Function at 0x44dc54
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
cld
mov ebp, esp
push edi
xor eax, eax
push esi
lea edi, [ebp - 0x38]
push ebx
mov ecx, 4
sub esp, 0x4c
rep stosd dword es:[edi], eax
mov word [edi], 0
mov edx, dword [ebp + 8]
mov esi, str.RTMP_ReadPacket
mov ebx, str._s:_fd_d
mov eax, dword [edx + 0xc03d0]
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp + 0xc], eax
mov dword [esp], 5
call fcn.00452044
mov dword [esp], 1
mov eax, dword [ebp + 8]
lea edx, [ebp - 0x38]
call fcn.0044ce14
test eax, eax
je 0x44dd84
movzx edx, byte [ebp - 0x38]
lea ebx, [ebp - 0x37]
mov ecx, dword [ebp + 0xc]
mov edi, edx
mov eax, edx
and edi, 0x3f
mov dword [ecx + 4], edi
shr eax, 6
test edi, edi
mov byte [ecx], al
je 0x44dd45
dec edi
je 0x44dfce
mov edx, dword [ebp + 0xc]
movzx eax, byte [edx]
mov edi, dword [eax*4 + 0x5af7c0]
cmp edi, 0xc
je 0x44de14
cmp edi, 0xb
jle 0x44dda4
dec edi
test edi, edi
jle 0x44de24
mov dword [esp], edi
mov eax, dword [ebp + 8]
mov edx, ebx
call fcn.0044ce14
cmp eax, edi
je 0x44de24
movzx eax, byte [ebp - 0x38]
mov edi, str.RTMP_ReadPacket
mov esi, str._s__failed_to_read_RTMP_packet_header._type:__x
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov dword [esp + 0xc], eax
mov dword [esp], 1
call fcn.00452044
xor eax, eax
add esp, 0x4c
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp], 1
mov eax, dword [ebp + 8]
mov edx, ebx
call fcn.0044ce14
dec eax
je 0x44ddec
mov eax, str.RTMP_ReadPacket
mov dword [esp + 8], eax
mov eax, str._s__failed_to_read_RTMP_packet_header_2nd_byte
mov dword [esp + 4], eax
mov dword [esp], 1
call fcn.00452044
jmp 0x44dd3b
mov ecx, str.RTMP_ReadPacket
mov edx, str._s__failed_to_read_RTMP_packet_header
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], 1
call fcn.00452044
jmp 0x44dd3b
mov ecx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov eax, dword [ecx + 4]
mov edx, dword [esi + eax*4 + 0x44]
test edx, edx
je 0x44dcf7
mov eax, dword [edx]
mov dword [ecx], eax
mov eax, dword [edx + 4]
mov dword [ecx + 4], eax
mov eax, dword [edx + 8]
mov dword [ecx + 8], eax
mov eax, dword [edx + 0xc]
mov dword [ecx + 0xc], eax
mov eax, dword [edx + 0x10]
mov dword [ecx + 0x10], eax
mov eax, dword [edx + 0x14]
mov dword [ecx + 0x14], eax
mov eax, dword [edx + 0x18]
mov dword [ecx + 0x18], eax
mov eax, dword [edx + 0x1c]
mov dword [ecx + 0x1c], eax
jmp 0x44dcf7
movzx edi, byte [ebp - 0x37]
lea ebx, [ebp - 0x36]
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp + 0xc]
add edi, 0x40
movzx eax, byte [edx]
mov dword [esi + 4], edi
mov edi, dword [eax*4 + 0x5af7c0]
cmp edi, 0xc
jne 0x44dcee
nop
mov byte [edx + 2], 1
dec edi
test edi, edi
jg 0x44dd00
lea esi, [esi]
mov eax, ebx
lea edx, [ebp - 0x38]
sub eax, edx
add eax, edi
cmp edi, 2
mov dword [ebp - 0x3c], eax
jle 0x44de57
mov dword [esp], ebx
call fcn.004506a4
mov ecx, dword [ebp + 0xc]
cmp edi, 5
mov dword [ecx + 8], eax
jg 0x44dfff
cmp eax, 0xffffff
je 0x44e10f
mov dword [esp], 5
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x38]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00452134
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x10]
test eax, eax
je 0x44de86
mov edx, dword [ecx + 0x1c]
test edx, edx
je 0x44e03f
mov ecx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov edx, dword [ecx + 0x14]
mov ebx, dword [esi]
sub eax, edx
cmp eax, ebx
jge 0x44de99
mov ebx, eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x44df0a
mov edx, dword [ebp - 0x3c]
lea esi, [ebp - 0x38]
lea edi, [ecx + 0xc]
mov dword [ebp - 0x40], esi
cmp edx, 7
mov dword [ecx], edx
jbe 0x44dec4
test edi, 4
jne 0x44e063
nop
cld
mov ecx, edx
mov esi, dword [ebp - 0x40]
shr ecx, 2
test dl, 2
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x40], esi
je 0x44dee6
movzx eax, word [esi]
add esi, 2
mov word [edi], ax
add edi, 2
mov dword [ebp - 0x40], esi
test dl, 1
je 0x44def3
mov edx, dword [ebp - 0x40]
movzx eax, byte [edx]
mov byte [edi], al
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0x18]
mov eax, dword [ecx + 0x14]
mov esi, dword [ecx + 0x1c]
mov dword [edx + 4], ebx
add eax, esi
mov dword [edx + 8], eax
mov edx, dword [ecx + 0x14]
mov esi, dword [ebp + 0xc]
mov eax, dword [esi + 0x1c]
mov dword [esp], ebx
add edx, eax
mov eax, dword [ebp + 8]
call fcn.0044ce14
cmp eax, ebx
je 0x44df3f
mov eax, dword [esi + 0x10]
mov edi, str._s__failed_to_read_RTMP_packet_body._len:__lu
mov dword [esp + 4], edi
mov dword [esp + 0xc], eax
mov eax, str.RTMP_ReadPacket
mov dword [esp + 8], eax
jmp 0x44dd2f
mov dword [esp + 8], ebx
mov edx, dword [ebp + 0xc]
mov esi, dword [edx + 0x1c]
mov eax, dword [edx + 0x14]
mov dword [esp], 5
add eax, esi
mov dword [esp + 4], eax
call fcn.00452134
mov ecx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov edi, dword [ecx + 4]
add dword [ecx + 0x14], ebx
mov ebx, dword [esi + edi*4 + 0x44]
test ebx, ebx
je 0x44e0a8
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov eax, dword [esi]
mov edx, dword [ecx + edi*4 + 0x44]
mov dword [edx], eax
mov eax, dword [esi + 4]
mov dword [edx + 4], eax
mov eax, dword [esi + 8]
mov dword [edx + 8], eax
mov eax, dword [esi + 0xc]
mov dword [edx + 0xc], eax
mov eax, dword [esi + 0x10]
mov dword [edx + 0x10], eax
mov eax, dword [esi + 0x14]
mov dword [edx + 0x14], eax
mov eax, dword [esi + 0x18]
mov dword [edx + 0x18], eax
mov eax, dword [esi + 0x1c]
mov dword [edx + 0x1c], eax
mov eax, dword [esi + 0x10]
cmp dword [esi + 0x14], eax
je 0x44e0c3
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x1c], 0
mov eax, 1
jmp 0x44dd3d
mov dword [esp], 2
mov eax, dword [ebp + 8]
mov edx, ebx
call fcn.0044ce14
cmp eax, 2
je 0x44e13e
mov eax, str.RTMP_ReadPacket
mov dword [esp + 8], eax
mov eax, str._s__failed_to_read_RTMP_packet_header_3nd_byte
mov dword [esp + 4], eax
jmp 0x44dd6f
lea eax, [ebx + 3]
mov dword [esp], eax
call fcn.004506a4
mov esi, dword [ebp + 0xc]
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 0
mov dword [esp], esi
call fcn.004480c4
cmp edi, 6
jle 0x44e07a
movzx eax, byte [ebx + 6]
cmp edi, 0xb
mov byte [esi + 1], al
je 0x44e1a2
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 8]
jmp 0x44de4c
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00448084
test eax, eax
je 0x44e085
movzx eax, byte [ebp - 0x38]
mov esi, dword [ebp + 0xc]
shr eax, 6
mov byte [esi], al
mov eax, dword [esi + 0x10]
jmp 0x44de86
mov eax, dword [ebp - 0x38]
lea edi, [ecx + 0x10]
sub edx, 4
mov dword [ecx + 0xc], eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0x40], eax
jmp 0x44dec4
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
jmp 0x44de4c
mov dword [esp], 4
mov eax, str.RTMP_ReadPacket
mov edi, str._s__failed_to_allocate_packet
mov dword [esp + 8], eax
mov dword [esp + 4], edi
call fcn.00452044
jmp 0x44dd3b
mov dword [esp], 0x20
call sub.msvcrt.dll_malloc
mov dword [esi + edi*4 + 0x44], eax
mov eax, dword [ebp + 0xc]
mov edi, dword [eax + 4]
jmp 0x44df76
cmp byte [esi + 2], 0
jne 0x44e17d
mov edi, dword [esi + 4]
mov eax, dword [ecx + edi*4 + 0x80244]
mov ecx, dword [esi + 8]
add eax, ecx
mov dword [esi + 8], eax
mov ecx, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov dword [ecx + edi*4 + 0x80244], eax
mov eax, dword [esi + 4]
mov eax, dword [ecx + eax*4 + 0x44]
mov dword [eax + 0x1c], 0
mov dword [eax + 0x14], 0
mov byte [eax + 2], 0
mov eax, 1
jmp 0x44dd3d
mov dword [esp], 4
mov eax, dword [ebp + 8]
add ebx, edi
mov edx, ebx
call fcn.0044ce14
cmp eax, 4
je 0x44e18b
mov ebx, str.RTMP_ReadPacket
mov ecx, str._s__failed_to_read_extended_timestamp
mov dword [esp + 8], ebx
mov dword [esp + 4], ecx
jmp 0x44dd96
movzx eax, byte [ebp - 0x36]
lea ebx, [ebp - 0x35]
movzx edx, byte [ebp - 0x37]
shl eax, 8
lea edi, [eax + edx + 0x40]
mov eax, dword [ebp + 0xc]
mov dword [eax + 4], edi
mov eax, str.RTMP_ReadPacket
mov dword [esp + 8], eax
mov eax, str._s__m_nChannel:__0x
mov dword [esp + 0xc], edi
mov dword [esp + 4], eax
mov dword [esp], 4
call fcn.00452044
jmp 0x44dcd8
mov eax, dword [ebp + 0xc]
mov edi, dword [eax + 4]
mov eax, dword [eax + 8]
jmp 0x44e0df
mov dword [esp], ebx
call fcn.004506c4
add dword [ebp - 0x3c], 4
mov esi, dword [ebp + 0xc]
mov dword [esi + 8], eax
jmp 0x44de57
lea ecx, [ebx + 7]
movzx edx, byte [ecx + 3]
movzx eax, byte [ecx + 2]
shl edx, 0x18
shl eax, 0x10
or edx, eax
movzx eax, byte [ecx + 1]
shl eax, 8
or edx, eax
movzx eax, byte [ebx + 7]
or edx, eax
mov eax, dword [esi + 8]
mov dword [esi + 0xc], edx
jmp 0x44de4c