Function at 0x42db60
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 2
add esp, 0xfffff004
push eax
dec eax
jne 0x42db69
mov eax, dword [ebp - 4]
add esp, 0xffffff44
push ebx
push esi
push edi
mov esi, 0x4706e4
lea edi, [ebp - 0x1a80]
mov eax, 0x4611bc
call fcn.00455438
xor edx, edx
xor ecx, ecx
mov dword [ebp - 0x1a64], edx
mov dword [ebp - 0x1a68], ecx
mov word [ebp - 0x1a50], 8
lea eax, [ebp - 0xd1c]
mov byte [0x473b14], 0
push eax
call fcn.0042743c
lea edx, [ebp - 0x1a38]
push edx
call fcn.0042743c
push 0x4732b8
lea ecx, [ebp - 0xd1c]
push ecx
call fcn.00426b88
lea eax, [ebp - 0x1a6c]
mov edx, dword [0x460c74]
push eax
push 0
push edx
lea ecx, [ebp - 0x1a38]
push ecx
call fcn.00427024
test al, al
jne 0x42dc6a
cmp dword [ebp - 0x1a6c], 0
jne 0x42dc29
mov eax, dword [0x460c74]
push eax
push 0x1f6
call fcn.00408028
push eax
push 0x4732b8
call fcn.00408c78
add esp, 0xc
call fcn.00408e44
mov edx, dword fs:[4]
dec dword [edx - 4]
push 0
lea ecx, [ebp - 0x1a38]
push ecx
call fcn.00426a30
mov eax, dword fs:[4]
dec dword [eax - 4]
push 0
lea edx, [ebp - 0xd1c]
push edx
call fcn.00426a30
mov ecx, dword [ebp - 0x1a60]
mov dword fs:[0], ecx
jmp 0x42e792
mov eax, dword [0x460c74]
push eax
push 0x267
call fcn.00408028
push eax
lea edx, [ebp - 0x1cc0]
push edx
call fcn.00456f9c
add esp, 0xc
lea ecx, [ebp - 0x1cc0]
push ecx
call fcn.00413e78
lea eax, [ebp - 0x1a38]
push eax
lea edx, [ebp - 0xd1c]
push edx
call fcn.0042e868
mov ebx, eax
cmp ebx, 2
jne 0x42dcfd
lea eax, [ebp - 0x1a38]
push eax
call fcn.00426cbc
mov edx, dword fs:[4]
dec dword [edx - 4]
push 0
lea ecx, [ebp - 0x1a38]
push ecx
call fcn.00426a30
mov eax, dword fs:[4]
dec dword [eax - 4]
push 0
lea edx, [ebp - 0xd1c]
push edx
call fcn.00426a30
mov ecx, dword [ebp - 0x1a60]
mov dword fs:[0], ecx
jmp 0x42e792
cmp ebx, 1
jne 0x42dd78
lea eax, [ebp - 0x1a38]
push eax
call fcn.00426cbc
push 0x24
push 0x262
call fcn.00408028
push eax
push 0x275
call fcn.00408028
push eax
mov edx, dword [0x4656e4]
push edx
call sub.USER32.dll_MessageBoxA
cmp eax, 6
je 0x42dd78
mov ecx, dword fs:[4]
dec dword [ecx - 4]
push 0
lea eax, [ebp - 0x1a38]
push eax
call fcn.00426a30
mov edx, dword fs:[4]
dec dword [edx - 4]
push 0
lea ecx, [ebp - 0xd1c]
push ecx
call fcn.00426a30
mov eax, dword [ebp - 0x1a60]
mov dword fs:[0], eax
jmp 0x42e792
test ebx, ebx
jne 0x42dd88
lea edx, [ebp - 0x1a38]
push edx
call fcn.00426d34
push 0
add esp, 0xfffffff8
push 0
lea ecx, [esp + 4]
push ecx
call fcn.004262cc
lea eax, [ebp - 0xd1c]
push eax
call fcn.00426df8
lea edx, [ebp - 0x1a6c]
mov ecx, dword [0x460c78]
push edx
push 0
push ecx
lea eax, [ebp - 0x1a38]
push eax
call fcn.00427024
test al, al
jne 0x42de33
cmp dword [ebp - 0x1a6c], 0
jne 0x42ddf2
mov edx, dword [0x460c78]
push edx
push 0x1f6
call fcn.00408028
push eax
push 0x4732b8
call fcn.00408c78
add esp, 0xc
call fcn.00408e44
mov ecx, dword fs:[4]
dec dword [ecx - 4]
push 0
lea eax, [ebp - 0x1a38]
push eax
call fcn.00426a30
mov edx, dword fs:[4]
dec dword [edx - 4]
push 0
lea ecx, [ebp - 0xd1c]
push ecx
call fcn.00426a30
mov eax, dword [ebp - 0x1a60]
mov dword fs:[0], eax
jmp 0x42e792
lea edx, [ebp - 0xd1c]
push edx
lea ecx, [ebp - 0x1a74]
push ecx
call fcn.004272e8
mov eax, dword [0x460c78]
push eax
push 0x267
call fcn.00408028
push eax
lea edx, [ebp - 0x1cc0]
push edx
call fcn.00456f9c
add esp, 0xc
lea ecx, [ebp - 0x1cc0]
push ecx
call fcn.00413e78
mov byte [ebp - 0x1a75], 0
push 0
lea eax, [ebp - 0xd1c]
push eax
call fcn.0042758c
test al, al
je 0x42def1
mov byte [ebp - 0x1a75], 1
cmp byte [ebp - 0x10], 0
je 0x42def1
push 0x272
call fcn.00408028
push eax
push 0x4732b8
call fcn.00408c78
add esp, 8
mov edx, dword fs:[4]
dec dword [edx - 4]
push 0
lea ecx, [ebp - 0x1a38]
push ecx
call fcn.00426a30
mov eax, dword fs:[4]
dec dword [eax - 4]
push 0
lea edx, [ebp - 0xd1c]
push edx
call fcn.00426a30
mov ecx, dword [ebp - 0x1a60]
mov dword fs:[0], ecx
jmp 0x42e792
xor eax, eax
mov dword [ebp - 0x15f0], eax
mov word [ebp - 0x15f4], ax
and word [ebp - 0x15f8], 0xff9f
push 0x72
lea edx, [ebp - 0x1a38]
push edx
call fcn.004287d8
push 0x73
lea ecx, [ebp - 0x1a38]
push ecx
call fcn.004287d8
add esp, 0xfffffff8
movzx eax, word [ebp - 0x15f6]
add eax, 0xfffffff3
push eax
lea edx, [esp + 4]
push edx
call fcn.004262cc
lea ecx, [ebp - 0x1a38]
push ecx
lea eax, [ebp - 0xd1c]
push eax
call fcn.0043fcfc
push 0
add esp, 0xfffffff8
push 0
lea edx, [esp + 4]
push edx
call fcn.004262cc
lea ecx, [ebp - 0xd1c]
push ecx
call fcn.00426df8
push 0x7918
lea eax, [ebp - 0x1a40]
push eax
call fcn.004407a4
push 0
push edi
call fcn.004262cc
push 0
lea edx, [ebp - 0x1a88]
push edx
call fcn.004262cc
lea ecx, [ebp - 0x1a40]
push ecx
call fcn.0043ffb9
push eax
push 0
lea eax, [ebp - 0x1a40]
push eax
call fcn.0043ffaa
push eax
lea edx, [ebp - 0xd1c]
push edx
call fcn.00426db0
add esp, 0xfffffff8
lea ecx, [ebp - 0x1a40]
push ecx
call fcn.0043ffb9
add eax, 0xfffffc18
push eax
lea eax, [esp + 4]
push eax
call fcn.004262cc
lea edx, [ebp - 0x1a88]
push edx
lea ecx, [ebp - 0x1a90]
push ecx
call fcn.004266ec
add esp, 0xfffffff8
lea eax, [ebp - 0x1a40]
push eax
call fcn.0043ffb9
add eax, 0xfffffc18
push eax
lea edx, [esp + 4]
push edx
call fcn.004262cc
add esp, 0xfffffff8
mov ecx, dword [edi]
mov dword [esp], ecx
mov eax, dword [edi + 4]
mov dword [esp + 4], eax
lea edx, [ebp - 0x1a98]
push edx
call fcn.00426604
lea ecx, [ebp - 0x1a98]
push ecx
call fcn.0041844c
mov ebx, eax
push 0
lea eax, [ebp - 0x1a40]
push eax
call fcn.0043ffaa
add ebx, eax
xor eax, eax
xor ecx, ecx
mov dl, byte [ebx + 2]
mov byte [esi + 2], dl
mov al, byte [ebx + 0x1b]
mov cl, byte [ebx + 0x1a]
shl eax, 8
add cx, ax
mov word [esi + 0x1e], cx
cmp byte [esi + 2], 0x74
jne 0x42e567
cmp word [esi + 0x1e], 0
jbe 0x42e567
cmp word [esi + 0x1e], 0x400
jae 0x42e567
xor ecx, ecx
xor edx, edx
mov cl, byte [ebx + 1]
mov dl, byte [ebx]
shl ecx, 8
xor eax, eax
add dx, cx
xor ecx, ecx
mov word [esi], dx
xor edx, edx
mov dl, byte [ebx + 4]
mov al, byte [ebx + 3]
shl edx, 8
add ax, dx
xor edx, edx
mov word [esi + 4], ax
xor eax, eax
mov al, byte [ebx + 6]
mov cl, byte [ebx + 5]
shl eax, 8
add cx, ax
mov word [esi + 6], cx
xor ecx, ecx
mov cl, byte [ebx + 8]
mov dl, byte [ebx + 7]
movzx eax, cx
shl eax, 8
xor ecx, ecx
add edx, eax
mov cl, byte [ebx + 9]
xor eax, eax
mov al, byte [ebx + 0xa]
shl ecx, 0x10
shl eax, 0x18
add edx, ecx
add edx, eax
xor ecx, ecx
mov dword [esi + 8], edx
xor edx, edx
mov cl, byte [ebx + 0xc]
mov dl, byte [ebx + 0xb]
movzx eax, cx
shl eax, 8
xor ecx, ecx
add edx, eax
mov cl, byte [ebx + 0xd]
xor eax, eax
mov al, byte [ebx + 0xe]
shl ecx, 0x10
shl eax, 0x18
add edx, ecx
add edx, eax
xor eax, eax
mov dword [esi + 0xc], edx
xor ecx, ecx
mov dl, byte [ebx + 0xf]
mov byte [esi + 0x10], dl
mov al, byte [ebx + 0x11]
mov cl, byte [ebx + 0x10]
movzx edx, ax
shl edx, 8
xor eax, eax
add ecx, edx
mov al, byte [ebx + 0x12]
xor edx, edx
mov dl, byte [ebx + 0x13]
shl eax, 0x10
shl edx, 0x18
add ecx, eax
add ecx, edx
xor eax, eax
mov dword [esi + 0x14], ecx
xor ecx, ecx
mov al, byte [ebx + 0x15]
mov cl, byte [ebx + 0x14]
movzx edx, ax
shl edx, 8
xor eax, eax
add ecx, edx
mov al, byte [ebx + 0x16]
xor edx, edx
mov dl, byte [ebx + 0x17]
shl eax, 0x10
shl edx, 0x18
add ecx, eax
add ecx, edx
xor edx, edx
mov dword [esi + 0x18], ecx
mov cl, byte [ebx + 0x18]
mov byte [esi + 0x1c], cl
xor ecx, ecx
mov al, byte [ebx + 0x19]
mov byte [esi + 0x1d], al
mov cl, byte [ebx + 0x1d]
mov dl, byte [ebx + 0x1c]
movzx eax, cx
shl eax, 8
xor ecx, ecx
add edx, eax
mov cl, byte [ebx + 0x1e]
xor eax, eax
mov al, byte [ebx + 0x1f]
shl ecx, 0x10
shl eax, 0x18
add edx, ecx
add edx, eax
mov dword [esi + 0x20], edx
test byte [esi + 5], 1
je 0x42e1f4
xor ecx, ecx
xor edx, edx
mov cl, byte [ebx + 0x21]
mov dl, byte [ebx + 0x20]
movzx eax, cx
shl eax, 8
xor ecx, ecx
add edx, eax
mov cl, byte [ebx + 0x22]
xor eax, eax
mov al, byte [ebx + 0x23]
shl ecx, 0x10
shl eax, 0x18
add edx, ecx
add edx, eax
xor ecx, ecx
mov dword [esi + 0x24], edx
xor edx, edx
mov cl, byte [ebx + 0x25]
mov dl, byte [ebx + 0x24]
movzx eax, cx
shl eax, 8
xor ecx, ecx
add edx, eax
mov cl, byte [ebx + 0x26]
xor eax, eax
mov al, byte [ebx + 0x27]
shl ecx, 0x10
shl eax, 0x18
add edx, ecx
add edx, eax
mov dword [esi + 0x28], edx
jmp 0x42e1fc
xor edx, edx
mov dword [esi + 0x28], edx
mov dword [esi + 0x24], edx
add esp, 0xfffffff8
mov eax, dword [esi + 8]
push eax
mov ecx, dword [esi + 0x24]
push ecx
lea eax, [esp + 8]
push eax
call fcn.004262e0
lea edx, [esi + 0x2c]
push edx
lea ecx, [ebp - 0x1aa0]
push ecx
call fcn.004262f8
add esp, 0xfffffff8
mov eax, dword [esi + 0xc]
push eax
mov edx, dword [esi + 0x28]
push edx
lea ecx, [esp + 8]
push ecx
call fcn.004262e0
lea eax, [esi + 0x34]
push eax
lea edx, [ebp - 0x1aa8]
push edx
call fcn.004262f8
movzx ecx, word [esi + 0x1e]
push ecx
call fcn.0043ca8c
add eax, ebx
push eax
push 0x470b20
call fcn.00452dbc
add esp, 0xc
add esp, 0xfffffff8
add esp, 0xfffffff8
movzx eax, word [esi + 0x1e]
push eax
lea edx, [esp + 4]
push edx
call fcn.004262cc
add esp, 0xfffffff8
add esp, 0xfffffff8
call fcn.0043ca8c
push eax
lea ecx, [esp + 4]
push ecx
call fcn.004262cc
add esp, 0xfffffff8
add esp, 0xfffffff8
mov eax, dword [edi]
mov dword [esp], eax
mov edx, dword [edi + 4]
mov dword [esp + 4], edx
add esp, 0xfffffff8
mov ecx, dword [ebp - 0x1a74]
mov dword [esp], ecx
mov eax, dword [ebp - 0x1a70]
mov dword [esp + 4], eax
lea edx, [esp + 0x10]
push edx
call fcn.004266c0
lea ecx, [esp + 0x10]
push ecx
call fcn.004266c0
lea eax, [esp + 0x10]
push eax
call fcn.004266c0
add esp, 0xfffffff8
mov edx, dword [esi + 8]
push edx
lea ecx, [esp + 4]
push ecx
call fcn.004262cc
call fcn.004267cc
test al, al
je 0x42e392
add esp, 0xfffffff8
movzx eax, word [esi + 0x1e]
push eax
lea edx, [esp + 4]
push edx
call fcn.004262cc
add esp, 0xfffffff8
add esp, 0xfffffff8
call fcn.0043ca8c
push eax
lea ecx, [esp + 4]
push ecx
call fcn.004262cc
add esp, 0xfffffff8
add esp, 0xfffffff8
mov eax, dword [edi]
mov dword [esp], eax
mov edx, dword [edi + 4]
mov dword [esp + 4], edx
add esp, 0xfffffff8
mov ecx, dword [ebp - 0x1a74]
mov dword [esp], ecx
mov eax, dword [ebp - 0x1a70]
mov dword [esp + 4], eax
lea edx, [esp + 0x10]
push edx
call fcn.004266c0
lea ecx, [esp + 0x10]
push ecx
call fcn.004266c0
lea eax, [ebp - 0x1ab0]
push eax
call fcn.004266c0
lea edx, [ebp - 0x1ab0]
push edx
call fcn.0041844c
mov dword [esi + 8], eax
push 0x20
lea ecx, [ebp - 0x1ab0]
push ecx
lea eax, [ebp - 0x1ab8]
push eax
call fcn.00426368
lea edx, [ebp - 0x1ab8]
push edx
call fcn.0041844c
mov dword [esi + 0x24], eax
call fcn.0043ca8c
movzx ecx, word [esi + 0x1e]
add eax, ecx
add eax, 0xfffffffe
add ebx, 2
push eax
push ebx
push 0xffffffffffffffff
call fcn.00433fa0
mov dword [0x473ac0], eax
call fcn.0042e79c
test al, al
je 0x42e567
test byte [esi + 4], 8
mov bl, 1
je 0x42e454
push 0
add esp, 0xfffffff8
add esp, 0xfffffff8
call fcn.0043ca8c
push eax
lea eax, [esp + 4]
push eax
call fcn.004262cc
add esp, 0xfffffff8
add esp, 0xfffffff8
movzx edx, word [esi + 0x1e]
push edx
lea ecx, [esp + 4]
push ecx
call fcn.004262cc
add esp, 0xfffffff8
mov eax, dword [edi]
mov dword [esp], eax
mov edx, dword [edi + 4]
mov dword [esp + 4], edx
lea ecx, [esp + 0x10]
push ecx
call fcn.00426694
lea eax, [esp + 0x10]
push eax
call fcn.00426694
lea edx, [ebp - 0xd1c]
push edx
call fcn.00426df8
push 0x75
lea ecx, [ebp - 0xd1c]
push ecx
call fcn.00428ca4
call fcn.0043ca8c
movzx edx, word [esi + 0x1e]
add eax, edx
movzx ecx, word [ebp - 0x8ae]
add eax, ecx
movzx edx, word [esi + 6]
cmp eax, edx
je 0x42e490
xor ebx, ebx
jmp 0x42e490
push 0
add esp, 0xfffffff8
add esp, 0xfffffff8
movzx eax, word [esi + 6]
push eax
lea edx, [esp + 4]
push edx
call fcn.004262cc
add esp, 0xfffffff8
mov ecx, dword [edi]
mov dword [esp], ecx
mov eax, dword [edi + 4]
mov dword [esp + 4], eax
lea edx, [esp + 0x10]
push edx
call fcn.00426694
lea ecx, [ebp - 0xd1c]
push ecx
call fcn.00426df8
movzx eax, word [esi + 0x1e]
mov byte [eax + 0x470b20], 0
call fcn.00426030
test bl, bl
je 0x42e567
lea edx, [ebp - 0x20c0]
push edx
push 0x470b20
call fcn.00425fd4
movzx ecx, word [esi + 4]
or dword [ebp - 0x1a68], ecx
lea eax, [ebp - 0x20c0]
push eax
push 0x268
call fcn.00408028
push eax
lea edx, [ebp - 0x1cc0]
push edx
call fcn.00456f9c
add esp, 0xc
lea ecx, [ebp - 0x1cc0]
push ecx
call fcn.00413e78
inc dword [ebp - 0x1a64]
push 0x74
lea eax, [ebp - 0x1a38]
push eax
call fcn.004287d8
test byte [esi + 4], 8
je 0x42e543
push 0x75
lea edx, [ebp - 0x1a38]
push edx
call fcn.004287d8
add esp, 0xfffffff8
movzx ecx, word [ebp - 0x8ae]
add ecx, 0xfffffff3
push ecx
lea eax, [esp + 4]
push eax
call fcn.004262cc
lea edx, [ebp - 0x1a38]
push edx
lea ecx, [ebp - 0xd1c]
push ecx
call fcn.0043fcfc
add esp, 0xfffffff8
mov eax, dword [esi + 8]
push eax
lea edx, [esp + 4]
push edx
call fcn.004262cc
lea ecx, [ebp - 0x1a38]
push ecx
lea eax, [ebp - 0xd1c]
push eax
call fcn.0043fcfc
push edi
call fcn.0043fef1
add esp, 0xfffffff8
add esp, 0xfffffff8
call fcn.0043ca8c
push eax
lea edx, [esp + 4]
push edx
call fcn.004262cc
add esp, 0xfffffff8
mov ecx, dword [ebp - 0x1a74]
mov dword [esp], ecx
mov eax, dword [ebp - 0x1a70]
mov dword [esp + 4], eax
lea edx, [esp + 0x10]
push edx
call fcn.004266c0
add esp, 0xfffffff8
mov ecx, dword [edi]
mov dword [esp], ecx
mov eax, dword [edi + 4]
mov dword [esp + 4], eax
call fcn.0042683c
test al, al
jne 0x42e68c
add esp, 0xfffffff8
push 0
lea edx, [esp + 4]
push edx
call fcn.004262cc
add esp, 0xfffffff8
add esp, 0xfffffff8
lea ecx, [ebp - 0x1a40]
push ecx
call fcn.0043ffb9
add eax, 0xfffffc18
push eax
lea eax, [esp + 4]
push eax
call fcn.004262cc
add esp, 0xfffffff8
mov edx, dword [edi]
mov dword [esp], edx
mov ecx, dword [edi + 4]
mov dword [esp + 4], ecx
lea eax, [esp + 0x10]
push eax
call fcn.00426604
call fcn.004267ac
test al, al
je 0x42dfee
push 0
add esp, 0xfffffff8
mov edx, dword [ebp - 0x1a88]
mov dword [esp], edx
mov ecx, dword [ebp - 0x1a84]
mov dword [esp + 4], ecx
lea eax, [ebp - 0xd1c]
push eax
call fcn.00426df8
lea edx, [ebp - 0x1a40]
push edx
call fcn.0043ffb9
push eax
push 0
lea ecx, [ebp - 0x1a40]
push ecx
call fcn.0043ffaa
push eax
lea eax, [ebp - 0xd1c]
push eax
call fcn.00426db0
add esp, 0xfffffff8
push 0x7530
lea edx, [esp + 4]
push edx
call fcn.004262cc
lea ecx, [ebp - 0x1a88]
push ecx
lea eax, [ebp - 0x1ac0]
push eax
call fcn.004266ec
jmp 0x42dfee
test byte [ebp - 0x1a68], 3
je 0x42e69d
or word [ebp - 0x15f8], 1
cmp dword [ebp - 0x1a64], 0
jle 0x42e6e0
cmp byte [ebp - 0x1a75], 0
jne 0x42e6e0
push 0x24
push 0x262
call fcn.00408028
push eax
push 0x273
call fcn.00408028
push eax
mov edx, dword [0x4656e4]
push edx
call sub.USER32.dll_MessageBoxA
cmp eax, 6
jne 0x42e6e0
or word [ebp - 0x15f8], 8
cmp dword [ebp - 0x1a64], 0
jne 0x42e703
push 0x274
call fcn.00408028
push eax
push 0x4732b8
call fcn.00408c78
add esp, 8
jmp 0x42e748
push 0
add esp, 0xfffffff8
push 0
lea ecx, [esp + 4]
push ecx
call fcn.004262cc
lea eax, [ebp - 0x1a38]
push eax
call fcn.00426df8
push 0x72
lea edx, [ebp - 0x1a38]
push edx
call fcn.004287d8
push 0x73
lea ecx, [ebp - 0x1a38]
push ecx
call fcn.004287d8
lea eax, [ebp - 0x1a38]
push eax
call fcn.00426cbc
push 2
lea edx, [ebp - 0x1a40]
push edx
call fcn.004407cc
mov ecx, dword fs:[4]
dec dword [ecx - 4]
push 0
lea eax, [ebp - 0x1a38]
push eax
call fcn.00426a30
mov edx, dword fs:[4]
dec dword [edx - 4]
push 0
lea ecx, [ebp - 0xd1c]
push ecx
call fcn.00426a30
mov eax, dword [ebp - 0x1a60]
mov dword fs:[0], eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4