Function at 0x4237f0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x28
push ebx
push ebp
push esi
push edi
mov edi, ecx
mov dword [esp + 0x18], edi
cmp dword [edi + 0x20], 0
jne 0x423fac
test byte [edi], 8
jne 0x423fac
mov ebp, dword [edi + 0x10]
xorps xmm0, xmm0
mov esi, dword [edi + 0x4c]
mov eax, ebp
mov ecx, dword [edi + 0x14]
movlpd qword [esp + 0x30], xmm0
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], ecx
test esi, esi
je 0x423c5b
mov eax, dword [esp + 0x34]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x1c], eax
nop word [eax + eax]
mov edx, 0x2014b50
mov ecx, edi
call fcn.00424170
mov edx, 0x201
mov ecx, edi
call fcn.00424170
mov edx, 0xb2d
mov ecx, edi
call fcn.00424170
mov edx, 0x2d
mov ecx, edi
call fcn.00424170
movzx edx, word [esi]
mov ecx, edi
call fcn.00424170
movzx edx, word [esi + 2]
mov ecx, edi
call fcn.00424170
mov edx, dword [esi + 4]
mov ecx, edi
call fcn.00424170
movzx edx, word [esi + 6]
mov ecx, edi
call fcn.00424170
mov edx, dword [esi + 8]
mov ecx, edi
call fcn.00424170
movzx edx, word [esi + 0xa]
mov ecx, edi
call fcn.00424170
cmp dword [esi + 0x14], 0
mov edx, dword [esi + 0x10]
ja 0x4238e0
cmp edx, 0xffffffff
jae 0x4238e0
mov ecx, edi
call fcn.00424170
mov edx, dword [esi + 0x10]
mov eax, dword [esi + 0x14]
shrd edx, eax, 0x10
jmp 0x4238ed
or edx, 0xffffffff
mov ecx, edi
call fcn.00424170
or edx, 0xffffffff
mov ecx, edi
call fcn.00424170
cmp dword [esi + 0x1c], 0
mov edx, dword [esi + 0x18]
ja 0x423915
cmp edx, 0xffffffff
jae 0x423915
mov ecx, edi
call fcn.00424170
mov edx, dword [esi + 0x18]
mov eax, dword [esi + 0x1c]
shrd edx, eax, 0x10
jmp 0x423922
or edx, 0xffffffff
mov ecx, edi
call fcn.00424170
or edx, 0xffffffff
mov ecx, edi
call fcn.00424170
mov edx, dword [esi + 0x20]
mov ecx, edi
call fcn.00424170
mov ecx, dword [esi + 0x3c]
mov eax, dword [esi + 0x38]
test ecx, ecx
ja 0x423964
jb 0x423944
cmp eax, 0xffffffff
jae 0x423964
cmp dword [esi + 0x1c], 0
ja 0x423964
jb 0x423952
cmp dword [esi + 0x18], 0xffffffff
jae 0x423964
cmp dword [esi + 0x14], 0
ja 0x423964
jb 0x423960
cmp dword [esi + 0x10], 0xffffffff
jae 0x423964
xor ebp, ebp
jmp 0x423969
mov ebp, 4
test ecx, ecx
jne 0x423976
cmp eax, 0xffffffff
jae 0x423976
xor ebx, ebx
jmp 0x42397b
mov ebx, 8
cmp dword [esi + 0x14], 0
ja 0x42398b
cmp dword [esi + 0x10], 0xffffffff
jae 0x42398b
xor ecx, ecx
jmp 0x423990
mov ecx, 8
cmp dword [esi + 0x1c], 0
ja 0x4239a0
cmp dword [esi + 0x18], 0xffffffff
jae 0x4239a0
xor eax, eax
jmp 0x4239a5
mov eax, 8
lea edx, [eax + ecx]
mov ecx, edi
add edx, ebx
add edx, ebp
add edx, dword [esi + 0x28]
call fcn.00424170
xor edx, edx
mov ecx, edi
call fcn.00424170
movzx edx, word [esi + 0x2c]
mov ecx, edi
call fcn.00424170
movzx edx, word [esi + 0x2e]
mov ecx, edi
call fcn.00424170
mov edx, dword [esi + 0x34]
mov ecx, edi
call fcn.00424170
movzx edx, word [esi + 0x36]
mov ecx, edi
call fcn.00424170
cmp dword [esi + 0x3c], 0
mov edx, dword [esi + 0x38]
ja 0x423a0b
cmp edx, 0xffffffff
jae 0x423a0b
mov ecx, edi
call fcn.00424170
mov edx, dword [esi + 0x38]
mov eax, dword [esi + 0x3c]
shrd edx, eax, 0x10
jmp 0x423a18
or edx, 0xffffffff
mov ecx, edi
call fcn.00424170
or edx, 0xffffffff
mov ecx, edi
call fcn.00424170
push dword [esi + 0x20]
lea edx, [esi + 0x48]
mov ecx, edi
call fcn.00424230
add esp, 4
cmp dword [esi + 0x3c], 0
ja 0x423a5b
jb 0x423a3d
cmp dword [esi + 0x38], 0xffffffff
jae 0x423a5b
cmp dword [esi + 0x1c], 0
ja 0x423a5b
jb 0x423a4b
cmp dword [esi + 0x18], 0xffffffff
jae 0x423a5b
cmp dword [esi + 0x14], 0
ja 0x423a5b
cmp dword [esi + 0x10], 0xffffffff
jb 0x423b87
mov edx, 1
mov ecx, edi
call fcn.00424170
cmp dword [esi + 0x3c], 0
ja 0x423a77
cmp dword [esi + 0x38], 0xffffffff
jae 0x423a77
xor ebx, ebx
jmp 0x423a7c
mov ebx, 8
cmp dword [esi + 0x14], 0
ja 0x423a8c
cmp dword [esi + 0x10], 0xffffffff
jae 0x423a8c
xor ecx, ecx
jmp 0x423a91
mov ecx, 8
cmp dword [esi + 0x1c], 0
ja 0x423aa1
cmp dword [esi + 0x18], 0xffffffff
jae 0x423aa1
xor eax, eax
jmp 0x423aa6
mov eax, 8
lea edx, [eax + ecx]
mov ecx, edi
add edx, ebx
call fcn.00424170
cmp dword [esi + 0x1c], 0
mov edx, dword [esi + 0x18]
ja 0x423ac0
cmp edx, 0xffffffff
jb 0x423af9
mov ecx, edi
call fcn.00424170
mov edx, dword [esi + 0x18]
mov ecx, edi
mov eax, dword [esi + 0x1c]
shrd edx, eax, 0x10
call fcn.00424170
mov eax, dword [esi + 0x18]
mov cl, 0x20
mov edx, dword [esi + 0x1c]
call fcn.004b7b80
mov edx, eax
mov ecx, edi
call fcn.00424170
movzx edx, word [esi + 0x1e]
mov ecx, edi
call fcn.00424170
cmp dword [esi + 0x14], 0
mov edx, dword [esi + 0x10]
ja 0x423b07
cmp edx, 0xffffffff
jb 0x423b40
mov ecx, edi
call fcn.00424170
mov edx, dword [esi + 0x10]
mov ecx, edi
mov eax, dword [esi + 0x14]
shrd edx, eax, 0x10
call fcn.00424170
mov eax, dword [esi + 0x10]
mov cl, 0x20
mov edx, dword [esi + 0x14]
call fcn.004b7b80
mov edx, eax
mov ecx, edi
call fcn.00424170
movzx edx, word [esi + 0x16]
mov ecx, edi
call fcn.00424170
cmp dword [esi + 0x3c], 0
mov edx, dword [esi + 0x38]
ja 0x423b4e
cmp edx, 0xffffffff
jb 0x423b87
mov ecx, edi
call fcn.00424170
mov edx, dword [esi + 0x38]
mov ecx, edi
mov eax, dword [esi + 0x3c]
shrd edx, eax, 0x10
call fcn.00424170
mov eax, dword [esi + 0x38]
mov cl, 0x20
mov edx, dword [esi + 0x3c]
call fcn.004b7b80
mov edx, eax
mov ecx, edi
call fcn.00424170
movzx edx, word [esi + 0x3e]
mov ecx, edi
call fcn.00424170
mov eax, dword [esi + 0x28]
test eax, eax
je 0x423b9c
mov edx, dword [esi + 0x44]
mov ecx, edi
push eax
call fcn.00424230
add esp, 4
mov ecx, dword [esi + 0x3c]
mov eax, dword [esi + 0x38]
test ecx, ecx
ja 0x423bd0
jb 0x423bad
cmp eax, 0xffffffff
jae 0x423bd0
cmp dword [esi + 0x1c], 0
ja 0x423bd0
jb 0x423bbb
cmp dword [esi + 0x18], 0xffffffff
jae 0x423bd0
cmp dword [esi + 0x14], 0
ja 0x423bd0
jb 0x423bc9
cmp dword [esi + 0x10], 0xffffffff
jae 0x423bd0
mov ebx, 0x2e
jmp 0x423bd5
mov ebx, 0x32
test ecx, ecx
jne 0x423be2
cmp eax, 0xffffffff
jae 0x423be2
xor edx, edx
jmp 0x423be7
mov edx, 8
cmp dword [esi + 0x14], 0
ja 0x423bf7
cmp dword [esi + 0x10], 0xffffffff
jae 0x423bf7
xor ecx, ecx
jmp 0x423bfc
mov ecx, 8
cmp dword [esi + 0x1c], 0
ja 0x423c0c
cmp dword [esi + 0x18], 0xffffffff
jae 0x423c0c
xor eax, eax
jmp 0x423c11
mov eax, 8
add eax, ebx
mov ebx, dword [esp + 0x1c]
add eax, ecx
add eax, edx
add eax, dword [esi + 0x28]
add eax, dword [esi + 0x20]
add dword [edi + 0x10], eax
push esi
adc dword [edi + 0x14], 0
add ebx, 1
mov edi, dword [esi + 0x14c]
adc dword [esp + 0x18], 0
mov dword [esp + 0x20], ebx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov esi, edi
test edi, edi
mov edi, dword [esp + 0x18]
jne 0x423850
mov eax, dword [edi + 0x10]
mov ecx, dword [edi + 0x14]
mov ebp, dword [esp + 0x20]
jmp 0x423c6b
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x14], edx
mov dword [esp + 0x1c], ebx
test ecx, ecx
jne 0x423ce8
cmp eax, 0xffffffff
jae 0x423ce8
mov edx, 0x6054b50
mov ecx, edi
call fcn.00424170
mov edx, 0x605
mov ecx, edi
call fcn.00424170
xor edx, edx
mov ecx, edi
call fcn.00424170
xor edx, edx
mov ecx, edi
call fcn.00424170
mov edx, ebx
mov ecx, edi
call fcn.00424170
mov edx, ebx
mov ecx, edi
call fcn.00424170
mov esi, dword [edi + 0x10]
mov ecx, edi
sub esi, ebp
mov edx, esi
call fcn.00424170
shr esi, 0x10
mov ecx, edi
mov edx, esi
call fcn.00424170
add ebp, dword [edi + 0x18]
mov ecx, edi
mov ebx, dword [esp + 0x24]
mov edx, ebp
adc ebx, 0
call fcn.00424170
shrd ebp, ebx, 0x10
mov edx, ebp
jmp 0x423f91
mov ebx, dword [edi + 0x18]
mov edx, 0x6064b50
mov ebp, dword [edi + 0x1c]
add ebx, eax
adc ebp, ecx
mov ecx, edi
call fcn.00424170
mov edx, 0x606
mov ecx, edi
call fcn.00424170
mov edx, 0x2c
mov ecx, edi
call fcn.00424170
xor edx, edx
mov ecx, edi
call fcn.00424170
xor edx, edx
mov ecx, edi
call fcn.00424170
xor edx, edx
mov ecx, edi
call fcn.00424170
mov edx, 0xb2d
mov ecx, edi
call fcn.00424170
mov edx, 0x2d
mov ecx, edi
call fcn.00424170
xor edx, edx
mov ecx, edi
call fcn.00424170
xor edx, edx
mov ecx, edi
call fcn.00424170
xor edx, edx
mov ecx, edi
call fcn.00424170
xor edx, edx
mov ecx, edi
call fcn.00424170
mov edx, dword [esp + 0x1c]
mov ecx, edi
call fcn.00424170
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
shrd edi, eax, 0x10
mov edx, edi
call fcn.00424170
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
call fcn.00424170
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
shr esi, 0x10
mov edx, esi
call fcn.00424170
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
call fcn.00424170
mov edx, edi
mov edi, dword [esp + 0x18]
mov ecx, edi
call fcn.00424170
mov edx, dword [esp + 0x14]
mov ecx, edi
call fcn.00424170
mov edx, esi
mov ecx, edi
call fcn.00424170
mov esi, dword [edi + 0x10]
mov ecx, edi
sub esi, dword [esp + 0x20]
mov eax, dword [edi + 0x14]
mov edx, esi
sbb eax, dword [esp + 0x24]
mov dword [esp + 0x2c], esi
mov dword [esp + 0x28], eax
call fcn.00424170
mov ecx, esi
mov esi, dword [esp + 0x28]
mov eax, esi
shrd ecx, eax, 0x10
mov dword [esp + 0x30], ecx
mov edx, ecx
mov ecx, edi
call fcn.00424170
mov edx, esi
mov ecx, edi
call fcn.00424170
mov edx, esi
mov ecx, edi
shr edx, 0x10
call fcn.00424170
mov esi, dword [edi + 0x18]
mov ecx, edi
add esi, dword [esp + 0x20]
mov eax, dword [edi + 0x1c]
mov edx, esi
adc eax, dword [esp + 0x24]
mov dword [esp + 0x18], eax
call fcn.00424170
mov eax, dword [esp + 0x18]
mov ecx, esi
shrd ecx, eax, 0x10
mov dword [esp + 0x24], ecx
mov edx, ecx
mov ecx, edi
call fcn.00424170
mov edx, dword [esp + 0x18]
mov ecx, edi
call fcn.00424170
mov edx, dword [esp + 0x18]
mov ecx, edi
shr edx, 0x10
call fcn.00424170
add dword [edi + 0x10], 0x38
mov edx, 0x7064b50
mov ecx, edi
adc dword [edi + 0x14], 0
call fcn.00424170
mov edx, 0x706
mov ecx, edi
call fcn.00424170
xor edx, edx
mov ecx, edi
call fcn.00424170
xor edx, edx
mov ecx, edi
call fcn.00424170
mov edx, ebx
mov ecx, edi
call fcn.00424170
mov eax, ebp
mov ecx, edi
shrd ebx, eax, 0x10
mov edx, ebx
call fcn.00424170
mov edx, ebp
mov ecx, edi
call fcn.00424170
shr ebp, 0x10
mov ecx, edi
mov edx, ebp
call fcn.00424170
mov edx, 1
mov ecx, edi
call fcn.00424170
xor edx, edx
mov ecx, edi
call fcn.00424170
add dword [edi + 0x10], 0x14
mov edx, 0x6054b50
mov ecx, edi
adc dword [edi + 0x14], 0
call fcn.00424170
mov edx, 0x605
mov ecx, edi
call fcn.00424170
xor edx, edx
mov ecx, edi
call fcn.00424170
xor edx, edx
mov ecx, edi
call fcn.00424170
cmp dword [esp + 0x14], 0
ja 0x423f2d
mov ebx, dword [esp + 0x1c]
cmp ebx, 0xff
jb 0x423f30
or ebx, 0xffffffff
mov edx, ebx
mov ecx, edi
call fcn.00424170
mov edx, ebx
mov ecx, edi
call fcn.00424170
cmp dword [esp + 0x28], 0
ja 0x423f58
mov edx, dword [esp + 0x2c]
cmp edx, 0xffffffff
jae 0x423f58
mov ebx, dword [esp + 0x30]
jmp 0x423f5e
or ebx, 0xffffffff
or edx, 0xffffffff
mov ecx, edi
call fcn.00424170
mov edx, ebx
mov ecx, edi
call fcn.00424170
cmp dword [esp + 0x18], 0
ja 0x423f80
cmp esi, 0xffffffff
jae 0x423f80
mov ebx, dword [esp + 0x24]
jmp 0x423f86
or ebx, 0xffffffff
or esi, 0xffffffff
mov edx, esi
mov ecx, edi
call fcn.00424170
mov edx, ebx
mov ecx, edi
call fcn.00424170
xor edx, edx
mov ecx, edi
call fcn.00424170
add dword [edi + 0x10], 0x16
adc dword [edi + 0x14], 0
or dword [edi], 8
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret