Function at 0x428010
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x24
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov ebx, dword [edi + 8]
mov eax, dword [ebx + 0x44]
movzx edx, byte [eax + 0x26]
xor ecx, ecx
mov ch, byte [eax + 0x24]
add eax, 0x24
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], ebx
mov cl, byte [eax + 1]
movzx eax, byte [eax + 3]
shl ecx, 8
or ecx, edx
shl ecx, 8
or ecx, eax
mov dword [esp + 0x24], ecx
jle 0x42853b
cmp byte [ebp + 0x18], 0
mov byte [esp + 0xe], 0
je 0x42809d
mov esi, dword [edi]
call fcn.00422900
mov esi, dword [ebp + 0x14]
cmp esi, eax
ja 0x42809d
lea ecx, [esp + 0xf]
push 0
push ecx
mov eax, esi
mov ecx, edi
call fcn.00424d50
add esp, 8
test eax, eax
jne 0x42851e
cmp byte [esp + 0xf], 2
jne 0x428098
mov byte [esp + 0xe], 1
mov edx, dword [ebp + 0x10]
mov dword [edx], esi
mov eax, dword [ebx + 0x48]
push eax
call fcn.00423f00
add esp, 4
test eax, eax
jne 0x42851e
mov ecx, dword [esp + 0x24]
mov eax, dword [ebx + 0x44]
add ecx, 0xffffffff
add eax, 0x24
mov edx, ecx
shr edx, 0x18
mov byte [eax], dl
mov edx, ecx
shr edx, 0x10
mov byte [eax + 1], dl
mov edx, ecx
shr edx, 8
mov byte [eax + 2], dl
mov byte [eax + 3], cl
mov eax, dword [esp + 0x1c]
xor ecx, ecx
test eax, eax
mov dword [esp + 0x14], eax
je 0x4280eb
mov eax, dword [eax + 0x44]
jmp 0x4280f1
mov eax, dword [ebx + 0x44]
add eax, 0x20
mov ch, byte [eax]
movzx edx, byte [eax + 2]
mov edi, dword [ebp + 8]
push 0
mov cl, byte [eax + 1]
movzx eax, byte [eax + 3]
shl ecx, 8
or ecx, edx
shl ecx, 8
or ecx, eax
mov eax, dword [edi]
mov esi, ecx
lea ecx, [esp + 0x2c]
push ecx
mov ebx, esi
call fcn.00423610
add esp, 8
test eax, eax
jne 0x4284ec
mov eax, dword [esp + 0x28]
mov ecx, dword [eax]
test ecx, ecx
je 0x42813b
mov edx, dword [ecx + 0x38]
lea ebx, [edx + eax + 0x30]
jmp 0x42813d
xor ebx, ebx
cmp esi, 1
setne dl
lea ecx, [eax + 0x30]
sub dl, 1
mov dword [ebx + 0x48], eax
mov dword [ebx + 0x40], edi
xor eax, eax
mov edi, ecx
mov dword [ebx + 0x44], ecx
mov dword [ebx + 0x4c], esi
and edx, 0x64
mov byte [ebx + 8], dl
mov ah, byte [edi + 4]
movzx ecx, byte [edi + 6]
movzx edx, byte [edi + 7]
mov al, byte [edi + 5]
mov dword [esp + 0x1c], ebx
shl eax, 8
or eax, ecx
shl eax, 8
or eax, edx
mov dword [esp + 0x18], eax
jne 0x4281c6
cmp byte [esp + 0xe], 0
jne 0x4281c6
mov eax, dword [ebx + 0x48]
push eax
call fcn.00423f00
add esp, 4
test eax, eax
mov dword [esp + 0x10], eax
jne 0x4284fa
mov ecx, dword [ebp + 0x10]
mov eax, dword [esp + 0x20]
mov dword [ecx], esi
mov edx, dword [ebx + 0x44]
mov ecx, dword [eax + 0x44]
mov edx, dword [edx]
mov eax, dword [ebp + 0xc]
mov dword [ecx + 0x20], edx
mov dword [eax], ebx
mov dword [esp + 0x1c], 0
jmp 0x4284c4
mov ecx, dword [ebp + 8]
movzx edx, word [ecx + 0x1a]
shr edx, 2
sub edx, 8
cmp eax, edx
jg 0x4284f2
cmp byte [esp + 0xe], 0
je 0x428365
cmp dword [ebp + 0x14], esi
jne 0x428365
mov ecx, dword [ebx + 0x48]
mov eax, dword [ebp + 0xc]
push ecx
mov dword [eax], ebx
mov byte [esp + 0x12], 0
call fcn.00423f00
add esp, 4
test eax, eax
mov dword [esp + 0x10], eax
jne 0x4284fa
cmp dword [esp + 0x18], eax
jne 0x428252
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x42823b
mov edx, dword [ebx + 0x44]
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x44]
mov edx, dword [edx]
mov dword [ecx + 0x20], edx
mov dword [esp + 0x1c], 0
jmp 0x4284c4
mov ecx, dword [ebx + 0x44]
mov edx, dword [eax + 0x44]
mov eax, dword [ecx]
mov dword [edx], eax
mov dword [esp + 0x1c], 0
jmp 0x4284c4
mov eax, dword [ebx + 0x44]
movzx edx, byte [eax + 0xa]
mov esi, dword [ebp + 8]
xor ecx, ecx
mov ch, byte [eax + 8]
add eax, 8
mov cl, byte [eax + 1]
movzx eax, byte [eax + 3]
shl ecx, 8
or ecx, edx
shl ecx, 8
or ecx, eax
lea edx, [esp + 0x2c]
push edx
xor eax, eax
mov dword [esp + 0x28], ecx
call fcn.004256f0
add esp, 4
test eax, eax
mov dword [esp + 0x10], eax
jne 0x4284fa
mov edi, dword [esp + 0x2c]
mov eax, dword [edi + 0x48]
push eax
call fcn.00423f00
add esp, 4
test eax, eax
mov dword [esp + 0x10], eax
jne 0x428525
mov ecx, dword [ebx + 0x44]
mov eax, dword [ecx]
mov edx, dword [edi + 0x44]
mov ecx, dword [esp + 0x18]
mov dword [edx], eax
mov eax, dword [edi + 0x44]
add ecx, 0xffffffff
add eax, 4
mov edx, ecx
shr edx, 0x18
mov byte [eax], dl
mov edx, ecx
shr edx, 0x10
mov byte [eax + 1], dl
mov edx, ecx
shr edx, 8
mov byte [eax + 2], dl
mov byte [eax + 3], cl
mov edx, dword [edi + 0x44]
lea eax, [ecx*4]
mov ecx, dword [ebx + 0x44]
push eax
add ecx, 0xc
push ecx
add edx, 8
push edx
call fcn.0048cfd0
mov eax, dword [edi + 0x48]
add esp, 0xc
call fcn.00423890
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x42831b
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 0x44]
add eax, 0x20
jmp 0x42833a
mov eax, dword [eax + 0x48]
push eax
call fcn.00423f00
add esp, 4
test eax, eax
mov dword [esp + 0x10], eax
jne 0x4284fa
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x44]
mov ecx, dword [esp + 0x24]
mov edx, ecx
shr edx, 0x18
mov byte [eax], dl
mov edx, ecx
shr edx, 0x10
mov byte [eax + 1], dl
mov edx, ecx
shr edx, 8
mov byte [eax + 3], cl
mov byte [eax + 2], dl
mov dword [esp + 0x1c], 0
jmp 0x4284c4
mov eax, dword [ebx + 0x48]
push eax
call fcn.00423f00
add esp, 4
test eax, eax
mov dword [esp + 0x10], eax
jne 0x4284fa
mov esi, dword [ebp + 0x14]
xor ebx, ebx
test esi, esi
jbe 0x4283fb
movzx ecx, byte [edi + 0xa]
movzx edx, byte [edi + 0xb]
xor eax, eax
mov ah, byte [edi + 8]
mov al, byte [edi + 9]
shl eax, 8
or eax, ecx
shl eax, 8
or eax, edx
sub eax, esi
mov dword [esp + 0x24], eax
jns 0x4283ae
neg eax
mov dword [esp + 0x24], eax
mov ecx, 1
cmp dword [esp + 0x18], ecx
jle 0x4283fb
lea eax, [edi + 0xe]
lea esp, [esp]
movzx esi, byte [eax]
xor edx, edx
mov dh, byte [eax - 2]
mov dl, byte [eax - 1]
shl edx, 8
or edx, esi
movzx esi, byte [eax + 1]
shl edx, 8
or edx, esi
sub edx, dword [ebp + 0x14]
jns 0x4283e0
neg edx
cmp edx, dword [esp + 0x24]
jge 0x4283ec
mov ebx, ecx
mov dword [esp + 0x24], edx
add ecx, 1
add eax, 4
cmp ecx, dword [esp + 0x18]
jl 0x4283c0
mov esi, dword [ebp + 0x14]
movzx ecx, byte [edi + ebx*4 + 0xa]
movzx edx, byte [edi + ebx*4 + 0xb]
xor eax, eax
mov ah, byte [edi + ebx*4 + 8]
mov al, byte [edi + ebx*4 + 9]
shl eax, 8
or eax, ecx
shl eax, 8
or eax, edx
cmp byte [esp + 0xe], 0
je 0x428428
cmp eax, esi
jne 0x4284c4
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov dword [ecx], eax
mov esi, dword [edx]
call fcn.00422900
mov ecx, dword [ebp + 0x10]
cmp dword [ecx], eax
ja 0x42852f
mov eax, dword [esp + 0x18]
lea edx, [eax - 1]
cmp ebx, edx
jge 0x428455
mov edx, dword [edi + eax*4 + 4]
mov dword [edi + ebx*4 + 8], edx
mov ebx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
add eax, 0xffffffff
mov edx, eax
shr edx, 0x18
mov byte [edi + 4], dl
mov edx, eax
shr edx, 0x10
mov byte [edi + 5], dl
mov edx, eax
shr edx, 8
mov byte [edi + 7], al
mov byte [edi + 6], dl
mov ecx, dword [ecx]
push ebx
mov eax, 1
call fcn.004256f0
add esp, 4
test eax, eax
mov dword [esp + 0x10], eax
jne 0x4284bf
mov eax, dword [ebx]
mov edi, dword [eax + 0x48]
call fcn.004240c0
mov ecx, dword [ebx]
mov edx, dword [ecx + 0x48]
push edx
call fcn.00423f00
add esp, 4
test eax, eax
mov dword [esp + 0x10], eax
je 0x4284bf
mov ebx, dword [ebx]
test ebx, ebx
je 0x4284bf
mov eax, dword [ebx + 0x48]
call fcn.00423890
mov byte [esp + 0xe], 0
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4284d4
mov eax, dword [eax + 0x48]
call fcn.00423890
cmp byte [esp + 0xe], 0
mov dword [esp + 0x14], 0
je 0x4284fa
mov ebx, dword [esp + 0x20]
jmp 0x4280d8
mov dword [esp + 0x10], eax
jmp 0x42850a
mov dword [esp + 0x10], 0xb
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x42850a
mov eax, dword [eax + 0x48]
call fcn.00423890
mov eax, dword [esp + 0x14]
test eax, eax
je 0x42851a
mov eax, dword [eax + 0x48]
call fcn.00423890
mov eax, dword [esp + 0x10]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [edi + 0x48]
call fcn.00423890
jmp 0x4284fa
mov eax, 0xb
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [edi]
call fcn.00422900
mov esi, dword [ebp + 0x10]
add eax, 1
mov dword [esi], eax
mov eax, dword [edi + 0x14]
test eax, eax
je 0x42856e
lea ecx, [eax + 1]
mov dword [esi], ecx
movzx ebx, word [edi + 0x18]
mov eax, 0x40000000
cdq
idiv ebx
add eax, 1
cmp ecx, eax
jne 0x42856e
add ecx, 1
mov dword [esi], ecx
cmp byte [edi + 0x12], 0
je 0x428588
mov ebx, dword [esi]
push ebx
call fcn.00424c00
add esp, 4
cmp eax, ebx
jne 0x428588
add ebx, 1
mov dword [esi], ebx
cmp dword [edi + 0x14], 0
je 0x428593
mov eax, dword [esi]
mov dword [edi + 0x14], eax
mov ebx, dword [ebp + 0xc]
mov ecx, dword [esi]
push ebx
xor eax, eax
mov esi, edi
call fcn.004256f0
add esp, 4
test eax, eax
jne 0x42851e
mov ecx, dword [ebx]
mov edx, dword [ecx + 0x48]
push edx
call fcn.00423f00
add esp, 4
test eax, eax
mov dword [esp + 0x10], eax
je 0x42851a
mov ebx, dword [ebx]
test ebx, ebx
je 0x42851a
mov eax, dword [ebx + 0x48]
call fcn.00423890
mov eax, dword [esp + 0x10]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret