Function at 0x422d20
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x422ff5
sub esp, 0x1c
mov eax, 0x6cdac0
mov ecx, dword [esp + 0x20]
mov ebp, dword [eax + 0xa80]
cmp ecx, ebp
jb 0x422fee
mov ebp, dword [eax + 0xa84]
cmp ecx, ebp
jae 0x422fee
mov ebx, dword [eax + 0xa80]
mov ebp, ecx
sub ebp, ebx
mov ebx, ebp
shr ebx, 0xd
mov ebp, dword [0x6ca92c]
cmp ebx, ebp
jae 0x422fe7
mov ebp, dword [0x6ca928]
shl ebx, 2
add ebp, ebx
mov eax, dword [ebp]
xor ebp, ebp
cmp eax, ebp
je 0x422fe0
mov edx, dword [eax + 0xc]
cmp ecx, edx
jb 0x422fe0
mov ebp, dword [eax + 0x50]
cmp ecx, ebp
jae 0x422fe0
movzx ebp, byte [eax + 0x3c]
xchg ebp, eax
cmp al, 0
xchg ebp, eax
jne 0x422fe0
mov esi, eax
mov dword [esp + 0x14], eax
xor ebp, ebp
cmp eax, ebp
jne 0x422ddd
mov ebx, 0x5fe99e
mov dword [esp], ebx
mov dword [esp + 4], 0x1d
call fcn.0042b7d0
mov esi, dword [esp + 0x14]
mov ebx, dword fs:[0x14]
mov ecx, dword [ebx]
mov eax, dword [ecx + 0x18]
mov edx, dword [eax + 0x70]
inc edx
mov dword [eax + 0x70], edx
mov ebp, dword [ecx + 0x18]
mov dword [esp + 0x18], ebp
mov dword [esp], esi
call fcn.0041e2f0
mov edx, dword [esp + 0x14]
mov ebx, dword [edx + 0xc]
mov ebp, dword [esp + 0x20]
sub ebp, ebx
mov dword [esp + 0xc], ebp
mov ebx, dword [esp + 0x24]
movzx ebp, byte [ebx + 6]
xchg ebp, eax
mov byte [esp + 0xb], al
xchg ebp, eax
mov dword [esp], edx
cmp dword [esp], 0
je 0x422fd5
add dword [esp], 0x54
call fcn.0040dde0
movzx edi, byte [esp + 0xb]
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
cmp ecx, 0
je 0x422fce
add ecx, 0x58
mov eax, dword [ecx]
xor ebp, ebp
cmp eax, ebp
jne 0x422f24
mov ebx, dword [esp + 0x24]
mov word [ebx + 4], dx
mov dword [esp + 0x10], ecx
mov ebp, dword [ecx]
mov ebx, dword [esp + 0x24]
cmp ebx, 0
je 0x422f1d
cmp byte [0x6dbe18], 0
jne 0x422f08
mov dword [ebx], ebp
mov eax, dword [esp + 0x24]
cmp ecx, 0
je 0x422f04
cmp byte [0x6dbe18], 0
jne 0x422ef6
mov dword [ecx], eax
mov ebx, dword [esp + 0x14]
mov dword [esp], ebx
cmp dword [esp], 0
je 0x422eee
add dword [esp], 0x54
call fcn.0040e020
mov eax, dword [esp + 0x18]
mov ebx, dword fs:[0x14]
mov ecx, dword [ebx]
mov edx, dword [eax + 0x70]
dec edx
mov dword [eax + 0x70], edx
mov ebp, dword [eax + 0x70]
cmp ebp, 0
jne 0x422ee5
movzx ebx, byte [ecx + 0x80]
cmp bl, 0
je 0x422ee5
mov eax, 0xfffffade
mov dword [ecx + 8], eax
mov byte [esp + 0x28], 1
add esp, 0x1c
ret
mov dword [0], eax
jmp 0x422ea8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00410660
jmp 0x422e9b
mov dword [ecx], eax
jmp 0x422e90
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.00410660
mov ecx, dword [esp + 0x10]
jmp 0x422e87
mov dword [ebx], eax
jmp 0x422e78
movzx ebp, word [eax + 4]
cmp ebp, edx
jne 0x422f95
movzx ebp, byte [eax + 6]
xchg ebp, eax
xchg edi, ebx
cmp al, bl
xchg edi, ebx
xchg ebp, eax
jne 0x422f95
mov ebx, dword [esp + 0x14]
mov dword [esp], ebx
cmp dword [esp], 0
je 0x422f8d
add dword [esp], 0x54
call fcn.0040e020
mov eax, dword [esp + 0x18]
mov ebx, dword fs:[0x14]
mov ecx, dword [ebx]
mov edx, dword [eax + 0x70]
dec edx
mov dword [eax + 0x70], edx
mov ebp, dword [eax + 0x70]
cmp ebp, 0
jne 0x422f84
movzx ebx, byte [ecx + 0x80]
cmp bl, 0
je 0x422f84
mov eax, 0xfffffade
mov dword [ecx + 8], eax
mov byte [esp + 0x28], 0
add esp, 0x1c
ret
mov dword [0], eax
jmp 0x422f47
movzx ebp, word [eax + 4]
cmp ebp, edx
ja 0x422e5d
movzx ebp, word [eax + 4]
cmp ebp, edx
jne 0x422fbb
movzx ebp, byte [eax + 6]
xchg ebp, eax
xchg edi, ebx
cmp al, bl
xchg edi, ebx
xchg ebp, eax
ja 0x422e5d
mov ecx, eax
cmp eax, 0
je 0x422fc7
jmp 0x422e51
mov dword [eax], eax
jmp 0x422e51
mov dword [ecx], eax
jmp 0x422e4e
mov dword [0], eax
jmp 0x422e2f
xor eax, eax
jmp 0x422db8
call fcn.00429b10
ud2
xor eax, eax
jmp 0x422db8
call fcn.00452240
jmp fcn.00422d20