Function at 0x416420
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x30
push ebp
push esi
mov esi, ecx
xor ebp, ebp
cmp dword [esi + 0x494], ebp
jne 0x416229
pop esi
xor eax, eax
pop ebp
add esp, 0x30
ret
fild dword [esi + 0x4cc]
mov eax, dword [esi + 0x4a4]
mov dword [esp + 0xc], 0x40a00000
cmp eax, ebp
fmul dword [0x4301ec]
fidiv dword [esi + 0x498]
fstp dword [esp + 0x1c]
je 0x41625e
push eax
call dword [sym.imp.kernel32.dll_GlobalFree]
mov dword [esi + 0x4a4], ebp
mov eax, dword [esi + 0x49c]
imul eax, dword [esi + 0x498]
shl eax, 4
push eax
push 0x42
call dword [sym.imp.kernel32.dll_GlobalAlloc]
cmp eax, ebp
mov dword [esi + 0x4a4], eax
jne 0x416297
push 0xffffffffffffffff
push 0x40
push 0x100
call sub.mfc42.dll_AfxMessageBox
pop esi
xor eax, eax
pop ebp
add esp, 0x30
ret
push ebx
push edi
push eax
call dword [sym.imp.kernel32.dll_GlobalLock]
mov ecx, dword [esi + 0x49c]
mov ebx, eax
shl ecx, 1
test ecx, ecx
mov dword [esp + 0x18], ebx
jle 0x4162e0
mov edx, dword [esi + 0x498]
xor ecx, ecx
test edx, edx
jle 0x4162d3
xor edx, edx
xor edi, edi
mov dword [eax], edx
mov dword [eax + 4], edi
add eax, 8
inc ecx
cmp ecx, dword [esi + 0x498]
jl 0x4162c2
mov edx, dword [esi + 0x49c]
inc ebp
shl edx, 1
cmp ebp, edx
jl 0x4162b2
mov eax, dword [esi + 0x494]
push eax
call dword [sym.imp.kernel32.dll_GlobalLock]
mov ecx, dword [esi + 0x498]
mov edx, eax
fld dword [0x42e958]
lea eax, [ecx + ecx*2 + 8]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x28], eax
mov eax, dword [esi + 0x49c]
shl eax, 1
test eax, eax
mov dword [esp + 0x10], 0
mov dword [esp + 0x1c], 0
jle 0x416460
fld dword [esp + 0x24]
fmul dword [0x4301e8]
fstp dword [esp + 0x34]
jmp 0x41633b
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
and eax, 0x80000001
jns 0x41634b
dec eax
or eax, 0xfffffffe
inc eax
mov dword [esp + 0x20], eax
jne 0x4163a3
fstp st(0)
fld dword [edx + 4]
fcomp dword [0x42e958]
fnstsw ax
test ah, 0x40
jne 0x416370
fld dword [edx + 4]
fmul dword [0x4301ec]
fstp dword [esp + 0x14]
mov edi, dword [esp + 0x28]
xor eax, eax
mov al, byte [edi + edx]
test eax, eax
mov dword [esp + 0x30], eax
je 0x416387
fld dword [esp + 0x10]
jmp 0x4163bf
fld dword [esp + 0x14]
fmul dword [0x4301e4]
fadd dword [esp + 0x10]
fld dword [esp + 0x10]
fadd dword [esp + 0x14]
fstp dword [esp + 0x10]
jmp 0x4163bf
mov eax, dword [esp + 0x30]
test eax, eax
je 0x4163b3
fadd dword [0x4301e0]
jmp 0x4163bf
fld dword [esp + 0x14]
fmul dword [0x4301e8]
faddp st(1)
fld dword [esp + 0x34]
xor edi, edi
lea ebp, [edx + 8]
test ecx, ecx
jle 0x41642a
mov eax, edi
and eax, 0x80000001
jns 0x4163da
dec eax
or eax, 0xfffffffe
inc eax
jne 0x4163e4
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x4163f0
cmp eax, 1
jne 0x416415
cmp dword [esp + 0x20], 1
jne 0x416415
cmp byte [ebp], 0
je 0x416415
fld st(0)
call sub.msvcrt.dll__ftol
fld st(1)
mov dword [esp + 0x38], eax
call sub.msvcrt.dll__ftol
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x2c]
mov dword [ebx], ecx
mov dword [ebx + 4], eax
mov eax, dword [esi + 0x498]
add ebx, 8
fadd dword [esp + 0x24]
add ebp, 3
inc edi
cmp edi, eax
jl 0x4163cc
mov ecx, dword [esi + 0x498]
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x28]
mov edi, dword [esi + 0x49c]
lea eax, [eax + ecx*8]
add edx, ebx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x1c]
inc eax
mov dword [esp + 0x2c], edx
shl edi, 1
cmp eax, edi
mov dword [esp + 0x1c], eax
fstp st(0)
jl 0x416337
mov ecx, dword [esi + 0x494]
mov edi, dword [sym.imp.kernel32.dll_GlobalUnlock]
push ecx
fstp st(0)
call edi
mov edx, dword [esi + 0x4a4]
push edx
call edi
mov eax, dword [esi + 0x4cc]
fld dword [esp + 0x10]
lea edi, [eax + eax*4]
shl edi, 1
call sub.msvcrt.dll__ftol
mov dword [esi + 0x4a8], edi
pop edi
mov dword [esi + 0x4ac], eax
pop ebx
pop esi
mov eax, 1
pop ebp
add esp, 0x30
ret