Function at 0x5551c0
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 8
push ebp
mov ebp, dword [esp + 0x18]
push edi
mov edi, dword [esp + 0x20]
test edi, edi
jne 0x5551e5
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [eax], edi
mov dword [ecx], edi
pop edi
pop ebp
add esp, 8
ret 0x10
mov edx, dword [esp + 0x18]
push ebx
push esi
push 0x400
lea edi, [edi + edi*2 + 1]
mov dword [esp + 0x28], 0
mov dword [edx], 0x400
call dword [sym.imp.MSVCR71.dll_malloc]
mov ebx, eax
lea eax, [edi + 0x400]
push eax
push 0
mov dword [esp + 0x1c], ebp
call dword [sym.imp.MSVCR71.dll_realloc]
mov esi, eax
add esp, 0xc
test esi, esi
je 0x55526f
lea ecx, [esp + 0x14]
push ecx
mov ecx, dword [esp + 0x2c]
mov eax, ebp
mov edx, esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x18], edi
call fcn.005598f0
add eax, 5
add esp, 4
cmp eax, 5
ja case.0x55524b.2
jmp dword [eax*4 + 0x555500]
mov edi, dword [esp + 0x14]
add edi, edi
lea edx, [edi + 0x400]
push edx
push esi
call dword [sym.imp.MSVCR71.dll_realloc]
mov esi, eax
add esp, 8
test esi, esi
jne 0x555226
mov eax, dword [esp + 0x24]
push eax
call dword [sym.imp.MSVCR71.dll_free]
add esp, 4
jmp 0x5554c3
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x10], esi
mov dword [esp + 0x28], ecx
mov edx, dword [esp + 0x10]
test edx, edx
je 0x5554a3
test ebx, ebx
je 0x5554a3
cmp dword [esp + 0x28], 0x18
jb 0x5554a3
cmp byte [edx], 0xff
jne 0x5554a3
cmp byte [edx + 1], 0xff
jne 0x5554a3
cmp byte [edx + 2], 0xff
jne 0x5554a3
cmp byte [edx + 3], 0xff
jne 0x5554a3
mov ecx, ebx
mov esi, edx
jmp 0x555301
push esi
call dword [sym.imp.MSVCR71.dll_free]
add esp, 4
mov dword [esp + 0x24], 0
jmp case.0x55524b.2
push esi
call dword [sym.imp.MSVCR71.dll_free]
add esp, 4
jmp 0x5554bb
mov edx, dword [esp + 0x10]
mov al, byte [esi]
cmp al, 0xff
jne 0x5553bf
cmp byte [esi + 1], al
jne 0x5553bf
cmp byte [esi + 2], al
jne 0x5553bf
cmp byte [esi + 3], al
jne 0x5553bf
movzx edi, byte [esi + 7]
movzx eax, byte [esi + 6]
shl edi, 8
add edi, eax
movzx eax, byte [esi + 5]
shl edi, 8
add edi, eax
movzx eax, byte [esi + 4]
shl edi, 8
add edi, eax
mov eax, edi
sub eax, edx
mov edx, dword [esp + 0x28]
add esi, 8
add eax, esi
cmp eax, edx
ja 0x5554c3
mov ebp, dword [esp + 0x20]
mov eax, dword [ebp]
mov edx, edi
sub edx, ebx
add edx, ecx
cmp edx, eax
jbe 0x5553a9
sub ecx, ebx
mov dword [esp + 0x14], ecx
lea ecx, [edi + eax*2 + 0x400]
lea eax, [eax + edi + 0x400]
cmp ecx, eax
ja 0x555388
mov dword [ebp], eax
jmp 0x55538b
mov dword [ebp], ecx
mov eax, dword [ebp]
push eax
push ebx
call dword [sym.imp.MSVCR71.dll_realloc]
add esp, 8
test eax, eax
je 0x5554c7
mov ecx, dword [esp + 0x14]
mov ebx, eax
add ecx, eax
test edi, edi
jbe 0x555470
mov dl, byte [esi]
mov byte [ecx], dl
inc ecx
inc esi
dec edi
jne 0x5553b1
jmp 0x555470
movzx ebp, byte [esi + 3]
movzx edx, byte [esi + 2]
movzx edi, byte [esi + 7]
shl ebp, 8
add ebp, edx
movzx edx, byte [esi + 1]
shl ebp, 8
add ebp, edx
movzx edx, byte [esi + 6]
movzx eax, al
shl edi, 8
add edi, edx
movzx edx, byte [esi + 4]
shl ebp, 8
add ebp, eax
movzx eax, byte [esi + 5]
shl edi, 8
add edi, eax
shl edi, 8
add edi, edx
mov edx, dword [esp + 0x20]
lea eax, [ebx + ebp]
mov dword [esp + 0x14], eax
mov eax, dword [edx]
mov edx, edi
sub edx, ebx
add edx, ecx
add esi, 8
cmp edx, eax
jbe 0x55545e
sub ecx, ebx
mov dword [esp + 0x14], ecx
lea ecx, [edi + eax*2 + 0x400]
lea eax, [eax + edi + 0x400]
cmp ecx, eax
ja 0x555436
mov ecx, dword [esp + 0x20]
mov dword [ecx], eax
jmp 0x55543c
mov edx, dword [esp + 0x20]
mov dword [edx], ecx
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
push ecx
push ebx
call dword [sym.imp.MSVCR71.dll_realloc]
add esp, 8
test eax, eax
je 0x5554c3
mov edx, dword [esp + 0x14]
mov ebx, eax
lea ecx, [eax + edx]
add ebp, eax
jmp 0x555462
mov ebp, dword [esp + 0x14]
test edi, edi
jbe 0x555470
mov al, byte [ebp]
mov byte [ecx], al
inc ecx
inc ebp
dec edi
jne 0x555466
mov ebp, dword [esp + 0x10]
mov eax, dword [esp + 0x28]
mov edx, esi
sub edx, ebp
add eax, 0xfffffff8
cmp edx, eax
jbe 0x5552fd
mov eax, dword [esp + 0x28]
mov edx, ebp
sub esi, edx
cmp esi, eax
jne 0x5554c3
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
sub ecx, ebx
mov dword [eax], ebx
mov dword [edx], ecx
jmp 0x5554e2
mov eax, dword [esp + 0x24]
test eax, eax
je 0x5554c3
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov dword [ecx], eax
mov eax, dword [esp + 0x14]
mov dword [edx], eax
mov dword [esp + 0x24], 0
mov ebp, dword [esp + 0x20]
push ebx
call dword [sym.imp.MSVCR71.dll_free]
mov ecx, dword [esp + 0x20]
mov dword [ecx], 0
add esp, 4
mov dword [ebp], 0
mov eax, dword [esp + 0x24]
test eax, eax
pop esi
pop ebx
je 0x5554f6
push eax
call dword [sym.imp.MSVCR71.dll_free]
add esp, 4
pop edi
pop ebp
add esp, 8
ret 0x10