Function at 0x42256c
Capabilities:
Enumerate pe sections
Parse pe header

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
mov edi, dword [ebp + 0x1c]
xor eax, eax
push 0x38
push eax
push edi
mov ebx, edx
mov dword [ebp - 0xc], eax
mov esi, ecx
call sub.msvcrt.dll_memset
mov ecx, dword [ebp + 8]
add esp, 0xc
mov eax, dword [ebp + 0x14]
mov dword [edi], esi
mov dword [edi + 0x14], ebx
mov dword [edi + 0x20], ecx
mov dword [edi + 0x30], 0x40e360
mov dword [edi + 0x34], eax
test esi, esi
je 0x4228ae
cmp ecx, ebx
jbe 0x4225b5
mov ecx, ebx
lea eax, [esi + ecx]
mov dword [ebp - 0x10], eax
cmp eax, esi
jb 0x4228ae
cmp ecx, 0x40
jb 0x422688
movzx eax, word [esi]
mov edx, 0x5a4d
mov ebx, 0x4550
cmp ax, dx
je 0x4225ee
cmp ax, bx
jne 0x422688
mov dword [edi + 4], esi
mov ebx, esi
jmp 0x422626
mov edx, dword [esi + 0x3c]
test edx, edx
je 0x422688
cmp edx, ecx
ja 0x422688
mov eax, ecx
sub eax, edx
cmp eax, 0xf8
jbe 0x422688
lea ebx, [edx + esi]
lea eax, [ebx + 0xf8]
mov dword [edi + 4], ebx
lea edx, [esi + ecx]
cmp eax, edx
ja 0x422688
lea eax, [esi + 0x40]
cmp ebx, eax
jb 0x422688
mov edx, ebx
sub edx, esi
lea eax, [edx + 0xf8]
cmp eax, ecx
ja 0x4228ae
cmp dword [ebx], 0x4550
jne 0x422688
xor eax, eax
cmp word [ebx + 0x14], ax
je 0x422688
movzx ecx, word [ebx + 4]
mov eax, 0x3a64
mov esi, 0x14c
cmp cx, ax
jne 0x42265d
mov ecx, esi
movzx eax, cx
sub eax, esi
je 0x422699
sub eax, 0x74
je 0x422699
dec eax
sub eax, 1
je 0x422699
dec eax
sub eax, 1
je 0x422699
sub eax, 0x3c
je 0x422692
sub eax, 0x8464
je 0x422699
sub eax, 0x2400
je 0x422699
mov eax, 0xc000007b
jmp 0x4228b3
mov eax, 0x2000
jmp 0x42269e
mov eax, 0x1000
mov dword [edi + 0x1c], eax
mov esi, 0x10b
movzx eax, word [ebx + 0x18]
cmp ax, si
je 0x4226ed
mov esi, 0x20b
cmp ax, si
jne 0x422688
lea eax, [esi - 0xb]
cmp cx, ax
je 0x4226d5
mov eax, 0x8664
cmp cx, ax
je 0x4226d5
mov eax, 0xaa64
cmp cx, ax
jne 0x422688
mov ecx, dword [ebp + 0x20]
lea eax, [edx + 0x58]
mov edx, dword [ebp + 0x24]
push 4
push eax
call fcn.00422522
mov esi, 0xa8
jmp 0x42272b
mov eax, 0x14c
cmp cx, ax
je 0x422715
add eax, 0x74
cmp cx, ax
je 0x422715
mov eax, 0x1c4
cmp cx, ax
je 0x422715
add eax, 0xfffffffe
cmp cx, ax
jne 0x422688
mov ecx, dword [ebp + 0x20]
lea eax, [edx + 0x58]
mov edx, dword [ebp + 0x24]
push 4
push eax
call fcn.00422522
mov esi, 0x98
mov eax, dword [ebx + 0x54]
lea ecx, [edi + 8]
mov dword [edi + 0x18], eax
mov edx, dword [ebx + 0x38]
mov dword [ebp - 4], ecx
mov ecx, edx
mov edi, dword [ebp - 4]
mov dword [ebp - 8], edx
mov edx, dword [ebp - 8]
mov dword [edi], ecx
mov ecx, dword [ebx + 0x3c]
add ebx, esi
mov edi, dword [ebp + 0x1c]
mov dword [ebp - 0x18], ebx
test eax, eax
je 0x422688
cmp eax, dword [edi + 0x14]
jae 0x422688
test ecx, ecx
je 0x422688
lea eax, [ecx - 1]
test ecx, eax
jne 0x422688
lea eax, [edx - 1]
test edx, eax
jne 0x422688
cmp edx, ecx
jb 0x422688
test ecx, 0x1ff
je 0x422799
cmp ecx, edx
jne 0x422688
mov ecx, dword [edi + 4]
push 0x28
movzx edx, word [ecx + 6]
lea esi, [ecx + 0x18]
mov dword [edi + 0xc], edx
movzx eax, word [ecx + 0x14]
add esi, eax
mov dword [ebp - 8], edx
mov eax, edx
mov dword [ebp - 0x14], esi
pop ecx
mul ecx
mov dword [edi + 0x10], esi
test edx, edx
ja 0x422688
jb 0x4227cf
cmp eax, 0xffffffff
ja 0x422688
lea ecx, [esi + eax]
cmp ecx, esi
jb 0x422688
cmp ecx, dword [ebp - 0x10]
ja 0x422688
sub ecx, dword [edi]
cmp dword [ebp - 8], 0
mov dword [ebp - 4], ecx
jbe 0x422847
xor ebx, ebx
mov eax, dword [esi + ebx + 0x14]
mov esi, dword [esi + ebx + 0x10]
test eax, eax
je 0x422804
cmp eax, ecx
jb 0x422688
lea edx, [esi + eax]
cmp edx, eax
jb 0x422688
cmp edx, dword [edi + 0x14]
ja 0x422688
test esi, esi
je 0x422824
cmp edx, dword [ebp - 4]
jbe 0x422824
mov dword [ebp - 4], edx
mov eax, dword [edi + 8]
dec eax
add eax, esi
cmp eax, esi
jb 0x422688
mov eax, dword [ebp - 0xc]
add ebx, 0x28
mov esi, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0xc], eax
cmp eax, dword [ebp - 8]
jb 0x4227f0
mov ebx, dword [ebp - 0x18]
mov edx, dword [ebp + 0x24]
mov eax, ebx
sub eax, dword [edi]
mov ecx, dword [ebp + 0x20]
push 8
push eax
call fcn.00422522
mov eax, dword [ebx]
test eax, eax
je 0x4228aa
mov esi, dword [ebx + 4]
test esi, esi
je 0x4228aa
cmp eax, dword [ebp - 4]
jb 0x422688
cmp eax, dword [edi + 0x14]
ja 0x422688
lea ecx, [esi + eax]
cmp ecx, dword [edi + 0x14]
jne 0x422688
cmp ecx, eax
jb 0x422688
cmp eax, dword [edi + 0x18]
jb 0x422688
test al, 3
jne 0x422688
mov edx, dword [ebp + 0x24]
mov ecx, dword [ebp + 0x20]
push esi
push eax
call fcn.00422522
xor eax, eax
jmp 0x4228b3
mov eax, 0xc000000d
pop edi
pop esi
pop ebx
leave
ret 0x20