Function at 0x423ae0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x8c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x70], eax
nop
mov esi, 0x446060
lea edi, [ebp - 0x4a]
mov ecx, 0x2d
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4469f8]
test al, al
jne 0x423b5c
mov dword [esp], 0x4469f8
call fcn.004420b0
test eax, eax
je 0x423b5c
lea eax, [ebp - 0x4a]
mov ecx, 0x44aca0
mov dword [esp], eax
call fcn.0042f1b8
push eax
mov dword [esp], 0x4429d4
call fcn.00401400
mov dword [esp], 0x4469f8
call fcn.00442180
mov ecx, 0x44aca0
call fcn.0042f178
mov dword [esp + 0xc], 0x32
mov dword [esp + 8], 0x2369
mov dword [esp + 4], 0xb8
mov dword [esp], 0x44aca0
call fcn.0042c220
nop
mov word [ebp - 0x4a], 0x31af
mov al, byte [0x446970]
test al, al
jne 0x423bd4
mov dword [esp], 0x446970
call fcn.004420b0
test eax, eax
je 0x423bd4
lea eax, [ebp - 0x4a]
mov ecx, 0x44a920
mov dword [esp], eax
call fcn.0042f160
push eax
mov dword [esp], 0x4429d8
call fcn.00401400
mov dword [esp], 0x446970
call fcn.00442180
mov ecx, 0x44a920
call fcn.0042f120
mov dword [esp], 0x44a920
call sub.msvcrt.dll_atoi
cmp eax, dword [0x44fb38]
jne 0x423bfb
push eax
xor eax, eax
mov dword [0xc], eax
pop eax
lea edi, [ebp - 0x4a]
mov esi, 0x446020
mov ecx, 0x32
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4469b0]
test al, al
jne 0x423c4c
mov dword [esp], 0x4469b0
call fcn.004420b0
test eax, eax
je 0x423c4c
lea eax, [ebp - 0x4a]
mov ecx, 0x44aac0
mov dword [esp], eax
call fcn.0042f224
push eax
mov dword [esp], 0x4429dc
call fcn.00401400
mov dword [esp], 0x4469b0
call fcn.00442180
mov ecx, 0x44aac0
call fcn.0042f1e4
mov dword [esp + 0xc], 0xc4
mov dword [esp + 8], 0x4796
mov dword [esp + 4], 0xba
mov dword [esp], 0x44aac0
call fcn.0042c220
nop
mov esi, 0x446060
lea edi, [ebp - 0x4a]
mov ecx, 0x2d
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4469b8]
test al, al
jne 0x423ccc
mov dword [esp], 0x4469b8
call fcn.004420b0
test eax, eax
je 0x423ccc
lea eax, [ebp - 0x4a]
mov ecx, 0x44ab00
mov dword [esp], eax
call fcn.0042f1b8
push eax
mov dword [esp], 0x4429e0
call fcn.00401400
mov dword [esp], 0x4469b8
call fcn.00442180
mov ecx, 0x44ab00
call fcn.0042f178
mov dword [esp + 0xc], 0x34
mov dword [esp + 8], 0x25a7
mov dword [esp + 4], 0xbc
mov dword [esp], 0x44ab00
call fcn.0042c220
nop
mov word [ebp - 0x4a], 0x31af
mov al, byte [0x4469c0]
test al, al
jne 0x423d44
mov dword [esp], 0x4469c0
call fcn.004420b0
test eax, eax
je 0x423d44
lea eax, [ebp - 0x4a]
mov ecx, 0x44ab40
mov dword [esp], eax
call fcn.0042f160
push edi
mov dword [esp], 0x4429e4
call fcn.00401400
mov dword [esp], 0x4469c0
call fcn.00442180
mov ecx, 0x44ab40
call fcn.0042f120
mov dword [esp], 0x44ab40
call sub.msvcrt.dll_atoi
cmp eax, dword [0x44fb38]
jne 0x423d6b
push eax
xor eax, eax
mov dword [0xc], eax
pop eax
lea edi, [ebp - 0x4a]
mov esi, 0x446020
mov ecx, 0x32
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4469c8]
test al, al
jne 0x423dbc
mov dword [esp], 0x4469c8
call fcn.004420b0
test eax, eax
je 0x423dbc
lea eax, [ebp - 0x4a]
mov ecx, 0x44ab60
mov dword [esp], eax
call fcn.0042f224
push esi
mov dword [esp], 0x4429e8
call fcn.00401400
mov dword [esp], 0x4469c8
call fcn.00442180
mov ecx, 0x44ab60
xor ebx, ebx
call fcn.0042f1e4
mov dword [esp + 0xc], 0xcc
mov dword [esp + 8], 0x4c1a
mov dword [esp + 4], 0xbe
mov dword [esp], 0x44ab60
call fcn.0042c220
mov dword [ebp - 0x5c], ebx
mov eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x5c]
lea ebx, [ebp - 0x4a]
movzx eax, word [eax + 6]
cmp eax, edx
jle 0x4242a0
nop
mov esi, 0x446060
mov ecx, 0x2d
mov edi, ebx
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4469d0]
test al, al
jne 0x423e52
mov dword [esp], 0x4469d0
call fcn.004420b0
test eax, eax
je 0x423e52
mov dword [esp], ebx
mov ecx, 0x44aba0
call fcn.0042f1b8
push ecx
mov dword [esp], 0x4429ec
call fcn.00401400
mov dword [esp], 0x4469d0
call fcn.00442180
mov ecx, 0x44aba0
call fcn.0042f178
mov dword [esp + 0xc], 0x36
mov dword [esp + 8], 0x27f5
mov dword [esp + 4], 0xc0
mov dword [esp], 0x44aba0
call fcn.0042c220
nop
mov word [ebp - 0x4a], 0x31af
mov al, byte [0x4469d8]
test al, al
jne 0x423eca
mov dword [esp], 0x4469d8
call fcn.004420b0
test eax, eax
je 0x423eca
lea eax, [ebp - 0x4a]
mov ecx, 0x44abe0
mov dword [esp], eax
call fcn.0042f160
push edx
mov dword [esp], 0x4429f0
call fcn.00401400
mov dword [esp], 0x4469d8
call fcn.00442180
mov ecx, 0x44abe0
call fcn.0042f120
mov dword [esp], 0x44abe0
call sub.msvcrt.dll_atoi
cmp eax, dword [0x44fb38]
jne 0x423ef1
push eax
xor eax, eax
mov dword [0xc], eax
pop eax
lea edi, [ebp - 0x4a]
mov esi, 0x446020
mov ecx, 0x32
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4469e0]
test al, al
jne 0x423f42
mov dword [esp], 0x4469e0
call fcn.004420b0
test eax, eax
je 0x423f42
lea eax, [ebp - 0x4a]
mov ecx, 0x44ac00
mov dword [esp], eax
call fcn.0042f224
push eax
mov dword [esp], 0x4429f4
call fcn.00401400
mov dword [esp], 0x4469e0
call fcn.00442180
mov ecx, 0x44ac00
call fcn.0042f1e4
mov dword [esp + 0xc], 0xd4
mov dword [esp + 8], 0x50be
mov dword [esp + 4], 0xc2
mov dword [esp], 0x44ac00
call fcn.0042c220
mov eax, dword [ebp - 0x68]
mov edx, dword [ebp - 0x60]
mov eax, dword [eax + 0x3c]
lea ebx, [edx + eax + 0xf8]
imul eax, dword [ebp - 0x5c], 0x28
add ebx, eax
nop
mov esi, 0x446060
lea edi, [ebp - 0x4a]
mov ecx, 0x2d
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4469e8]
test al, al
jne 0x423fd8
mov dword [esp], 0x4469e8
call fcn.004420b0
test eax, eax
je 0x423fd8
lea eax, [ebp - 0x4a]
mov ecx, 0x44ac40
mov dword [esp], eax
call fcn.0042f1b8
push eax
mov dword [esp], 0x4429f8
call fcn.00401400
mov dword [esp], 0x4469e8
call fcn.00442180
mov ecx, 0x44ac40
call fcn.0042f178
mov dword [esp + 0xc], 0x38
mov dword [esp + 8], 0x2a53
mov dword [esp + 4], 0xc4
mov dword [esp], 0x44ac40
call fcn.0042c220
nop
mov word [ebp - 0x4a], 0x31af
mov al, byte [0x4469f0]
test al, al
jne 0x424050
mov dword [esp], 0x4469f0
call fcn.004420b0
test eax, eax
je 0x424050
lea eax, [ebp - 0x4a]
mov ecx, 0x44ac80
mov dword [esp], eax
call fcn.0042f160
push eax
mov dword [esp], 0x4429fc
call fcn.00401400
mov dword [esp], 0x4469f0
call fcn.00442180
mov ecx, 0x44ac80
call fcn.0042f120
mov dword [esp], 0x44ac80
call sub.msvcrt.dll_atoi
cmp eax, dword [0x44fb38]
jne 0x424077
push eax
xor eax, eax
mov dword [0xc], eax
pop eax
lea edi, [ebp - 0x4a]
mov esi, 0x446020
mov ecx, 0x32
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x446978]
test al, al
jne 0x4240c8
mov dword [esp], 0x446978
call fcn.004420b0
test eax, eax
je 0x4240c8
lea eax, [ebp - 0x4a]
mov ecx, 0x44a940
mov dword [esp], eax
call fcn.0042f224
push eax
mov dword [esp], 0x442a00
call fcn.00401400
mov dword [esp], 0x446978
call fcn.00442180
mov ecx, 0x44a940
call fcn.0042f1e4
mov dword [esp + 0xc], 0xdc
mov dword [esp + 8], 0x5582
mov dword [esp + 4], 0xc6
mov dword [esp], 0x44a940
call fcn.0042c220
xor eax, eax
mov dword [esp + 0x10], eax
mov eax, dword [ebx + 0x10]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x60]
add eax, dword [ebx + 0x14]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x70]
add eax, dword [ebx + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
sub esp, 0x14
nop
mov esi, 0x446060
lea edi, [ebp - 0x4a]
mov ecx, 0x2d
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x446980]
test al, al
jne 0x42417a
mov dword [esp], 0x446980
call fcn.004420b0
test eax, eax
je 0x42417a
lea eax, [ebp - 0x4a]
mov ecx, 0x44a980
mov dword [esp], eax
call fcn.0042f1b8
push edi
mov dword [esp], 0x442a04
call fcn.00401400
mov dword [esp], 0x446980
call fcn.00442180
mov ecx, 0x44a980
call fcn.0042f178
mov dword [esp + 0xc], 0x3c
mov dword [esp + 8], 0x2e53
mov dword [esp + 4], 0xc8
mov dword [esp], 0x44a980
call fcn.0042c220
nop
mov word [ebp - 0x4a], 0x31af
mov al, byte [0x446988]
test al, al
jne 0x4241f2
mov dword [esp], 0x446988
call fcn.004420b0
test eax, eax
je 0x4241f2
lea eax, [ebp - 0x4a]
mov ecx, 0x44a9c0
mov dword [esp], eax
call fcn.0042f160
push esi
mov dword [esp], 0x442a08
call fcn.00401400
mov dword [esp], 0x446988
call fcn.00442180
mov ecx, 0x44a9c0
call fcn.0042f120
mov dword [esp], 0x44a9c0
call sub.msvcrt.dll_atoi
cmp eax, dword [0x44fb38]
jne 0x424219
push eax
xor eax, eax
mov dword [0xc], eax
pop eax
lea edi, [ebp - 0x4a]
mov esi, 0x446020
mov ecx, 0x32
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x446990]
test al, al
jne 0x42426a
mov dword [esp], 0x446990
call fcn.004420b0
test eax, eax
je 0x42426a
lea eax, [ebp - 0x4a]
mov ecx, 0x44a9e0
mov dword [esp], eax
call fcn.0042f224
push ebx
mov dword [esp], 0x442a0c
call fcn.00401400
mov dword [esp], 0x446990
call fcn.00442180
mov ecx, 0x44a9e0
call fcn.0042f1e4
mov dword [esp + 0xc], 0xec
mov dword [esp + 8], 0x5d92
mov dword [esp + 4], 0xca
mov dword [esp], 0x44a9e0
call fcn.0042c220
inc dword [ebp - 0x5c]
jmp 0x423def
nop
mov esi, 0x446060
mov ecx, 0x2d
mov edi, ebx
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x446998]
test al, al
jne 0x4242ee
mov dword [esp], 0x446998
call fcn.004420b0
test eax, eax
je 0x4242ee
mov dword [esp], ebx
mov ecx, 0x44aa20
call fcn.0042f1b8
push ecx
mov dword [esp], 0x442a10
call fcn.00401400
mov dword [esp], 0x446998
call fcn.00442180
mov ecx, 0x44aa20
call fcn.0042f178
mov dword [esp + 0xc], 0x3e
mov dword [esp + 8], 0x30d9
mov dword [esp + 4], 0xcc
mov dword [esp], 0x44aa20
call fcn.0042c220
nop
mov word [ebp - 0x4a], 0x31af
mov al, byte [0x4469a0]
test al, al
jne 0x424363
mov dword [esp], 0x4469a0
call fcn.004420b0
test eax, eax
je 0x424363
mov dword [esp], ebx
mov ecx, 0x44aa60
call fcn.0042f160
push edx
mov dword [esp], 0x442a14
call fcn.00401400
mov dword [esp], 0x4469a0
call fcn.00442180
mov ecx, 0x44aa60
call fcn.0042f120
mov dword [esp], 0x44aa60
call sub.msvcrt.dll_atoi
cmp eax, dword [0x44fb38]
jne 0x42438a
push eax
xor eax, eax
mov dword [0xc], eax
pop eax
mov esi, 0x446020
mov ecx, 0x32
mov edi, ebx
rep movsb byte es:[edi], byte [esi]
mov al, byte [0x4469a8]
test al, al
jne 0x4243d7
mov dword [esp], 0x4469a8
call fcn.004420b0
test eax, eax
je 0x4243d7
mov dword [esp], ebx
mov ecx, 0x44aa80
call fcn.0042f224
push eax
mov dword [esp], 0x442a18
call fcn.00401400
mov dword [esp], 0x4469a8
call fcn.00442180
mov ecx, 0x44aa80
call fcn.0042f1e4
mov dword [ebp + 0x14], 0xf4
mov dword [ebp + 0x10], 0x62a6
mov dword [ebp + 0xc], 0xce
mov dword [ebp + 8], 0x44aa80
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.0042c220