Function at 0x443900
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x16c
mov eax, dword [0x4951c0]
xor eax, esp
mov dword [esp + 0x164], eax
mov eax, dword [esp + 0x178]
push ebx
push ebp
push esi
mov dword [esp + 0x14], eax
mov eax, dword [0x54c0d4]
push edi
mov edi, ecx
mov dword [esp + 0x40], edi
cmp eax, 0xffffffff
jne 0x443955
mov eax, dword [0x4edb8c]
cdq
sub eax, edx
mov ebx, eax
mov eax, dword [0x4ed660]
cdq
sub eax, edx
sar ebx, 1
mov ebp, eax
sar ebp, 1
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x1c], ebp
jmp 0x443967
mov ecx, dword [0x54acf0]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x1c], ecx
mov ebp, ecx
mov ebx, eax
cmp dword [0x498fe4], 0
je 0x4439a5
mov eax, dword [0x498ff4]
cdq
idiv dword [0x499014]
cmp dword [0x499008], 1
jne 0x44398a
cdq
sub eax, edx
sar eax, 1
lea esi, [ebx + ebx*2]
cmp eax, esi
mov dword [esp + 0x20], esi
jl 0x4439a5
lea eax, [ebp + ebp*2]
cmp dword [0x498ff8], eax
mov dword [esp + 0x28], eax
jge 0x4439ee
mov esi, 0x498d90
call fcn.004011a0
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
lea ebx, [ebx + ebx*2]
mov dword [0x498fa8], eax
lea eax, [ebp + ebp*2]
mov ecx, ebx
mov dword [esp + 0x20], ebx
mov ebx, 0x498fac
mov dword [esp + 0x28], eax
call fcn.00469800
mov edx, dword [0x498ff0]
mov eax, dword [0x498fa8]
push edx
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov esi, dword [esp + 0x20]
mov ecx, dword [0x498fa8]
push 0xffffff
push ecx
call dword [sym.imp.GDI32.dll_SetTextColor]
mov edx, dword [0x498fa8]
push 1
push edx
call dword [sym.imp.GDI32.dll_SetBkMode]
mov ebx, dword [0x58fe34]
test ebx, ebx
jne 0x443a29
sub dword [esp + 0x184], ebp
mov ebp, dword [esp + 0x180]
jmp 0x443a3d
mov ebp, dword [esp + 0x180]
add ebp, dword [0x4edb8c]
mov dword [esp + 0x180], ebp
xor edx, edx
xor eax, eax
test ebx, ebx
je 0x443b04
mov byte [esp + 0x70], 0x40
cmp byte [0x54c6e8], dl
jne 0x443af0
lea ebx, [ebx]
mov cl, byte [eax + 0x53a0c8]
mov byte [esp + eax + 0x71], cl
inc eax
test cl, cl
jne 0x443a60
mov edx, 0xfffffc7c
mov eax, dword [esp + 0x18c]
shl eax, 8
add eax, 0x49b588
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x190]
shl eax, 8
add eax, 0x49b588
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x194]
shl eax, 8
add eax, 0x49b588
mov dword [esp + 0x50], eax
test ebx, ebx
jne 0x443b18
lea eax, [esp + 0x70]
cmp byte [0x54c6e8], bl
je 0x443ac2
mov eax, 0x54c6e8
push eax
push 1
push 0
push 0
push 0
push 0x80
push 0
push 0
push 0
push 0x2bc
push edx
push edx
mov eax, esi
cdq
sub eax, edx
sar eax, 1
push eax
mov eax, dword [esp + 0x5c]
push eax
jmp 0x443b44
mov cl, byte [eax + 0x54c6e8]
mov byte [esp + eax + 0x71], cl
inc eax
test cl, cl
jne 0x443af0
jmp 0x443a6f
mov cl, byte [eax + 0x53a0c8]
mov byte [esp + eax + 0x70], cl
inc eax
test cl, cl
jne 0x443b04
jmp 0x443a74
lea ecx, [esp + 0x70]
push ecx
push 1
push 0
push 0
push 0
push 0x80
push 0
push 0
push 0
push 0x2bc
push edx
push edx
mov eax, esi
cdq
sub eax, edx
mov edx, dword [esp + 0x58]
sar eax, 1
push eax
push edx
call dword [sym.imp.GDI32.dll_CreateFontA]
mov ecx, dword [0x498fa8]
push eax
push ecx
mov dword [esp + 0x3c], eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x14], 0
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x443b70
sub eax, edx
cmp dword [0x58fe34], 0
mov esi, eax
jne 0x443bac
mov eax, dword [0x54886c]
add eax, eax
lea ecx, [esi + 1]
cdq
idiv ecx
mov edx, dword [esp + 0x2c]
mov ecx, eax
cmp ecx, edx
mov dword [esp + 0x10], ecx
jle 0x443be9
sub eax, edx
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x14], eax
jmp 0x443be9
mov eax, esi
cdq
sub eax, edx
mov ecx, eax
mov eax, dword [0x54886c]
cdq
sar ecx, 1
idiv ecx
mov ecx, dword [esp + 0x1c]
cdq
sub eax, edx
sar eax, 1
cmp eax, ecx
mov dword [esp + 0x10], eax
jge 0x443bd4
mov dword [esp + 0x10], ecx
jmp 0x443be5
jle 0x443be5
mov eax, dword [esp + 0x10]
sub eax, ecx
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0x10]
mov eax, dword [0x498ff4]
cdq
idiv dword [0x499014]
cmp dword [0x499008], 1
jne 0x443c03
cdq
sub eax, edx
sar eax, 1
lea eax, [eax + eax*2]
lea eax, [eax*8 + 7]
cdq
and edx, 7
add eax, edx
sar eax, 3
add eax, 3
cdq
and edx, 3
add eax, edx
mov ebx, eax
sar ebx, 2
add ebx, ebx
add ebx, ebx
mov dword [esp + 0x58], ebx
test esi, esi
jle 0x443eaf
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
add eax, ebp
dec esi
mov dword [esp + 0x24], edx
lea edx, [eax + eax*2]
shr esi, 1
lea eax, [ecx + ecx*2]
inc esi
mov dword [esp + 0x18], edx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x44], esi
jmp 0x443c60
push 0
mov byte [0x498d90], 0
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov edx, dword [esp + 0x28]
xor ecx, ecx
push eax
mov dword [esp + 0x70], edx
lea edx, [esp + 0x64]
mov dword [esp + 0x34], eax
mov eax, dword [0x498fa8]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x24]
push edx
push eax
mov dword [esp + 0x74], ecx
call dword [sym.imp.USER32.dll_FillRect]
mov ecx, dword [esp + 0x30]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [0x58fe34], 0
mov eax, dword [0x498fa8]
push 2
jne 0x443cc5
mov edx, dword [esp + 0x28]
push edx
push 0
push 0
jmp 0x443cd1
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
push ecx
push 0
push edx
push eax
call dword [sym.imp.GDI32.dll_TextOutA]
xor ecx, ecx
cmp dword [esp + 0x1c], ecx
mov dword [esp + 0x38], ecx
jle 0x443e8d
xor esi, esi
mov dword [esp + 0x3c], esi
jmp 0x443cf8
mov esi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
movzx eax, word [edi + 0x23a]
imul eax, dword [edi + 0x264]
add eax, 7
cdq
and edx, 7
add eax, edx
sar eax, 3
add eax, 3
cdq
and edx, 3
add eax, edx
mov edx, dword [edi + 0x268]
sar eax, 2
sub edx, ecx
cmp dword [0x58fe34], 0
jne 0x443d35
mov ecx, dword [esp + 0x18]
jmp 0x443d3d
sub edx, dword [esp + 0x14]
lea ecx, [ebp + ebp*2]
sub edx, dword [esp + 0x184]
dec edx
imul eax, edx
lea ecx, [ecx + eax*4]
movzx eax, word [0x498fca]
imul eax, dword [0x498ff4]
add eax, 7
cdq
and edx, 7
add eax, edx
sar eax, 3
add eax, 3
add ecx, dword [edi + 0x25c]
cdq
and edx, 3
add eax, edx
mov edx, dword [0x498ff8]
sub edx, esi
dec edx
sar eax, 2
imul eax, edx
mov edx, dword [0x498fec]
lea ebp, [edx + eax*4]
mov eax, dword [esp + 0x2c]
mov esi, ebp
sub esi, ebx
mov edi, esi
sub edi, ebx
test eax, eax
jle 0x443e66
mov dword [esp + 0x30], eax
movzx edx, byte [edi + 3]
movzx eax, byte [esi + 3]
lea eax, [edx + eax*2]
movzx edx, byte [esi + 6]
add eax, edx
movzx edx, byte [ebp + 3]
add eax, edx
movzx edx, byte [esi]
add eax, edx
movzx edx, byte [edi + 6]
lea eax, [edx + eax*2]
movzx edx, byte [ebp + 6]
add eax, edx
movzx edx, byte [edi]
add eax, edx
movzx edx, byte [ebp]
add eax, edx
sar eax, 4
cmp eax, 0xff
jle 0x443de7
mov eax, 0xff
movzx edx, byte [ecx]
mov ebx, dword [esp + 0x50]
shl edx, 8
sub edx, eax
movzx edx, byte [edx + 0x49b687]
add dl, byte [eax + ebx]
mov ebx, dword [esp + 0x48]
mov byte [ecx], dl
movzx edx, byte [ecx + 1]
inc ecx
shl edx, 8
sub edx, eax
movzx edx, byte [edx + 0x49b687]
add dl, byte [eax + ebx]
mov ebx, dword [esp + 0x5c]
mov byte [ecx], dl
movzx edx, byte [ecx + 1]
inc ecx
shl edx, 8
sub edx, eax
movzx edx, byte [edx + 0x49b687]
add dl, byte [eax + ebx]
inc ecx
cmp eax, 0x40
mov byte [ecx - 1], dl
jle 0x443e4e
cmp dword [0x52e5bc], 0
je 0x443e4e
shr byte [ecx], 2
shr byte [ecx + 1], 2
shr byte [ecx + 2], 2
add ebp, 9
add esi, 9
add edi, 9
sub dword [esp + 0x30], 1
jne 0x443da4
mov ebx, dword [esp + 0x58]
mov eax, dword [esp + 0x38]
add dword [esp + 0x3c], 3
mov edi, dword [esp + 0x40]
mov ebp, dword [esp + 0x180]
inc eax
cmp eax, dword [esp + 0x1c]
mov dword [esp + 0x38], eax
jl 0x443cf0
mov esi, dword [esp + 0x44]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x4c]
add dword [esp + 0x14], eax
add dword [esp + 0x18], ecx
add dword [esp + 0x24], 2
sub esi, 1
mov dword [esp + 0x44], esi
jne 0x443c60
mov edx, dword [esp + 0x54]
mov eax, dword [0x498fa8]
push edx
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [esp + 0x34]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [esp + 0x174]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00407f40
add esp, 0x16c
ret 0x18