Function at 0x442400
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 8
push ebx
push ebp
push esi
push edi
mov edi, edx
mov esi, ecx
mov dword [esp + 0x14], edi
call fcn.004449f0
mov di, word [edi + 4]
mov ebp, eax
mov dword [esp + 0x10], ebp
mov bx, word [ebp + 0xa]
test di, di
jne 0x4424fb
mov edi, ebx
mov eax, 1
and edi, 0xffff
mov ecx, edi
shr ecx, 0xc
shl eax, cl
mov ecx, ebx
test al, 0xe
je 0x442479
and ecx, 0xfff
cmp ecx, 4
jbe 0x442465
and edi, 0xfff
and ebx, 0xf000
or ebx, edi
mov edi, ebx
jmp 0x442548
mov edi, 4
and ebx, 0xf000
or ebx, edi
mov edi, ebx
jmp 0x442548
and ecx, 0xf000
cmp cx, 0x4000
jne 0x4424b2
and ebx, 0xfff
cmp ebx, 8
jbe 0x4424a2
and edi, 0xfff
or edi, 0x4000
jmp 0x442548
mov edi, 8
or edi, 0x4000
jmp 0x442548
cmp cx, 0x3000
jne 0x4424df
and ebx, 0xfff
cmp ebx, 4
jbe 0x4424d2
and edi, 0xfff
or edi, 0x3000
jmp 0x442548
mov edi, 4
or edi, 0x3000
jmp 0x442548
cmp cx, 0x5000
jne 0x4424f7
mov eax, dword [esp + 0x14]
mov edx, dword [0x496234]
mov edi, ebx
mov dword [eax + 8], edx
jmp 0x442548
mov edi, ebx
jmp 0x442548
mov ecx, edi
mov edx, 1
and ecx, 0xffff
shr ecx, 0xc
shl edx, cl
test dl, 0xe
je 0x442548
mov eax, edi
and ebx, 0xfff
and eax, 0xfff
cmp ebx, eax
jbe 0x442548
mov cl, byte [ebp + 8]
mov edx, 1
shl edx, cl
test edx, 0x180
jne 0x442548
push 0x2f9
push 1
call fcn.00485850
mov ebp, dword [esp + 0x18]
add esp, 8
mov eax, edi
and eax, 0xf000
cmp eax, 0x5000
jne 0x442703
mov ecx, dword [esp + 0x14]
mov eax, dword [esi + 0x18]
test eax, eax
mov edx, dword [ecx + 8]
mov dword [0x496234], edx
je 0x4425e9
mov ecx, dword [esi + 8]
mov edx, ebp
call fcn.0042cbe0
mov eax, dword [esp + 0x10]
mov edx, 0x3004
mov ecx, esi
mov dword [esi + 8], eax
call fcn.00441d00
mov ecx, esi
call fcn.004449f0
mov ecx, 0x3004
mov dword [esp + 0x10], eax
call fcn.0042ed10
mov ecx, dword [eax + 0x14]
mov bl, byte [ecx + 6]
or bl, 0x40
mov byte [ecx + 6], bl
mov ecx, dword [esi + 8]
mov edx, dword [esp + 0x10]
push ecx
push fcn.0042cbe0
push edx
push eax
mov edx, 0x3004
mov ecx, 0x131
call fcn.0042e2a0
mov dword [esi + 8], eax
mov eax, dword [0x496234]
push eax
mov edx, edi
mov ecx, esi
call fcn.00441af0
mov ecx, esi
call fcn.004449f0
mov ebp, eax
mov dword [esp + 0x10], ebp
cmp dword [0x496234], 0x1000
jl 0x4426bb
mov ecx, dword [esi + 8]
mov edx, ebp
call fcn.0042cbe0
mov ecx, dword [esp + 0x10]
mov edx, 0x3004
mov dword [esi + 8], ecx
mov ecx, esi
call fcn.00441d00
mov ecx, esi
call fcn.004449f0
mov edx, dword [esi + 8]
mov ecx, 0x130
push edx
push fcn.0042cbe0
push eax
mov edx, 0x3004
call fcn.0042ee00
mov edi, eax
mov eax, dword [0x496234]
cdq
push edx
push eax
mov ecx, 0x1004
mov dword [esi + 8], edi
call fcn.0042d480
mov edx, 0x3004
mov ecx, 0x130
push edi
push fcn.0042cbe0
push eax
mov dword [esp + 0x1c], eax
call fcn.0042ee00
mov dword [esi + 8], eax
mov edx, 0x3004
push eax
push fcn.0042cbe0
mov dword [esp + 0x18], eax
mov eax, dword [eax + 0x1c]
mov ecx, dword [edi + 0x1c]
push 0x157
push 0
push 0
push eax
push ecx
mov ecx, 0x15f
call fcn.0042f350
mov edx, dword [eax + 0x1c]
mov ecx, 0x130
push eax
push fcn.0042cbe0
push edx
mov edx, 0x3004
mov dword [esi + 8], eax
call fcn.0042ee00
mov dword [esi + 8], eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret
mov ecx, edi
call fcn.0042ed10
mov ebx, eax
mov eax, dword [0x496234]
cdq
push edx
push eax
mov ecx, 0x1004
call fcn.0042d480
mov ecx, dword [esi + 8]
mov edx, dword [esp + 0x10]
push ecx
push fcn.0042cbe0
push eax
push edx
push ebx
mov edx, edi
mov ecx, 0x13e
call fcn.0042e340
mov ecx, dword [ebx + 0x14]
mov dword [esi + 8], eax
mov dword [ecx + 0x14], eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret
lea ebx, [esi + 8]
mov edx, edi
push ebx
lea ecx, [esp + 0x14]
call fcn.00444190
mov eax, dword [esi + 0x18]
test eax, eax
je 0x44274e
mov ecx, edi
call fcn.0042ed10
mov esi, eax
mov edx, dword [ebx]
push edx
push fcn.0042cbe0
mov eax, dword [esi + 0x14]
mov edx, edi
mov cl, byte [eax + 6]
or cl, 0x40
mov byte [eax + 6], cl
mov eax, dword [esp + 0x18]
push eax
push esi
mov ecx, 0x131
call fcn.0042e2a0
mov dword [ebx], eax
mov dword [esp + 0x10], esi
mov ecx, dword [ebx]
mov edx, dword [esp + 0x10]
push ecx
push fcn.0042cbe0
push edx
mov edx, edi
mov ecx, 0x130
call fcn.0042ee00
mov dword [ebx], eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret