Function at 0x5112bc
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53d02c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x35c
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x44], edx
mov edx, dword [ebp + 0x1c]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x3c], eax
mov eax, dword [0x55d258]
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x14], eax
and edx, 1
mov dword [ebp - 0x40], edx
mov eax, 0x14
jne 0x511321
mov eax, 0
mov dword [ebp - 0x30], eax
je 0x511337
mov eax, ecx
cmp eax, 0xec
jle 0x511334
mov eax, 0xec
mov dword [ebp - 0x18], eax
mov ecx, ebx
call fcn.004f5f24
mov esi, eax
mov ecx, ebx
call fcn.004f7b0c
mov dword [ebp - 0x20], eax
mov eax, esi
shl eax, 2
mov dword [ebp - 0x24], eax
push eax
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
mov dword [ebp - 0x2c], eax
add esp, 4
mov ecx, ebx
call fcn.004f7b2c
test esi, esi
jle 0x511400
cmp esi, 6
jl 0x511b40
mov edx, dword [ebp - 0x20]
xor ebx, ebx
lea ecx, [edx + edx*2]
mov dword [ebp - 0x1c], ecx
lea edi, [eax + ecx]
mov dword [ebp - 0x54], edi
lea ecx, [esi - 6]
mov dword [ebp - 0x60], ecx
lea ecx, [edx + edx*2]
lea ecx, [eax + ecx*2]
mov dword [ebp - 0x28], ecx
lea ecx, [edx + edx*8]
add ecx, eax
mov dword [ebp - 0x58], ecx
lea ecx, [edx*8]
lea edx, [ecx + edx*4]
add edx, eax
mov dword [ebp - 0x5c], edx
mov ecx, dword [ebp - 0x2c]
mov edx, ebx
imul edx, dword [ebp - 0x1c]
lea edi, [eax + edx]
mov dword [ecx + ebx*4], edi
mov edi, dword [ebp - 0x54]
lea edi, [edi + edx]
mov dword [ecx + ebx*4 + 4], edi
mov edi, dword [ebp - 0x28]
lea edi, [edi + edx]
mov dword [ecx + ebx*4 + 8], edi
mov edi, dword [ebp - 0x58]
lea edi, [edi + edx]
add edx, dword [ebp - 0x5c]
mov dword [ecx + ebx*4 + 0xc], edi
mov dword [ecx + ebx*4 + 0x10], edx
mov edx, dword [ebp - 0x60]
add ebx, 5
cmp ebx, edx
jle 0x5113ad
mov ecx, dword [ebp - 0x2c]
mov edx, ebx
imul edx, dword [ebp - 0x1c]
add edx, eax
mov dword [ecx + ebx*4], edx
add ebx, 1
cmp ebx, esi
jl 0x5113eb
mov eax, esi
imul eax, dword [ebp - 0x20]
push eax
mov dword [ebp - 0x54], eax
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
mov ebx, eax
mov eax, dword [ebp - 0x24]
push eax
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
mov dword [ebp - 0x1c], eax
add esp, 8
test esi, esi
jle 0x5114a9
cmp esi, 6
jl 0x511b39
mov eax, dword [ebp - 0x20]
xor ecx, ecx
lea edx, [eax + ebx]
mov dword [ebp - 0x58], edx
lea edi, [ebx + eax*2]
mov dword [ebp - 0x28], edi
lea edx, [eax + eax*2]
add edx, ebx
lea eax, [ebx + eax*4]
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x60], eax
lea eax, [esi - 6]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
imul eax, ecx
lea edi, [ebx + eax]
mov dword [edx + ecx*4], edi
mov edi, dword [ebp - 0x58]
lea edi, [edi + eax]
mov dword [edx + ecx*4 + 4], edi
mov edi, dword [ebp - 0x28]
lea edi, [edi + eax]
mov dword [edx + ecx*4 + 8], edi
mov edi, dword [ebp - 0x24]
lea edi, [edi + eax]
add eax, dword [ebp - 0x60]
mov dword [edx + ecx*4 + 0xc], edi
mov dword [edx + ecx*4 + 0x10], eax
mov eax, dword [ebp - 0x5c]
add ecx, 5
cmp ecx, eax
jle 0x511456
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
imul eax, ecx
add eax, ebx
mov dword [edx + ecx*4], eax
add ecx, 1
cmp ecx, esi
jl 0x511494
mov edi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x2c]
lea eax, [ebp - 0x368]
add esp, 0xffffffe8
mov edx, esi
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x18]
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x20]
call fcn.00511b5c
mov eax, dword [ebp - 0x2c]
push eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
mov eax, edi
push eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 0x20
mov eax, dword [ebp - 0x34]
test al, 4
jne 0x5119ea
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x51154b
mov eax, dword [ebp - 0x34]
test al, 2
je 0x51154b
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x511544
mov eax, dword [ebp - 0x54]
test eax, eax
jle 0x511544
cmp eax, 6
jl 0x5117c7
mov edx, eax
xor eax, eax
lea ecx, [edx - 6]
mov dword [ebp - 0x60], ecx
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x60]
add byte [ebx + eax], dl
add byte [ebx + eax + 1], dl
add byte [ebx + eax + 2], dl
add byte [ebx + eax + 3], dl
add byte [ebx + eax + 4], dl
add eax, 5
cmp eax, ecx
jle 0x51151f
jmp 0x5117c9
mov eax, dword [ebp - 0x3c]
mov dword [eax], ebx
jmp 0x511552
push ebx
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
pop ecx
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x5117a3
push 0x100
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
mov dword [ebp - 0x2c], eax
push 0x100
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
mov dword [ebp - 0x34], eax
push 0x100
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
mov dword [ebp - 0x58], eax
add esp, 0xc
mov eax, dword [ebp - 0x40]
test eax, eax
jne 0x511803
mov eax, dword [ebp - 0x18]
test eax, eax
jle 0x511695
cmp eax, 4
jl 0x5117de
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x34]
xor eax, eax
lea ebx, [edx + ecx]
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0x20], ebx
lea edi, [edx + esi]
lea edx, [edx + ecx]
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x18]
lea edx, [edx - 4]
mov dword [ebp - 0x1c], edx
mov ecx, dword [ebp - 0x20]
mov edi, dword [ebp - 0x24]
lea esi, [eax + eax*2]
movzx edx, byte [ebp + esi - 0x368]
movzx ebx, byte [ebp + esi - 0x364]
mov byte [ecx + eax], dl
movzx edx, byte [ebp + esi - 0x367]
mov ecx, dword [ebp - 0x28]
mov byte [ecx + eax], dl
movzx edx, byte [ebp + esi - 0x366]
mov ecx, dword [ebp - 0x20]
mov byte [edi + eax], dl
movzx edx, byte [ebp + esi - 0x365]
mov byte [ecx + eax + 1], dl
mov edx, dword [ebp - 0x28]
movzx ecx, byte [ebp + esi - 0x362]
mov byte [edx + eax + 1], bl
movzx edx, byte [ebp + esi - 0x363]
mov byte [edi + eax + 1], dl
mov edx, dword [ebp - 0x20]
mov byte [edx + eax + 2], cl
movzx edx, byte [ebp + esi - 0x361]
mov ecx, dword [ebp - 0x28]
mov byte [ecx + eax + 2], dl
movzx edx, byte [ebp + esi - 0x360]
mov byte [edi + eax + 2], dl
mov edx, dword [ebp - 0x1c]
add eax, 3
cmp eax, edx
jle 0x5115cf
mov esi, dword [ebp - 0x20]
mov edi, dword [ebp - 0x28]
lea ebx, [eax + eax*2]
movzx edx, byte [ebp + ebx - 0x368]
movzx ecx, byte [ebp + ebx - 0x367]
mov byte [esi + eax], dl
movzx edx, byte [ebp + ebx - 0x366]
mov byte [edi + eax], cl
mov ecx, dword [ebp - 0x24]
mov byte [ecx + eax], dl
mov edx, dword [ebp - 0x18]
add eax, 1
cmp eax, edx
jl 0x51165e
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
cmp eax, 0x100
jge 0x51172f
neg eax
add eax, 0x100
cmp eax, 6
jl 0x51170a
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov ebx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x58]
xor eax, eax
mov byte [edx + ecx], al
mov byte [ebx + edx], al
mov byte [esi + edx], al
mov byte [edx + ecx + 1], al
mov byte [ebx + edx + 1], al
mov byte [esi + edx + 1], al
mov byte [edx + ecx + 2], al
mov byte [ebx + edx + 2], al
mov byte [esi + edx + 2], al
mov byte [edx + ecx + 3], al
mov byte [ebx + edx + 3], al
mov byte [esi + edx + 3], al
mov byte [edx + ecx + 4], al
mov byte [ebx + edx + 4], al
mov byte [esi + edx + 4], al
add edx, 5
mov dword [ebp - 0x30], edx
cmp edx, 0xfa
jl 0x5116b5
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov ebx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x58]
xor eax, eax
mov byte [edx + ecx], al
mov byte [ebx + edx], al
mov byte [esi + edx], al
add edx, 1
mov dword [ebp - 0x30], edx
cmp edx, 0x100
jl 0x51170a
mov dword [ebp - 0x68], 0
mov dword [ebp - 4], 0
push 8
call sub.MSVCR80.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp - 0x64], eax
test eax, eax
je 0x511777
mov edx, dword [ebp - 0x58]
mov ebx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x2c]
push edx
mov ecx, eax
mov dword [ebp - 0x68], 1
push ebx
push esi
push 0x100
call fcn.004afe90
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x68], 0
jmp 0x511779
xor eax, eax
mov edx, dword [ebp - 0x44]
mov dword [edx], eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x2c]
push eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
mov eax, dword [ebp - 0x34]
push eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
mov eax, dword [ebp - 0x58]
push eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 0xc
mov ecx, dword [ebp - 0x14]
call fcn.00427c84
mov edi, dword [ebp - 0x50]
mov esi, dword [ebp - 0x4c]
mov ebx, dword [ebp - 0x48]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
xor eax, eax
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x54]
add byte [ebx + eax], dl
add eax, 1
cmp eax, ecx
jl 0x5117c9
jmp 0x511544
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x34]
xor eax, eax
lea ebx, [edx + ecx]
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0x20], ebx
lea edi, [edx + esi]
lea edx, [edx + ecx]
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edx
jmp 0x51165e
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov esi, eax
push 0x50
call sub.MSVCR80.dll_void____cdecl_operator_new___unsigned_int_
pop ecx
mov ebx, eax
push ebx
push 0x14
push 0
push esi
call dword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
push esi
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov edx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x34]
mov edi, dword [ebp - 0x58]
push ebx
movzx eax, byte [ebx]
movzx ecx, byte [ebx + 0x44]
mov byte [edx], al
movzx eax, byte [ebx + 1]
mov byte [esi], al
movzx eax, byte [ebx + 2]
mov byte [edi], al
movzx eax, byte [ebx + 4]
mov byte [edx + 1], al
movzx eax, byte [ebx + 5]
mov byte [esi + 1], al
movzx eax, byte [ebx + 6]
mov byte [edi + 1], al
movzx eax, byte [ebx + 8]
mov byte [edx + 2], al
movzx eax, byte [ebx + 9]
mov byte [esi + 2], al
movzx eax, byte [ebx + 0xa]
mov byte [edi + 2], al
movzx eax, byte [ebx + 0xc]
mov byte [edx + 3], al
movzx eax, byte [ebx + 0xd]
mov byte [esi + 3], al
movzx eax, byte [ebx + 0xe]
mov byte [edi + 3], al
movzx eax, byte [ebx + 0x10]
mov byte [edx + 4], al
movzx eax, byte [ebx + 0x11]
mov byte [esi + 4], al
movzx eax, byte [ebx + 0x12]
mov byte [edi + 4], al
movzx eax, byte [ebx + 0x14]
mov byte [edx + 5], al
movzx eax, byte [ebx + 0x15]
mov byte [esi + 5], al
movzx eax, byte [ebx + 0x16]
mov byte [edi + 5], al
movzx eax, byte [ebx + 0x18]
mov byte [edx + 6], al
movzx eax, byte [ebx + 0x19]
mov byte [esi + 6], al
movzx eax, byte [ebx + 0x1a]
mov byte [edi + 6], al
movzx eax, byte [ebx + 0x1c]
mov byte [edx + 7], al
movzx eax, byte [ebx + 0x1d]
mov byte [esi + 7], al
movzx eax, byte [ebx + 0x1e]
mov byte [edi + 7], al
movzx eax, byte [ebx + 0x20]
mov byte [edx + 8], al
movzx eax, byte [ebx + 0x21]
mov byte [esi + 8], al
movzx eax, byte [ebx + 0x22]
mov byte [edi + 8], al
movzx eax, byte [ebx + 0x24]
mov byte [edx + 9], al
movzx eax, byte [ebx + 0x25]
mov byte [esi + 9], al
movzx eax, byte [ebx + 0x26]
mov byte [edi + 9], al
movzx eax, byte [ebx + 0x28]
mov byte [edx + 0xa], al
movzx eax, byte [ebx + 0x29]
mov byte [esi + 0xa], al
movzx eax, byte [ebx + 0x2a]
mov byte [edi + 0xa], al
movzx eax, byte [ebx + 0x2c]
mov byte [edx + 0xb], al
movzx eax, byte [ebx + 0x2d]
mov byte [esi + 0xb], al
movzx eax, byte [ebx + 0x2e]
mov byte [edi + 0xb], al
movzx eax, byte [ebx + 0x30]
mov byte [edx + 0xc], al
movzx eax, byte [ebx + 0x31]
mov byte [esi + 0xc], al
movzx eax, byte [ebx + 0x32]
mov byte [edi + 0xc], al
movzx eax, byte [ebx + 0x34]
mov byte [edx + 0xd], al
movzx eax, byte [ebx + 0x35]
mov byte [esi + 0xd], al
movzx eax, byte [ebx + 0x36]
mov byte [edi + 0xd], al
movzx eax, byte [ebx + 0x38]
mov byte [edx + 0xe], al
movzx eax, byte [ebx + 0x39]
mov byte [esi + 0xe], al
movzx eax, byte [ebx + 0x3a]
mov byte [edi + 0xe], al
movzx eax, byte [ebx + 0x3c]
mov byte [edx + 0xf], al
movzx eax, byte [ebx + 0x3d]
mov byte [esi + 0xf], al
movzx eax, byte [ebx + 0x3e]
mov byte [edi + 0xf], al
movzx eax, byte [ebx + 0x40]
mov byte [edx + 0x10], al
movzx eax, byte [ebx + 0x41]
movzx edx, byte [ebx + 0x48]
mov byte [esi + 0x10], al
movzx eax, byte [ebx + 0x42]
mov byte [edi + 0x10], al
mov eax, dword [ebp - 0x2c]
mov byte [eax + 0x11], cl
movzx eax, byte [ebx + 0x45]
mov byte [esi + 0x11], al
movzx eax, byte [ebx + 0x46]
mov byte [edi + 0x11], al
mov eax, dword [ebp - 0x2c]
mov byte [eax + 0x12], dl
movzx eax, byte [ebx + 0x49]
mov edx, dword [ebp - 0x2c]
mov byte [esi + 0x12], al
movzx eax, byte [ebx + 0x4a]
mov byte [edi + 0x12], al
movzx eax, byte [ebx + 0x4c]
mov byte [edx + 0x13], al
movzx eax, byte [ebx + 0x4d]
mov byte [esi + 0x13], al
movzx eax, byte [ebx + 0x4e]
mov byte [edi + 0x13], al
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
pop ecx
jmp 0x511592
mov ecx, dword [ebp - 0x38]
call fcn.004f7b8c
movzx eax, al
test eax, eax
jne 0x511a08
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x38]
push 1
push esi
push eax
call fcn.004f5db4
mov ecx, dword [ebp - 0x38]
call fcn.004f7b2c
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x54]
test eax, eax
jle 0x5114f0
cmp eax, 4
jl 0x511b35
mov edx, eax
xor eax, eax
lea ecx, [edx - 4]
mov dword [ebp - 0x60], ecx
mov edi, dword [ebp - 0x24]
movzx ecx, byte [ebx + eax]
lea edx, [eax + eax*2]
mov dword [ebp - 0x1c], edx
lea edx, [ecx + ecx*2]
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], edx
movzx edx, byte [ebp + edx - 0x368]
mov byte [esi + edi], dl
mov edx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + edx - 0x367]
mov byte [esi + edi + 1], cl
movzx edx, byte [ebp + edx - 0x366]
mov esi, edi
mov ecx, dword [ebp - 0x1c]
mov byte [ecx + esi + 2], dl
movzx edx, byte [ebx + eax + 1]
lea edx, [edx + edx*2]
mov dword [ebp - 0x2c], edx
movzx edx, byte [ebp + edx - 0x368]
mov byte [ecx + esi + 3], dl
mov edx, dword [ebp - 0x2c]
movzx edx, byte [ebp + edx - 0x367]
mov byte [ecx + esi + 4], dl
mov edx, dword [ebp - 0x2c]
movzx edx, byte [ebp + edx - 0x366]
mov byte [ecx + esi + 5], dl
movzx edx, byte [ebx + eax + 2]
lea edx, [edx + edx*2]
mov esi, ecx
mov dword [ebp - 0x2c], edx
movzx edx, byte [ebp + edx - 0x368]
mov byte [esi + edi + 6], dl
mov edx, dword [ebp - 0x2c]
movzx edx, byte [ebp + edx - 0x367]
add eax, 3
mov byte [esi + edi + 7], dl
mov edx, dword [ebp - 0x2c]
movzx edx, byte [ebp + edx - 0x366]
mov esi, edi
mov byte [ecx + esi + 8], dl
mov edx, dword [ebp - 0x60]
cmp eax, edx
jle 0x511a31
mov edi, dword [ebp - 0x24]
movzx edx, byte [ebx + eax]
lea esi, [eax + eax*2]
lea edx, [edx + edx*2]
add eax, 1
mov dword [ebp - 0x1c], edx
movzx edx, byte [ebp + edx - 0x368]
mov byte [esi + edi], dl
mov edx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + edx - 0x367]
mov byte [esi + edi + 1], cl
movzx edx, byte [ebp + edx - 0x366]
mov ecx, edi
mov byte [esi + ecx + 2], dl
mov edx, dword [ebp - 0x54]
cmp eax, edx
jl 0x511aee
jmp 0x5114f0
xor eax, eax
jmp 0x511aee
xor ecx, ecx
jmp 0x511494
mov edx, dword [ebp - 0x20]
xor ebx, ebx
lea ecx, [edx + edx*2]
mov dword [ebp - 0x1c], ecx
jmp 0x5113eb