [esp + 8]
shl eax, 4
add eax, 0xffffffc2
mov dword [esp + 8], eax
mov dword [esp], 0x1347f9d4
jmp 0x4428b1
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x60], eax
mov dword [esp], 0xeef09631
jmp 0x4428b1
mov ecx, dword [esp + 4]
shl ecx, 0xb
mov eax, 0x1c9c7716
add ecx, 0x2d000
mov dword [esp + 4], ecx
je 0x443568
mov eax, 0xce5130ff
jmp 0x443568
mov dword [esp], 0x7d4c09e0
jmp 0x4428b1
mov dword [esp], 0xdb186948
jmp 0x4428b1
movzx ecx, word [esp + 6]
and ecx, 0xfffffff8
mov dword [esp + 4], ecx
mov eax, 0xbfbf37ae
cmp ecx, 0xb2
jae 0x443568
mov eax, 0x1c1889e1
mov dword [esp], eax
jmp 0x4428b1
push dword [esp + 0x4c]
call fcn.004435a9
add esp, 4
mov dword [esp + 0x50], eax
mov dword [esp], 0x3018cd3
jmp 0x4428b1
cmp eax, 0x8cb46b41
jne 0x4428b1
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], ebp
mov eax, esi
add esp, 0x64
pop esi
pop edi
pop ebx
pop ebp
ret