Function at 0x423680
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x28
push ebx
push ebp
push esi
push edi
mov edi, ecx
mov dword [esp + 0x18], edi
cmp dword [edi + 0x20], 0
jne 0x423e3c
test byte [edi], 8
jne 0x423e3c
mov ebp, dword [edi + 0x10]
xorps xmm0, xmm0
mov esi, dword [edi + 0x4c]
mov eax, ebp
mov ecx, dword [edi + 0x14]
movlpd qword [esp + 0x30], xmm0
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], ecx
test esi, esi
je 0x423aeb
mov eax, dword [esp + 0x34]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x1c], eax
nop word [eax + eax]
mov edx, 0x2014b50
mov ecx, edi
call fcn.00424000
mov edx, 0x201
mov ecx, edi
call fcn.00424000
mov edx, 0xb2d
mov ecx, edi
call fcn.00424000
mov edx, 0x2d
mov ecx, edi
call fcn.00424000
movzx edx, word [esi]
mov ecx, edi
call fcn.00424000
movzx edx, word [esi + 2]
mov ecx, edi
call fcn.00424000
mov edx, dword [esi + 4]
mov ecx, edi
call fcn.00424000
movzx edx, word [esi + 6]
mov ecx, edi
call fcn.00424000
mov edx, dword [esi + 8]
mov ecx, edi
call fcn.00424000
movzx edx, word [esi + 0xa]
mov ecx, edi
call fcn.00424000
cmp dword [esi + 0x14], 0
mov edx, dword [esi + 0x10]
ja 0x423770
cmp edx, 0xffffffff
jae 0x423770
mov ecx, edi
call fcn.00424000
mov edx, dword [esi + 0x10]
mov eax, dword [esi + 0x14]
shrd edx, eax, 0x10
jmp 0x42377d
or edx, 0xffffffff
mov ecx, edi
call fcn.00424000
or edx, 0xffffffff
mov ecx, edi
call fcn.00424000
cmp dword [esi + 0x1c], 0
mov edx, dword [esi + 0x18]
ja 0x4237a5
cmp edx, 0xffffffff
jae 0x4237a5
mov ecx, edi
call fcn.00424000
mov edx, dword [esi + 0x18]
mov eax, dword [esi + 0x1c]
shrd edx, eax, 0x10
jmp 0x4237b2
or edx, 0xffffffff
mov ecx, edi
call fcn.00424000
or edx, 0xffffffff
mov ecx, edi
call fcn.00424000
mov edx, dword [esi + 0x20]
mov ecx, edi
call fcn.00424000
mov ecx, dword [esi + 0x3c]
mov eax, dword [esi + 0x38]
test ecx, ecx
ja 0x4237f4
jb 0x4237d4
cmp eax, 0xffffffff
jae 0x4237f4
cmp dword [esi + 0x1c], 0
ja 0x4237f4
jb 0x4237e2
cmp dword [esi + 0x18], 0xffffffff
jae 0x4237f4
cmp dword [esi + 0x14], 0
ja 0x4237f4
jb 0x4237f0
cmp dword [esi + 0x10], 0xffffffff
jae 0x4237f4
xor ebp, ebp
jmp 0x4237f9
mov ebp, 4
test ecx, ecx
jne 0x423806
cmp eax, 0xffffffff
jae 0x423806
xor ebx, ebx
jmp 0x42380b
mov ebx, 8
cmp dword [esi + 0x14], 0
ja 0x42381b
cmp dword [esi + 0x10], 0xffffffff
jae 0x42381b
xor ecx, ecx
jmp 0x423820
mov ecx, 8
cmp dword [esi + 0x1c], 0
ja 0x423830
cmp dword [esi + 0x18], 0xffffffff
jae 0x423830
xor eax, eax
jmp 0x423835
mov eax, 8
lea edx, [eax + ecx]
mov ecx, edi
add edx, ebx
add edx, ebp
add edx, dword [esi + 0x28]
call fcn.00424000
xor edx, edx
mov ecx, edi
call fcn.00424000
movzx edx, word [esi + 0x2c]
mov ecx, edi
call fcn.00424000
movzx edx, word [esi + 0x2e]
mov ecx, edi
call fcn.00424000
mov edx, dword [esi + 0x34]
mov ecx, edi
call fcn.00424000
movzx edx, word [esi + 0x36]
mov ecx, edi
call fcn.00424000
cmp dword [esi + 0x3c], 0
mov edx, dword [esi + 0x38]
ja 0x42389b
cmp edx, 0xffffffff
jae 0x42389b
mov ecx, edi
call fcn.00424000
mov edx, dword [esi + 0x38]
mov eax, dword [esi + 0x3c]
shrd edx, eax, 0x10
jmp 0x4238a8
or edx, 0xffffffff
mov ecx, edi
call fcn.00424000
or edx, 0xffffffff
mov ecx, edi
call fcn.00424000
push dword [esi + 0x20]
lea edx, [esi + 0x48]
mov ecx, edi
call fcn.004240c0
add esp, 4
cmp dword [esi + 0x3c], 0
ja 0x4238eb
jb 0x4238cd
cmp dword [esi + 0x38], 0xffffffff
jae 0x4238eb
cmp dword [esi + 0x1c], 0
ja 0x4238eb
jb 0x4238db
cmp dword [esi + 0x18], 0xffffffff
jae 0x4238eb
cmp dword [esi + 0x14], 0
ja 0x4238eb
cmp dword [esi + 0x10], 0xffffffff
jb 0x423a17
mov edx, 1
mov ecx, edi
call fcn.00424000
cmp dword [esi + 0x3c], 0
ja 0x423907
cmp dword [esi + 0x38], 0xffffffff
jae 0x423907
xor ebx, ebx
jmp 0x42390c
mov ebx, 8
cmp dword [esi + 0x14], 0
ja 0x42391c
cmp dword [esi + 0x10], 0xffffffff
jae 0x42391c
xor ecx, ecx
jmp 0x423921
mov ecx, 8
cmp dword [esi + 0x1c], 0
ja 0x423931
cmp dword [esi + 0x18], 0xffffffff
jae 0x423931
xor eax, eax
jmp 0x423936
mov eax, 8
lea edx, [eax + ecx]
mov ecx, edi
add edx, ebx
call fcn.00424000
cmp dword [esi + 0x1c], 0
mov edx, dword [esi + 0x18]
ja 0x423950
cmp edx, 0xffffffff
jb 0x423989
mov ecx, edi
call fcn.00424000
mov edx, dword [esi + 0x18]
mov ecx, edi
mov eax, dword [esi + 0x1c]
shrd edx, eax, 0x10
call fcn.00424000
mov eax, dword [esi + 0x18]
mov cl, 0x20
mov edx, dword [esi + 0x1c]
call fcn.004d21e0
mov edx, eax
mov ecx, edi
call fcn.00424000
movzx edx, word [esi + 0x1e]
mov ecx, edi
call fcn.00424000
cmp dword [esi + 0x14], 0
mov edx, dword [esi + 0x10]
ja 0x423997
cmp edx, 0xffffffff
jb 0x4239d0
mov ecx, edi
call fcn.00424000
mov edx, dword [esi + 0x10]
mov ecx, edi
mov eax, dword [esi + 0x14]
shrd edx, eax, 0x10
call fcn.00424000
mov eax, dword [esi + 0x10]
mov cl, 0x20
mov edx, dword [esi + 0x14]
call fcn.004d21e0
mov edx, eax
mov ecx, edi
call fcn.00424000
movzx edx, word [esi + 0x16]
mov ecx, edi
call fcn.00424000
cmp dword [esi + 0x3c], 0
mov edx, dword [esi + 0x38]
ja 0x4239de
cmp edx, 0xffffffff
jb 0x423a17
mov ecx, edi
call fcn.00424000
mov edx, dword [esi + 0x38]
mov ecx, edi
mov eax, dword [esi + 0x3c]
shrd edx, eax, 0x10
call fcn.00424000
mov eax, dword [esi + 0x38]
mov cl, 0x20
mov edx, dword [esi + 0x3c]
call fcn.004d21e0
mov edx, eax
mov ecx, edi
call fcn.00424000
movzx edx, word [esi + 0x3e]
mov ecx, edi
call fcn.00424000
mov eax, dword [esi + 0x28]
test eax, eax
je 0x423a2c
mov edx, dword [esi + 0x44]
mov ecx, edi
push eax
call fcn.004240c0
add esp, 4
mov ecx, dword [esi + 0x3c]
mov eax, dword [esi + 0x38]
test ecx, ecx
ja 0x423a60
jb 0x423a3d
cmp eax, 0xffffffff
jae 0x423a60
cmp dword [esi + 0x1c], 0
ja 0x423a60
jb 0x423a4b
cmp dword [esi + 0x18], 0xffffffff
jae 0x423a60
cmp dword [esi + 0x14], 0
ja 0x423a60
jb 0x423a59
cmp dword [esi + 0x10], 0xffffffff
jae 0x423a60
mov ebx, 0x2e
jmp 0x423a65
mov ebx, 0x32
test ecx, ecx
jne 0x423a72
cmp eax, 0xffffffff
jae 0x423a72
xor edx, edx
jmp 0x423a77
mov edx, 8
cmp dword [esi + 0x14], 0
ja 0x423a87
cmp dword [esi + 0x10], 0xffffffff
jae 0x423a87
xor ecx, ecx
jmp 0x423a8c
mov ecx, 8
cmp dword [esi + 0x1c], 0
ja 0x423a9c
cmp dword [esi + 0x18], 0xffffffff
jae 0x423a9c
xor eax, eax
jmp 0x423aa1
mov eax, 8
add eax, ebx
mov ebx, dword [esp + 0x1c]
add eax, ecx
add eax, edx
add eax, dword [esi + 0x28]
add eax, dword [esi + 0x20]
add dword [edi + 0x10], eax
push esi
adc dword [edi + 0x14], 0
add ebx, 1
mov edi, dword [esi + 0x14c]
adc dword [esp + 0x18], 0
mov dword [esp + 0x20], ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov esi, edi
test edi, edi
mov edi, dword [esp + 0x18]
jne 0x4236e0
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0x14]
mov ebp, dword [esp + 0x20]
jmp 0x423afb
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x14], edx
mov dword [esp + 0x1c], ebx
test ecx, ecx
jne 0x423b78
cmp eax, 0xffffffff
jae 0x423b78
mov edx, 0x6054b50
mov ecx, edi
call fcn.00424000
mov edx, 0x605
mov ecx, edi
call fcn.00424000
xor edx, edx
mov ecx, edi
call fcn.00424000
xor edx, edx
mov ecx, edi
call fcn.00424000
mov edx, ebx
mov ecx, edi
call fcn.00424000
mov edx, ebx
mov ecx, edi
call fcn.00424000
mov esi, dword [edi + 0x10]
mov ecx, edi
sub esi, ebp
mov edx, esi
call fcn.00424000
shr esi, 0x10
mov ecx, edi
mov edx, esi
call fcn.00424000
add ebp, dword [edi + 0x18]
mov ecx, edi
mov ebx, dword [esp + 0x24]
mov edx, ebp
adc ebx, 0
call fcn.00424000
shrd ebp, ebx, 0x10
mov edx, ebp
jmp 0x423e21
mov ebx, dword [edi + 0x18]
mov edx, 0x6064b50
mov ebp, dword [edi + 0x1c]
add ebx, eax
adc ebp, ecx
mov ecx, edi
call fcn.00424000
mov edx, 0x606
mov ecx, edi
call fcn.00424000
mov edx, 0x2c
mov ecx, edi
call fcn.00424000
xor edx, edx
mov ecx, edi
call fcn.00424000
xor edx, edx
mov ecx, edi
call fcn.00424000
xor edx, edx
mov ecx, edi
call fcn.00424000
mov edx, 0xb2d
mov ecx, edi
call fcn.00424000
mov edx, 0x2d
mov ecx, edi
call fcn.00424000
xor edx, edx
mov ecx, edi
call fcn.00424000
xor edx, edx
mov ecx, edi
call fcn.00424000
xor edx, edx
mov ecx, edi
call fcn.00424000
xor edx, edx
mov ecx, edi
call fcn.00424000
mov edx, dword [esp + 0x1c]
mov ecx, edi
call fcn.00424000
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
shrd edi, eax, 0x10
mov edx, edi
call fcn.00424000
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
call fcn.00424000
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
shr esi, 0x10
mov edx, esi
call fcn.00424000
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
call fcn.00424000
mov edx, edi
mov edi, dword [esp + 0x18]
mov ecx, edi
call fcn.00424000
mov edx, dword [esp + 0x14]
mov ecx, edi
call fcn.00424000
mov edx, esi
mov ecx, edi
call fcn.00424000
mov esi, dword [edi + 0x10]
mov ecx, edi
sub esi, dword [esp + 0x20]
mov eax, dword [edi + 0x14]
mov edx, esi
sbb eax, dword [esp + 0x24]
mov dword [esp + 0x2c], esi
mov dword [esp + 0x28], eax
call fcn.00424000
mov ecx, esi
mov esi, dword [esp + 0x28]
mov eax, esi
shrd ecx, eax, 0x10
mov dword [esp + 0x30], ecx
mov edx, ecx
mov ecx, edi
call fcn.00424000
mov edx, esi
mov ecx, edi
call fcn.00424000
mov edx, esi
mov ecx, edi
shr edx, 0x10
call fcn.00424000
mov esi, dword [edi + 0x18]
mov ecx, edi
add esi, dword [esp + 0x20]
mov eax, dword [edi + 0x1c]
mov edx, esi
adc eax, dword [esp + 0x24]
mov dword [esp + 0x18], eax
call fcn.00424000
mov eax, dword [esp + 0x18]
mov ecx, esi
shrd ecx, eax, 0x10
mov dword [esp + 0x24], ecx
mov edx, ecx
mov ecx, edi
call fcn.00424000
mov edx, dword [esp + 0x18]
mov ecx, edi
call fcn.00424000
mov edx, dword [esp + 0x18]
mov ecx, edi
shr edx, 0x10
call fcn.00424000
add dword [edi + 0x10], 0x38
mov edx, 0x7064b50
mov ecx, edi
adc dword [edi + 0x14], 0
call fcn.00424000
mov edx, 0x706
mov ecx, edi
call fcn.00424000
xor edx, edx
mov ecx, edi
call fcn.00424000
xor edx, edx
mov ecx, edi
call fcn.00424000
mov edx, ebx
mov ecx, edi
call fcn.00424000
mov eax, ebp
mov ecx, edi
shrd ebx, eax, 0x10
mov edx, ebx
call fcn.00424000
mov edx, ebp
mov ecx, edi
call fcn.00424000
shr ebp, 0x10
mov ecx, edi
mov edx, ebp
call fcn.00424000
mov edx, 1
mov ecx, edi
call fcn.00424000
xor edx, edx
mov ecx, edi
call fcn.00424000
add dword [edi + 0x10], 0x14
mov edx, 0x6054b50
mov ecx, edi
adc dword [edi + 0x14], 0
call fcn.00424000
mov edx, 0x605
mov ecx, edi
call fcn.00424000
xor edx, edx
mov ecx, edi
call fcn.00424000
xor edx, edx
mov ecx, edi
call fcn.00424000
cmp dword [esp + 0x14], 0
ja 0x423dbd
mov ebx, dword [esp + 0x1c]
cmp ebx, 0xff
jb 0x423dc0
or ebx, 0xffffffff
mov edx, ebx
mov ecx, edi
call fcn.00424000
mov edx, ebx
mov ecx, edi
call fcn.00424000
cmp dword [esp + 0x28], 0
ja 0x423de8
mov edx, dword [esp + 0x2c]
cmp edx, 0xffffffff
jae 0x423de8
mov ebx, dword [esp + 0x30]
jmp 0x423dee
or ebx, 0xffffffff
or edx, 0xffffffff
mov ecx, edi
call fcn.00424000
mov edx, ebx
mov ecx, edi
call fcn.00424000
cmp dword [esp + 0x18], 0
ja 0x423e10
cmp esi, 0xffffffff
jae 0x423e10
mov ebx, dword [esp + 0x24]
jmp 0x423e16
or ebx, 0xffffffff
or esi, 0xffffffff
mov edx, esi
mov ecx, edi
call fcn.00424000
mov edx, ebx
mov ecx, edi
call fcn.00424000
xor edx, edx
mov ecx, edi
call fcn.00424000
add dword [edi + 0x10], 0x16
adc dword [edi + 0x14], 0
or dword [edi], 8
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret