Function at 0x445990
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov dword [ebp - 8], str.kNT3rfecee42t96b2872ta3y_141ar469c_55aa22rrrrPP1
mov eax, 0x95
mov ecx, dword [ebp - 8]
mov word [ecx], ax
mov edx, dword [ebp - 8]
movzx eax, word [edx]
sub eax, 0x2c
mov ecx, dword [ebp - 8]
mov word [ecx], ax
mov edx, 0x88
mov eax, dword [ebp - 8]
mov word [eax + 0x12], dx
mov ecx, dword [ebp - 8]
movzx edx, word [ecx + 0x12]
sub edx, 0x2c
mov eax, dword [ebp - 8]
mov word [eax + 0x12], dx
mov ecx, 0x91
mov edx, dword [ebp - 8]
mov word [edx + 6], cx
mov eax, dword [ebp - 8]
movzx ecx, word [eax + 6]
sub ecx, 0x2c
mov edx, dword [ebp - 8]
mov word [edx + 6], cx
mov eax, 0x92
mov ecx, dword [ebp - 8]
mov word [ecx + 0xa], ax
mov edx, dword [ebp - 8]
movzx eax, word [edx + 0xa]
sub eax, 0x2c
mov ecx, dword [ebp - 8]
mov word [ecx + 0xa], ax
mov edx, 0x65
mov eax, dword [ebp - 8]
mov word [eax + 0xc], dx
mov ecx, dword [ebp - 8]
movzx edx, word [ecx + 0xc]
sub edx, 4
mov eax, dword [ebp - 8]
mov word [eax + 0xc], dx
mov ecx, 0xa7
mov edx, dword [ebp - 8]
mov word [edx + 0x14], cx
mov eax, dword [ebp - 8]
movzx ecx, word [eax + 0x14]
sub ecx, 0x2c
mov edx, dword [ebp - 8]
mov word [edx + 0x14], cx
mov eax, 0x8b
mov ecx, dword [ebp - 8]
mov word [ecx + 0x16], ax
mov edx, dword [ebp - 8]
movzx eax, word [edx + 0x16]
sub eax, 0x29
mov ecx, dword [ebp - 8]
mov word [ecx + 0x16], ax
mov edx, 0x5a
mov eax, dword [ebp - 8]
mov word [eax + 0x18], dx
mov ecx, dword [ebp - 8]
movzx edx, word [ecx + 0x18]
sub edx, 0x29
mov eax, dword [ebp - 8]
mov word [eax + 0x18], dx
mov ecx, 0x59
mov edx, dword [ebp - 8]
mov word [edx + 0x26], cx
mov eax, dword [ebp - 8]
movzx ecx, word [eax + 0x26]
sub ecx, 0x2c
mov edx, dword [ebp - 8]
mov word [edx + 0x26], cx
mov eax, 0x8e
mov ecx, dword [ebp - 8]
mov word [ecx + 0x28], ax
mov edx, dword [ebp - 8]
movzx eax, word [edx + 0x28]
sub eax, 0x2c
mov ecx, dword [ebp - 8]
mov word [ecx + 0x28], ax
mov edx, 0x8e
mov eax, dword [ebp - 8]
mov word [eax + 0x2c], dx
mov ecx, dword [ebp - 8]
movzx edx, word [ecx + 0x2c]
sub edx, 0x2c
mov eax, dword [ebp - 8]
mov word [eax + 0x2c], dx
mov ecx, 0x60
mov edx, dword [ebp - 8]
mov word [edx + 0x2e], cx
mov eax, dword [ebp - 8]
movzx ecx, word [eax + 0x2e]
sub ecx, 0x2c
mov edx, dword [ebp - 8]
mov word [edx + 0x2e], cx
mov eax, 0x5c
mov ecx, dword [ebp - 8]
mov word [ecx + 0x34], ax
mov edx, dword [ebp - 8]
movzx eax, word [edx + 0x34]
sub eax, 0x2c
mov ecx, dword [ebp - 8]
mov word [ecx + 0x34], ax
mov edx, 0x59
mov eax, dword [ebp - 8]
mov word [eax + 0x3a], dx
mov ecx, dword [ebp - 8]
movzx edx, word [ecx + 0x3a]
sub edx, 0x2c
mov eax, dword [ebp - 8]
mov word [eax + 0x3a], dx
mov ecx, 0x8e
mov edx, dword [ebp - 8]
mov word [edx + 0x3c], cx
mov eax, dword [ebp - 8]
movzx ecx, word [eax + 0x3c]
sub ecx, 0x2c
mov edx, dword [ebp - 8]
mov word [edx + 0x3c], cx
mov eax, 0x5c
mov ecx, dword [ebp - 8]
mov word [ecx + 0x46], ax
mov edx, dword [ebp - 8]
movzx eax, word [edx + 0x46]
sub eax, 0x2c
mov ecx, dword [ebp - 8]
mov word [ecx + 0x46], ax
mov edx, 0x5c
mov eax, dword [ebp - 8]
mov word [eax + 0x48], dx
mov ecx, dword [ebp - 8]
movzx edx, word [ecx + 0x48]
sub edx, 0x2c
mov eax, dword [ebp - 8]
mov word [eax + 0x48], dx
mov ecx, 0x5c
mov edx, dword [ebp - 8]
mov word [edx + 0x4e], cx
mov eax, dword [ebp - 8]
movzx ecx, word [eax + 0x4e]
sub ecx, 0x2c
mov edx, dword [ebp - 8]
mov word [edx + 0x4e], cx
mov eax, 0x5c
mov ecx, dword [ebp - 8]
mov word [ecx + 0x50], ax
mov edx, dword [ebp - 8]
movzx eax, word [edx + 0x50]
sub eax, 0x2c
mov ecx, dword [ebp - 8]
mov word [ecx + 0x50], ax
mov edx, 0x5f
mov eax, dword [ebp - 8]
mov word [eax + 0x52], dx
mov ecx, dword [ebp - 8]
movzx edx, word [ecx + 0x52]
sub edx, 0x2c
mov eax, dword [ebp - 8]
mov word [eax + 0x52], dx
mov ecx, 0x60
mov edx, dword [ebp - 8]
mov word [edx + 0x54], cx
mov eax, dword [ebp - 8]
movzx ecx, word [eax + 0x54]
sub ecx, 0x2c
mov edx, dword [ebp - 8]
mov word [edx + 0x54], cx
mov eax, 0x5d
mov ecx, dword [ebp - 8]
mov word [ecx + 0x56], ax
mov edx, dword [ebp - 8]
movzx eax, word [edx + 0x56]
sub eax, 0x2c
mov ecx, dword [ebp - 8]
mov word [ecx + 0x56], ax
mov edx, 0x90
mov eax, dword [ebp - 8]
mov word [eax + 0x58], dx
mov ecx, dword [ebp - 8]
movzx edx, word [ecx + 0x58]
sub edx, 0x2c
mov eax, dword [ebp - 8]
mov word [eax + 0x58], dx
mov ecx, 0x33
mov edx, dword [ebp - 8]
mov word [edx + 0x5a], cx
mov eax, dword [ebp - 8]
movzx ecx, word [eax + 0x5a]
sub ecx, 3
mov edx, dword [ebp - 8]
mov word [edx + 0x5a], cx
mov eax, 0x3a
mov ecx, dword [ebp - 8]
mov word [ecx + 0x5c], ax
mov edx, dword [ebp - 8]
movzx eax, word [edx + 0x5c]
sub eax, 3
mov ecx, dword [ebp - 8]
mov word [ecx + 0x5c], ax
mov edx, pe_nt_image_headers32
mov eax, dword [ebp - 8]
mov word [eax + 0x5e], dx
mov ecx, dword [ebp - 8]
movzx edx, word [ecx + 0x5e]
sub edx, 3
mov eax, dword [ebp - 8]
mov word [eax + 0x5e], dx
mov ecx, dword [0x444414]
mov dword [ebp - 0xc], ecx
push 0x44442c
mov edx, dword [ebp - 8]
push edx
mov eax, dword [0x444248]
sub eax, 0x3018
push eax
call dword [ebp - 0xc]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x445cc0
mov ecx, 1
test ecx, ecx
je 0x445cc0
jmp 0x445cb5
mov eax, 0x445360
call eax
mov dword [0x444230], 0
mov edx, dword [0x444230]
mov dword [0x444234], edx
mov dword [0x44422c], 0
mov esp, ebp
pop ebp
ret