Function at 0x10004280
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x44
push ebx
push ebp
push esi
mov esi, ecx
push edi
lea ecx, [esp + 0x14]
mov edi, dword [esi + 0x640]
mov ax, word [edi]
push eax
push ecx
mov ecx, esi
call fcn.100045b0
mov edx, dword [edi + 2]
lea eax, [esp + 0x16]
push edx
push eax
mov ecx, esi
call fcn.100045a0
mov cx, word [edi + 6]
lea edx, [esp + 0x1a]
push ecx
push edx
mov ecx, esi
call fcn.100045b0
mov ax, word [edi + 8]
lea ecx, [esp + 0x1c]
push eax
push ecx
mov ecx, esi
call fcn.100045b0
mov edx, dword [edi + 0xa]
lea eax, [esp + 0x1e]
push edx
push eax
mov ecx, esi
call fcn.100045a0
lea edx, [esi + 0x42c]
lea ecx, [esi + 4]
push edx
mov dword [esp + 0x14], ecx
call fcn.10004880
mov ebx, edx
mov ebp, eax
and eax, ebx
cmp eax, 0xffffffff
je 0x10004316
test ebx, ebx
jg 0x10004316
jl 0x1000430a
cmp ebp, 0xe
jae 0x10004316
pop edi
pop esi
pop ebp
mov ax, 0xc9
pop ebx
add esp, 0x44
ret
lea ecx, [esp + 0x14]
push ecx
mov ecx, dword [esp + 0x14]
push 0xe
call fcn.10004690
mov eax, dword [esi + 0x654]
test eax, eax
jne 0x1000442f
mov edx, dword [edi + 0xe]
add edi, 0xe
lea eax, [esp + 0x14]
push edx
push eax
mov ecx, esi
call fcn.100045a0
mov ecx, dword [edi + 4]
lea edx, [esp + 0x18]
push ecx
push edx
mov ecx, esi
call fcn.100045a0
mov eax, dword [edi + 8]
lea ecx, [esp + 0x1c]
push eax
push ecx
mov ecx, esi
call fcn.100045a0
mov dx, word [edi + 0xc]
lea eax, [esp + 0x20]
push edx
push eax
mov ecx, esi
call fcn.100045b0
mov cx, word [edi + 0xe]
lea edx, [esp + 0x22]
push ecx
push edx
mov ecx, esi
call fcn.100045b0
mov eax, dword [edi + 0x10]
lea ecx, [esp + 0x24]
push eax
push ecx
mov ecx, esi
call fcn.100045a0
mov edx, dword [edi + 0x14]
lea eax, [esp + 0x28]
push edx
push eax
mov ecx, esi
call fcn.100045a0
mov ecx, dword [edi + 0x18]
lea edx, [esp + 0x2c]
push ecx
push edx
mov ecx, esi
call fcn.100045a0
mov eax, dword [edi + 0x1c]
lea ecx, [esp + 0x30]
push eax
push ecx
mov ecx, esi
call fcn.100045a0
mov edx, dword [edi + 0x20]
lea eax, [esp + 0x34]
push edx
push eax
mov ecx, esi
call fcn.100045a0
mov ecx, dword [edi + 0x24]
lea edx, [esp + 0x38]
push ecx
push edx
mov ecx, esi
call fcn.100045a0
mov eax, ebp
and eax, ebx
cmp eax, 0xffffffff
je 0x10004409
test ebx, ebx
jg 0x10004409
jl 0x100043fd
cmp ebp, 0x28
jae 0x10004409
pop edi
pop esi
pop ebp
mov ax, 0xc9
pop ebx
add esp, 0x44
ret
lea ecx, [esp + 0x14]
push ecx
mov ecx, dword [esp + 0x14]
push 0x28
call fcn.10004690
mov eax, dword [edi + 0x20]
test eax, eax
jne 0x100044b7
pop edi
pop esi
pop ebp
xor ax, ax
pop ebx
add esp, 0x44
ret
mov edx, dword [edi + 0xe]
lea eax, [esp + 0x14]
push edx
push eax
mov ecx, esi
call fcn.100045a0
mov cx, word [edi + 0x12]
lea edx, [esp + 0x18]
push ecx
push edx
mov ecx, esi
call fcn.100045b0
mov ax, word [edi + 0x14]
lea ecx, [esp + 0x1a]
push eax
push ecx
mov ecx, esi
call fcn.100045b0
mov dx, word [edi + 0x16]
lea eax, [esp + 0x1c]
push edx
push eax
mov ecx, esi
call fcn.100045b0
mov cx, word [edi + 0x18]
lea edx, [esp + 0x1e]
push ecx
push edx
mov ecx, esi
call fcn.100045b0
mov eax, ebp
and eax, ebx
cmp eax, 0xffffffff
je 0x100044a3
test ebx, ebx
jg 0x100044a3
jl 0x10004497
cmp ebp, 0xc
jae 0x100044a3
pop edi
pop esi
pop ebp
mov ax, 0xc9
pop ebx
add esp, 0x44
ret
lea ecx, [esp + 0x14]
push ecx
mov ecx, dword [esp + 0x14]
push 0xc
call fcn.10004690
mov edi, dword [esp + 0x10]
mov eax, dword [esi + 0x638]
cmp eax, 0x400
je 0x10004590
cmp eax, 0x418
je 0x10004590
mov ecx, dword [esi + 0x654]
test ecx, ecx
jne 0x100044e5
mov edi, dword [edi + 0x20]
shl edi, 2
jmp 0x10004505
cmp eax, 0xbbc
ja 0x1000452e
je 0x10004527
sub eax, 0x7d8
je 0x10004543
sub eax, 8
je 0x10004543
sub eax, 0x3d9
je 0x1000453c
mov edi, dword [esp + 0x10]
push edi
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov esi, eax
test esi, esi
jne 0x1000454a
pop edi
pop esi
pop ebp
or ax, 0xffff
pop ebx
add esp, 0x44
ret
mov edi, 0x30
jmp 0x10004505
cmp eax, 0xbc0
je 0x10004543
cmp eax, 0xfa0
jne 0x10004501
mov edi, 6
jmp 0x10004505
mov edi, 0x300
jmp 0x10004505
mov edx, ebp
and edx, ebx
cmp edx, 0xffffffff
je 0x1000456b
xor eax, eax
cmp ebx, eax
jg 0x1000456b
jl 0x1000455f
cmp ebp, edi
jae 0x1000456b
pop edi
pop esi
pop ebp
mov ax, 0xc9
pop ebx
add esp, 0x44
ret
mov ecx, dword [esp + 0x10]
push esi
push edi
call fcn.10004690
mov edi, dword [sym.imp.KERNEL32.dll_GlobalHandle]
push esi
call edi
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push esi
call edi
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
pop edi
pop esi
pop ebp
xor ax, ax
pop ebx
add esp, 0x44
ret