Function at 0x449180
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x24
push ebx
push esi
push edi
mov edi, dword [esp + 0x34]
cmp dword [edi], 0
je 0x449533
mov cx, word [edi + 4]
cmp cx, 1
je 0x449533
mov ax, word [edi + 6]
cmp ax, 1
je 0x449533
mov edx, dword [edi + 0xc]
test edx, edx
je 0x449533
shr cx, 1
mov esi, ecx
xor ecx, ecx
mov cl, byte [edi + 8]
mov ebx, esi
shr ax, 1
mov dword [esp + 0x2c], eax
and eax, 0xffff
imul ecx, eax
and ebx, 0xffff
mov dword [esp + 0x28], esi
imul ecx, ebx
push ecx
push 0x40
mov dword [esp + 0x2c], ebx
call dword [sym.imp.kernel32.dll_GlobalAlloc]
test eax, eax
mov dword [esp + 0x20], eax
je 0x449533
push ebp
xor ebp, ebp
cmp word [edi + 6], bp
jbe 0x449514
xor edx, edx
mov dword [esp + 0x20], edx
xor eax, eax
xor esi, esi
mov ax, word [edi + 4]
mov dword [esp + 0x38], esi
cmp eax, esi
jle 0x4494f9
jmp 0x449228
mov edx, dword [esp + 0x20]
mov cl, byte [edi + 8]
cmp cl, 3
lea ecx, [ebp + 1]
mov dword [esp + 0x1c], ecx
jne 0x44936f
mov ebx, dword [esp + 0x38]
imul ecx, eax
imul eax, ebp
add edx, ebx
mov ebx, dword [esp + 0x24]
add eax, esi
add ecx, esi
lea ebx, [ebx + edx*2]
mov dword [esp + 0x10], eax
add edx, ebx
xor ebx, ebx
mov dword [esp + 0x14], edx
mov edx, dword [edi + 0xc]
mov dword [esp + 0x18], ecx
lea edx, [edx + eax*2 + 2]
mov bl, byte [eax + edx + 1]
mov eax, dword [edi + 0xc]
xor edx, edx
lea eax, [eax + ecx*2 + 2]
mov dl, byte [ecx + eax + 1]
mov eax, dword [edi + 0xc]
mov ecx, dword [esp + 0x10]
add ebx, edx
xor edx, edx
lea eax, [eax + ecx*2]
mov dl, byte [ecx + eax]
mov ecx, dword [edi + 0xc]
mov eax, dword [esp + 0x18]
add ebx, edx
xor edx, edx
lea ecx, [ecx + eax*2]
mov dl, byte [eax + ecx]
add ebx, edx
mov dword [esp + 0x18], ebx
fild dword [esp + 0x18]
fmul dword [0x46f548]
call fcn.004616bc
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov byte [ecx], al
xor eax, eax
mov ax, word [edi + 4]
mov ecx, ebx
imul ecx, eax
imul eax, ebp
mov edx, dword [edi + 0xc]
add ecx, esi
add eax, esi
lea edx, [edx + ecx*2]
add ecx, edx
xor edx, edx
mov dword [esp + 0x1c], ecx
mov ecx, dword [edi + 0xc]
lea ecx, [ecx + eax*2]
add eax, ecx
xor ecx, ecx
mov dl, byte [eax + 4]
mov cl, byte [eax + 1]
mov eax, dword [esp + 0x1c]
add edx, ecx
xor ecx, ecx
mov cl, byte [eax + 4]
add edx, ecx
xor ecx, ecx
mov cl, byte [eax + 1]
add edx, ecx
mov dword [esp + 0x1c], edx
fild dword [esp + 0x1c]
fmul dword [0x46f548]
call fcn.004616bc
mov edx, dword [esp + 0x14]
mov byte [edx + 1], al
xor eax, eax
mov ax, word [edi + 4]
mov ecx, dword [edi + 0xc]
imul ebx, eax
imul eax, ebp
add ebx, esi
lea edx, [ecx + ebx*2]
add edx, ebx
add eax, esi
lea ecx, [ecx + eax*2]
xor ebx, ebx
add eax, ecx
xor ecx, ecx
mov cl, byte [eax + 5]
mov bl, byte [eax + 2]
xor eax, eax
add ecx, ebx
mov al, byte [edx + 5]
add ecx, eax
xor eax, eax
mov al, byte [edx + 2]
add ecx, eax
mov dword [esp + 0x1c], ecx
fild dword [esp + 0x1c]
fmul dword [0x46f548]
call fcn.004616bc
mov ecx, dword [esp + 0x14]
mov byte [ecx + 2], al
jmp 0x4494d7
imul ecx, eax
imul eax, ebp
add eax, esi
lea ebx, [ecx + esi]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x38]
mov ecx, dword [edi + 0xc]
add edx, eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x18], ebx
lea edx, [eax + edx*4]
xor eax, eax
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x10]
mov al, byte [ecx + edx*4 + 4]
xor edx, edx
mov dl, byte [ecx + ebx*4 + 4]
mov ebx, dword [esp + 0x10]
add eax, edx
xor edx, edx
mov dl, byte [ecx + ebx*4]
mov ebx, dword [esp + 0x18]
add eax, edx
xor edx, edx
mov dl, byte [ecx + ebx*4]
add eax, edx
mov dword [esp + 0x18], eax
fild dword [esp + 0x18]
fmul dword [0x46f548]
call fcn.004616bc
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov edx, ebx
mov byte [ecx], al
xor eax, eax
mov ax, word [edi + 4]
mov ecx, dword [edi + 0xc]
imul edx, eax
imul eax, ebp
add edx, esi
add eax, esi
lea edx, [ecx + edx*4]
lea eax, [ecx + eax*4]
mov dword [esp + 0x1c], edx
xor ecx, ecx
mov cl, byte [eax + 5]
xor edx, edx
mov dl, byte [eax + 1]
mov eax, dword [esp + 0x1c]
add ecx, edx
xor edx, edx
mov dl, byte [eax + 5]
add ecx, edx
xor edx, edx
mov dl, byte [eax + 1]
add ecx, edx
mov dword [esp + 0x1c], ecx
fild dword [esp + 0x1c]
fmul dword [0x46f548]
call fcn.004616bc
mov ecx, dword [esp + 0x14]
mov edx, ebx
mov byte [ecx + 1], al
xor eax, eax
mov ax, word [edi + 4]
mov ecx, dword [edi + 0xc]
imul edx, eax
imul eax, ebp
add edx, esi
add eax, esi
lea edx, [ecx + edx*4]
lea eax, [ecx + eax*4]
mov dword [esp + 0x1c], edx
xor ecx, ecx
mov cl, byte [eax + 6]
xor edx, edx
mov dl, byte [eax + 2]
mov eax, dword [esp + 0x1c]
add ecx, edx
xor edx, edx
mov dl, byte [eax + 6]
add ecx, edx
xor edx, edx
mov dl, byte [eax + 2]
add ecx, edx
mov dword [esp + 0x1c], ecx
fild dword [esp + 0x1c]
fmul dword [0x46f548]
call fcn.004616bc
mov ecx, dword [esp + 0x14]
xor edx, edx
mov byte [ecx + 2], al
xor eax, eax
mov ax, word [edi + 4]
mov ecx, dword [edi + 0xc]
imul ebx, eax
imul eax, ebp
add ebx, esi
add eax, esi
mov dl, byte [ecx + eax*4 + 7]
lea ebx, [ecx + ebx*4]
lea eax, [ecx + eax*4]
xor ecx, ecx
mov cl, byte [eax + 3]
xor eax, eax
mov al, byte [ebx + 7]
add edx, ecx
xor ecx, ecx
add edx, eax
mov cl, byte [ebx + 3]
add edx, ecx
mov dword [esp + 0x1c], edx
fild dword [esp + 0x1c]
fmul dword [0x46f548]
call fcn.004616bc
mov edx, dword [esp + 0x14]
mov byte [edx + 3], al
mov eax, dword [esp + 0x38]
add esi, 2
inc eax
mov dword [esp + 0x38], eax
xor eax, eax
mov ax, word [edi + 4]
cmp esi, eax
jl 0x449224
mov ebx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
xor eax, eax
add ebp, 2
mov ax, word [edi + 6]
add edx, ebx
cmp ebp, eax
mov dword [esp + 0x20], edx
jl 0x44920e
mov esi, dword [esp + 0x2c]
mov edx, dword [edi + 0xc]
mov cx, word [esp + 0x30]
push edx
mov word [edi + 4], si
mov word [edi + 6], cx
call dword [sym.imp.kernel32.dll_GlobalFree]
mov eax, dword [esp + 0x24]
pop ebp
mov dword [edi + 0xc], eax
pop edi
pop esi
pop ebx
add esp, 0x24
ret 4