Function at 0x42dbf0
Capabilities:
Enumerate pe sections

Disassembly:
push ebx
push ebp
push esi
mov esi, dword [esp + 0x10]
push edi
call fcn.0042c0c0
mov ebx, dword [esp + 0x18]
mov edx, dword [0x448584]
mov edi, eax
movsx eax, bx
push eax
movsx ecx, si
push ecx
push str.SPLITremovesection___i___i__n
push 5
push edx
call fcn.004380f8
push ebx
push esi
call fcn.0042cce0
mov ebp, eax
mov ebx, dword [edi + ebp*4 + 0x14]
movzx eax, word [ebx + 0x12]
xor esi, esi
add esp, 0x1c
cmp ax, si
je 0x42dc4c
push eax
call sub.gnwie.dll_GWdestroy
movzx eax, word [ebx + 0x12]
push eax
call sub.gnwie.dll_Wdestroychild
add esp, 8
movzx eax, word [ebx + 0x10]
cmp ax, si
je 0x42dc68
push eax
call sub.gnwie.dll_ABTNdestroy
movzx ecx, word [ebx + 0x10]
push ecx
call sub.gnwie.dll_Wdestroychild
add esp, 8
movzx eax, word [ebx + 0xc]
cmp ax, si
je 0x42dc84
push eax
call sub.gnwie.dll_BTNdestroy
movzx edx, word [ebx + 0xc]
push edx
call sub.gnwie.dll_Wdestroychild
add esp, 8
movzx eax, word [ebx + 0xe]
cmp ax, si
je 0x42dca0
push eax
call sub.gnwie.dll_BTNdestroy
movzx eax, word [ebx + 0xe]
push eax
call sub.gnwie.dll_Wdestroychild
add esp, 8
movzx eax, word [ebx + 0xa]
cmp ax, si
je 0x42dcbc
push eax
call sub.gnwie.dll_SBdestroy
movzx ecx, word [ebx + 0xa]
push ecx
call sub.gnwie.dll_Wdestroychild
add esp, 8
movzx eax, word [ebx + 8]
cmp ax, si
je 0x42dcd8
push eax
call sub.gnwie.dll_SBdestroy
movzx edx, word [ebx + 8]
push edx
call sub.gnwie.dll_Wdestroychild
add esp, 8
movzx eax, word [ebx + 6]
cmp ax, si
je 0x42dcf4
push eax
call sub.gnwie.dll_GWdestroy
movzx eax, word [ebx + 6]
push eax
call sub.gnwie.dll_Wdestroychild
add esp, 8
movzx eax, word [ebx + 4]
cmp ax, si
je 0x42dd10
push eax
call sub.gnwie.dll_OUTdestroy
movzx ecx, word [ebx + 4]
push ecx
call sub.gnwie.dll_Wdestroychild
add esp, 8
push ebx
call fcn.00438b35
mov dword [edi + ebp*4 + 0x14], esi
add dword [edi + 0x40], 0xffffffff
mov ecx, dword [edi + 0x40]
xor eax, eax
add esp, 4
cmp ecx, esi
lea ebp, [eax + 1]
jle 0x42dd85
mov bl, 0x33
mov dl, 0x34
cmp dword [edi + eax*4 + 0x14], esi
jne case.default.0x42dd4b
cmp eax, 3
mov ecx, dword [edi + eax*4 + 0x18]
mov dword [edi + eax*4 + 0x14], ecx
mov dword [ecx + 0x14], eax
mov dword [edi + eax*4 + 0x18], esi
ja case.default.0x42dd4b
jmp dword [eax*4 + 0x42dde8]
mov ecx, dword [edi + eax*4 + 0x14]
mov ecx, dword [ecx]
mov byte [ecx + 1], 0x31
jmp case.default.0x42dd4b
mov ecx, dword [edi + eax*4 + 0x14]
mov ecx, dword [ecx]
mov byte [ecx + 1], 0x32
jmp case.default.0x42dd4b
mov ecx, dword [edi + eax*4 + 0x14]
mov ecx, dword [ecx]
mov byte [ecx + 1], bl
jmp case.default.0x42dd4b
mov ecx, dword [edi + eax*4 + 0x14]
mov ecx, dword [ecx]
mov byte [ecx + 1], dl
add eax, ebp
cmp eax, dword [edi + 0x40]
jl 0x42dd31
mov eax, dword [edi + 0x40]
sub eax, ebp
je 0x42dd9e
sub eax, ebp
je 0x42ddc9
sub eax, ebp
jne 0x42dda4
mov dword [edi + 0x4c], 2
mov dword [edi + 0x50], ebp
mov dword [edi + 0x58], esi
mov dword [edi + 0x48], esi
mov eax, dword [edi + 0x44]
cmp eax, esi
jle 0x42ddb1
add eax, 0xffffffff
mov dword [edi + 0x44], eax
mov esi, dword [esp + 0x14]
push esi
call fcn.0042c5c0
add esp, 4
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
jmp fcn.0042c850
mov eax, dword [edi + 0x58]
cmp eax, 3
je 0x42ddda
cmp eax, ebp
je 0x42ddda
mov dword [edi + 0x4c], ebp
jmp 0x42dd9e
mov dword [edi + 0x58], ebp
mov dword [edi + 0x48], ebp
mov dword [edi + 0x4c], esi
jmp 0x42dda4