Function at 0x4404bd
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
push esi
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
imul ecx, ecx, 0x48
add ecx, 0x4a1b68
mov dword [ebp - 0x10], ecx
mov dl, byte [ebp + 0xc]
push edx
push 2
push 4
mov eax, dword [ebp - 0x28]
mov cx, word [eax + 6]
push ecx
lea edx, [ebp - 0x1c]
push edx
call fcn.0044fc4b
add esp, 0x14
mov al, byte [ebp - 0x1c]
mov byte [ebp - 0xc], al
mov cl, byte [ebp - 0x1b]
mov byte [ebp - 8], cl
call fcn.0041e5db
push 2
push 4
mov dl, byte [ebp - 8]
push edx
mov al, byte [ebp - 0xc]
push eax
mov ecx, 0x4b4250
call fcn.00453c17
push 0x1f
push 0x12
push 0
call fcn.0047d1f1
add esp, 0xc
mov esi, dword [ebp - 0xc]
and esi, 0xff
imul esi, esi, 0x30
mov ecx, 0x4b4250
call fcn.00451a4f
add eax, esi
cdq
and edx, 7
add eax, edx
sar eax, 3
add eax, 1
mov dword [ebp - 0x20], eax
mov esi, dword [ebp - 8]
and esi, 0xff
imul esi, esi, 0x30
mov ecx, 0x4b4250
call fcn.00451a60
add esi, eax
mov dword [ebp - 0x14], esi
mov ecx, dword [ebp - 0x14]
add ecx, 4
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 0x20]
push eax
mov ecx, 0x492f38
call fcn.0040ebd7
push 1
mov ecx, dword [ebp - 0x28]
call fcn.004403aa
push 4
mov ecx, 0x492f38
call fcn.0040ed36
push 0
mov ecx, 0x492f38
call fcn.0040ed0a
push 0x12
mov ecx, 0x492f38
call fcn.0040ec84
push 0
mov ecx, 0x492f38
call fcn.0040ecbc
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x20]
add edx, 9
push edx
mov ecx, 0x492f38
call fcn.0040ebd7
mov ecx, dword [ebp - 0x28]
call fcn.0041df70
and eax, 0xff
mov eax, dword [eax*4 + 0x48bea8]
push eax
push 0x48e054
push 0x492f38
call fcn.0040faa0
add esp, 0xc
mov ecx, dword [ebp - 0x10]
call fcn.004065d0
and eax, 0xff
push eax
push 0x48e058
push 0x492f38
call fcn.0040faa0
add esp, 0xc
mov dword [ebp - 0x18], 0
mov dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
and ecx, 0xff
test ecx, ecx
jne 0x440669
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x14]
add edx, 0x14
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x20]
lea edx, [ecx*8 + 0x28]
push edx
push 0
call fcn.0045119f
add esp, 0x14
jmp case.default.0x44068a
mov eax, dword [ebp + 8]
and eax, 0xff
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
sub ecx, 1
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 3
ja case.default.0x44068a
mov edx, dword [ebp - 0x2c]
jmp dword [edx*4 + 0x440e79]
push 0
push 0
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0xc]
and ecx, 0xff
imul ecx, ecx, 0x24
add ecx, 0x4b2c50
call fcn.0043bc4b
mov dword [ebp - 0x18], eax
mov cl, byte [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
and edx, 0xff
imul edx, edx, 0x24
add edx, 0x4b2c50
push edx
push 1
mov ecx, dword [ebp - 0x28]
call fcn.0043b50d
mov dword [ebp - 4], eax
push 1
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
sub ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x14]
add edx, 0x14
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x20]
lea edx, [ecx*8 + 0x28]
push edx
push 0
call fcn.00450ed5
add esp, 0x1c
jmp case.default.0x44068a
mov al, byte [ebp + 0x10]
push eax
call fcn.00449bac
add esp, 4
test eax, eax
je 0x44079a
push 1
mov cl, byte [ebp + 0x10]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov ecx, dword [ebp - 0x28]
call fcn.0041c2b0
and eax, 0xff
imul eax, eax, 0x24
add eax, 0x4b2c50
push eax
mov ecx, dword [ebp + 0xc]
and ecx, 0xff
imul ecx, ecx, 0x24
add ecx, 0x4b2c50
call fcn.0043bfaa
mov dword [ebp - 0x18], eax
push 2
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
sub ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x14]
add edx, 0x14
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x20]
lea edx, [ecx*8 + 0x28]
push edx
push 0
call fcn.00450ed5
add esp, 0x1c
jmp 0x4407c7
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x14]
add eax, 0x14
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x20]
lea eax, [edx*8 + 0x28]
push eax
push 0
call fcn.0045119f
add esp, 0x14
mov cl, byte [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
and edx, 0xff
imul edx, edx, 0x24
add edx, 0x4b2c50
push edx
push 1
mov ecx, dword [ebp - 0x28]
call fcn.0043b73f
mov dword [ebp - 4], eax
jmp case.default.0x44068a
mov al, byte [ebp + 0x10]
push eax
call fcn.00449c55
add esp, 4
test eax, eax
je 0x440850
push 1
mov cl, byte [ebp + 0xc]
push ecx
mov dl, byte [ebp + 0x10]
push edx
mov ecx, dword [ebp - 0x28]
call fcn.0043c548
mov dword [ebp - 0x18], eax
push 3
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
add ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x14]
add edx, 0x14
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x20]
lea edx, [ecx*8 + 0x28]
push edx
push 0
call fcn.00450ed5
add esp, 0x1c
jmp 0x44087d
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x14]
add eax, 0x14
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x20]
lea eax, [edx*8 + 0x28]
push eax
push 0
call fcn.0045119f
add esp, 0x14
mov cl, byte [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
and edx, 0xff
imul edx, edx, 0x24
add edx, 0x4b2c50
push edx
push 1
mov ecx, dword [ebp - 0x28]
call fcn.0043b73f
mov dword [ebp - 4], eax
jmp case.default.0x44068a
mov ecx, dword [ebp + 0x10]
and ecx, 0xff
imul ecx, ecx, 0x19
add ecx, 0x4a1140
call fcn.00409540
and eax, 0xff
cmp eax, 0x3f
jne 0x440913
push 1
mov al, byte [ebp + 0x10]
push eax
mov ecx, dword [ebp - 0x28]
call fcn.0043c42e
mov dword [ebp - 0x18], eax
push 4
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x10]
add edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x14]
add eax, 0x14
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x20]
lea eax, [edx*8 + 0x28]
push eax
push 0
call fcn.00450ed5
add esp, 0x1c
jmp 0x44095f
mov ecx, dword [ebp + 0x10]
and ecx, 0xff
imul ecx, ecx, 0x19
add ecx, 0x4a1140
call fcn.0041dd70
and eax, 0xff
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x10]
push edx
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x14
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 0x20]
lea ecx, [eax*8 + 0x28]
push ecx
push 0
call fcn.0045119f
add esp, 0x14
push 1
mov edx, dword [ebp - 0x28]
mov al, byte [edx + 4]
push eax
mov cl, byte [ebp + 0x10]
push ecx
call fcn.0041c4e9
add esp, 0xc
neg eax
sbb eax, eax
and eax, 0x64
mov dword [ebp - 4], eax
push 4
push 4
push 0
push 0x180
mov ecx, 0x4aeb50
call fcn.0047fa40
push eax
push 0x18
push 0x18
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 0x20]
lea ecx, [eax*8 + 8]
push ecx
call fcn.00451913
add esp, 0x18
mov edx, dword [ebp + 8]
and edx, 0xff
test edx, edx
je 0x4409c9
mov eax, dword [ebp + 8]
and eax, 0xff
cmp eax, 1
jne 0x4409fb
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x14]
push edx
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x18
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 0x20]
lea ecx, [eax*8 + 0x28]
push ecx
push 1
call fcn.0045119f
add esp, 0x14
jmp 0x440c03
mov dl, byte [ebp + 8]
mov byte [ebp - 0x30], dl
cmp byte [ebp - 0x30], 2
je 0x440a20
cmp byte [ebp - 0x30], 3
je 0x440ad7
cmp byte [ebp - 0x30], 4
je 0x440b69
jmp 0x440c03
mov al, byte [ebp + 0x10]
push eax
call fcn.00449c36
add esp, 4
test eax, eax
je 0x440aa5
push 1
mov cl, byte [ebp + 0x10]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov ecx, dword [ebp - 0x28]
call fcn.0041c2b0
and eax, 0xff
imul eax, eax, 0x24
add eax, 0x4b2c50
push eax
mov ecx, dword [ebp + 0xc]
and ecx, 0xff
imul ecx, ecx, 0x24
add ecx, 0x4b2c50
call fcn.0043bfaa
mov dword [ebp - 0x18], eax
push 2
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x14]
sub ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x14]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x14]
add edx, 0x18
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x20]
lea edx, [ecx*8 + 0x28]
push edx
push 1
call fcn.00450ed5
add esp, 0x1c
jmp 0x440ad2
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x14]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x14]
add eax, 0x18
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x20]
lea eax, [edx*8 + 0x28]
push eax
push 1
call fcn.0045119f
add esp, 0x14
jmp 0x440c03
mov cl, byte [ebp + 0x10]
push ecx
call fcn.00449c7a
add esp, 4
test eax, eax
je 0x440b37
push 1
mov dl, byte [ebp + 0xc]
push edx
mov al, byte [ebp + 0x10]
push eax
mov ecx, dword [ebp - 0x28]
call fcn.0043c548
mov dword [ebp - 0x18], eax
push 3
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x14]
add edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x14]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x14]
add eax, 0x18
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x20]
lea eax, [edx*8 + 0x28]
push eax
push 1
call fcn.00450ed5
add esp, 0x1c
jmp 0x440b64
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x14]
push edx
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x18
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 0x20]
lea ecx, [eax*8 + 0x28]
push ecx
push 1
call fcn.0045119f
add esp, 0x14
jmp 0x440c03
mov ecx, dword [ebp + 0x10]
and ecx, 0xff
imul ecx, ecx, 0x19
add ecx, 0x4a1140
call fcn.00409540
and eax, 0xff
cmp eax, 0x40
jne 0x440bd6
push 1
mov dl, byte [ebp + 0x10]
push edx
mov ecx, dword [ebp - 0x28]
call fcn.0043c42e
mov dword [ebp - 0x18], eax
push 4
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x14]
add ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x14]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x14]
add edx, 0x18
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x20]
lea edx, [ecx*8 + 0x28]
push edx
push 1
call fcn.00450ed5
add esp, 0x1c
jmp 0x440c03
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x14]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x14]
add eax, 0x18
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x20]
lea eax, [edx*8 + 0x28]
push eax
push 1
call fcn.0045119f
add esp, 0x14
push 4
push 4
push 0
push 0x3c0
mov ecx, 0x4aeb50
call fcn.0047fa40
push eax
push 0x18
push 0x18
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x20]
lea eax, [edx*8 + 8]
push eax
call fcn.00451913
add esp, 0x18
push 0
mov ecx, 0x492f38
call fcn.0040ed0a
mov ecx, dword [ebp - 0x14]
add ecx, 0x1b
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 0x20]
push eax
mov ecx, 0x492f38
call fcn.0040ebd7
mov ecx, dword [ebp + 8]
and ecx, 0xff
test ecx, ecx
jne 0x440e35
mov edx, dword [ebp - 0x28]
add edx, 6
push edx
call fcn.00435991
add esp, 4
mov byte [ebp - 0x24], al
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x20]
add ecx, 1
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
push edx
mov ecx, 0x492f38
call fcn.0040ebd7
mov ecx, dword [ebp - 0x28]
call fcn.0043ff54
test eax, eax
je 0x440d56
push 0x12
mov ecx, 0x492f38
call fcn.0040ec84
push 0x48e060
push 0x492f38
call fcn.0040faa0
add esp, 8
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x20]
add ecx, 5
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
push edx
mov ecx, 0x492f38
call fcn.0040ebd7
push 0x12
mov ecx, 0x492f38
call fcn.0040ec84
mov ecx, dword [ebp - 0x10]
call fcn.00406650
and eax, 0xff
cmp eax, 0xff
jne 0x440d16
push 0x48e064
push 0x492f38
call fcn.0040faa0
add esp, 8
jmp 0x440d36
mov ecx, dword [ebp - 0x10]
call fcn.00406650
and eax, 0xff
push eax
push 0x48e068
push 0x492f38
call fcn.0040faa0
add esp, 0xc
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x20]
add ecx, 5
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
push edx
mov ecx, 0x492f38
call fcn.0040ebd7
jmp 0x440dd6
mov ecx, dword [ebp - 0x28]
call fcn.00406710
test eax, eax
je 0x440d9d
push 0x24
mov ecx, 0x492f38
call fcn.0040ec84
push 0x48e06c
push 0x492f38
call fcn.0040faa0
add esp, 8
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x20]
add ecx, 0xa
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
push edx
mov ecx, 0x492f38
call fcn.0040ebd7
jmp 0x440dd6
push 0x35
mov ecx, 0x492f38
call fcn.0040ec84
push 0x48e074
push 0x492f38
call fcn.0040faa0
add esp, 8
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x20]
add ecx, 0xa
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
push edx
mov ecx, 0x492f38
call fcn.0040ebd7
push 0x53
mov ecx, 0x492f38
call fcn.0040ec84
mov eax, dword [ebp - 0x24]
and eax, 0xff
mov ecx, dword [eax*4 + 0x48bdb0]
push ecx
push 0x48e07c
push 0x492f38
call fcn.0040faa0
add esp, 0xc
push 0x12
mov ecx, 0x492f38
call fcn.0040ec84
mov ecx, dword [ebp - 0x28]
call fcn.0043f7cf
xor eax, eax
or al, dl
nop
imul eax, eax, 0xa
push eax
push 0x48e080
push 0x492f38
call fcn.0040faa0
add esp, 0xc
jmp 0x440e55
mov dl, byte [ebp + 0x10]
push edx
mov al, byte [ebp + 8]
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
call fcn.00440e89
add esp, 0x18
push 0
mov ecx, 0x492f38
call fcn.0040ed0a
push 1
mov ecx, 0x4b4250
call fcn.00453e81
call fcn.0041e5f6
pop esi
mov esp, ebp
pop ebp
ret 0xc