Function at 0x4d55a0
Capabilities:
Enumerate pe sections

Disassembly:
push ebx
push ebp
mov ebp, dword [esp + 0xc]
push esi
push edi
push ebp
call fcn.004d5530
xor edx, edx
add esp, 4
cmp eax, edx
jne 0x4d5a29
mov byte [ebp + 0x195], dl
mov ebx, dword [ebp + 0x1f0]
cmp ebx, edx
je 0x4d581d
mov al, byte [ebx]
lea esi, [ebx + 0x34]
mov byte [ebp + 0x12a], al
mov cl, byte [ebx + 1]
mov byte [ebp + 0x12b], cl
mov al, byte [ebx + 2]
mov byte [ebp + 0x12c], al
mov cl, byte [ebx + 3]
mov byte [ebp + 0x12d], cl
mov al, byte [ebx + 4]
mov byte [ebp + 0x12e], al
mov cl, byte [ebx + 5]
mov byte [ebp + 0x12f], cl
mov al, byte [ebx + 6]
mov byte [ebp + 0x130], al
mov cx, word [ebx + 8]
mov word [ebp + 0x3e4], cx
mov ax, word [ebx + 0xa]
mov word [ebp + 0x3e6], ax
mov cx, word [ebx + 0xc]
mov word [ebp + 0x3e8], cx
mov al, byte [ebx + 0xe]
mov byte [ebp + 0x3ea], al
mov cx, word [ebx + 0x10]
mov word [ebp + 0x3ec], cx
mov al, byte [ebx + 0x12]
mov byte [ebp + 0x3ee], al
mov cl, byte [ebx + 0x13]
mov byte [ebp + 0x3ef], cl
mov eax, dword [ebx + 0x14]
mov dword [ebp + 0x3f0], eax
mov ecx, dword [ebx + 0x18]
mov dword [ebp + 0x3f4], ecx
mov al, byte [ebx + 0x1c]
mov byte [ebp + 0x3f8], al
mov ecx, dword [ebx + 0x20]
mov dword [ebp + 0x3fc], ecx
mov eax, dword [ebx + 0x24]
mov dword [ebp + 0x400], eax
mov ecx, dword [ebx + 0x28]
mov dword [ebp + 0x404], ecx
mov eax, dword [ebx + 0x2c]
mov dword [ebp + 0x408], eax
mov cl, byte [ebx + 0x13]
mov byte [ebp + 0x40c], cl
mov eax, dword [ebx + 0x14]
mov dword [ebp + 0x410], eax
mov ecx, dword [ebx + 0x18]
mov dword [ebp + 0x414], ecx
mov al, byte [ebx + 0x1c]
mov byte [ebp + 0x418], al
mov ecx, dword [ebx + 0x20]
mov dword [ebp + 0x41c], ecx
mov eax, dword [ebx + 0x24]
mov dword [ebp + 0x420], eax
mov ecx, dword [ebx + 0x28]
mov dword [ebp + 0x424], ecx
mov eax, dword [ebx + 0x2c]
mov dword [ebp + 0x428], eax
mov ecx, dword [ebx + 0x14]
mov dword [ebp + 0x42c], ecx
mov eax, dword [ebx + 0x30]
lea edi, [ebp + 0x440]
mov ecx, 0xc0
mov dword [ebp + 0x43c], eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx + 0x334]
lea esi, [ebx + 0x338]
mov dword [ebp + 0x740], ecx
lea edi, [ebp + 0x744]
mov ecx, 0x40
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebx + 0x438]
mov dword [ebp + 0x844], eax
mov ecx, dword [ebx + 0x43c]
mov dword [ebp + 0x848], ecx
mov eax, dword [ebx + 0x440]
mov dword [ebp + 0x84c], eax
mov ecx, dword [ebx + 0x444]
mov dword [ebp + 0x850], ecx
mov eax, dword [ebx + 0x448]
mov dword [ebp + 0x854], eax
mov ecx, dword [ebx + 0x44c]
mov dword [ebp + 0x858], ecx
mov eax, dword [ebx + 0x450]
mov dword [ebp + 0x85c], eax
mov ecx, dword [ebx + 0x454]
mov dword [ebp + 0x860], ecx
mov eax, dword [ebx + 0x458]
mov dword [ebp + 0x864], eax
mov cl, byte [ebx + 0x45c]
mov byte [ebp + 0x868], cl
mov eax, dword [ebx + 0x460]
cmp eax, edx
mov dword [ebp + 0x86c], eax
je 0x4d57ee
push eax
call dword [ebp + 0x94]
add esp, 4
mov dword [ebp + 0x870], eax
test eax, eax
jne 0x4d57d0
push eax
mov ebx, 1
push eax
push ebx
push ebp
call fcn.004ea320
add esp, 0x10
mov eax, ebx
pop edi
pop esi
pop ebp
pop ebx
ret
mov ecx, dword [ebp + 0x86c]
mov esi, dword [ebx + 0x464]
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
xor edx, edx
rep movsb byte es:[edi], byte [esi]
mov ax, word [ebx + 0x468]
mov word [ebp + 0x874], ax
mov cx, word [ebx + 0x46a]
mov word [ebp + 0x876], cx
mov ax, word [ebx + 0x46c]
mov word [ebp + 0x878], ax
jmp 0x4d5983
mov al, byte [ebp + 0x148]
mov byte [ebp + 0x12a], 0
mov byte [ebp + 0x12b], 0
mov byte [ebp + 0x12c], 0
mov byte [ebp + 0x12d], 0
mov byte [ebp + 0x12e], 0
mov byte [ebp + 0x12f], 0
mov byte [ebp + 0x130], 0
test al, al
jne 0x4d5882
mov word [ebp + 0x3e4], dx
mov word [ebp + 0x3e6], dx
mov word [ebp + 0x3e8], dx
mov byte [ebp + 0x3ea], 0
mov word [ebp + 0x3ec], dx
mov byte [ebp + 0x3ee], 0
mov ebx, 1
mov eax, SysReAllocString
mov byte [ebp + 0x3ef], bl
mov dword [ebp + 0x3f0], ebx
mov dword [ebp + 0x3f4], eax
mov byte [ebp + 0x3f8], 0
mov dword [ebp + 0x3fc], edx
mov dword [ebp + 0x400], edx
mov dword [ebp + 0x414], eax
mov eax, dword [ebp + 0x86c]
mov dword [ebp + 0x404], edx
mov dword [ebp + 0x408], edx
mov byte [ebp + 0x40c], bl
cmp eax, edx
mov dword [ebp + 0x410], ebx
mov byte [ebp + 0x418], 0
mov dword [ebp + 0x41c], edx
mov dword [ebp + 0x420], edx
mov dword [ebp + 0x424], edx
mov dword [ebp + 0x428], edx
mov dword [ebp + 0x42c], ebx
mov dword [ebp + 0x43c], edx
mov dword [ebp + 0x740], edx
mov dword [ebp + 0x844], edx
mov dword [ebp + 0x848], edx
mov dword [ebp + 0x84c], edx
mov dword [ebp + 0x850], edx
mov dword [ebp + 0x854], edx
mov dword [ebp + 0x858], edx
mov dword [ebp + 0x85c], edx
mov dword [ebp + 0x860], edx
mov dword [ebp + 0x864], edx
mov byte [ebp + 0x868], 0
je 0x4d5968
mov ecx, dword [ebp + 0x870]
cmp ecx, edx
je 0x4d5968
push eax
push ecx
call dword [ebp + 0x98]
add esp, 8
mov dword [ebp + 0x870], 0
xor edx, edx
mov dword [ebp + 0x86c], edx
mov word [ebp + 0x874], dx
mov word [ebp + 0x876], dx
mov word [ebp + 0x878], dx
mov al, byte [ebp + 0x148]
test al, al
jne 0x4d5a27
mov esi, dword [ebp + 0x27c]
cmp esi, edx
je 0x4d5a27
mov al, byte [esi + 0x1e]
test al, al
jne 0x4d5a1c
mov eax, dword [esi + 0xc]
mov ebx, dword [esi + 8]
cmp eax, edx
je 0x4d59b5
mov dword [eax + 8], ebx
jmp 0x4d59bb
mov dword [ebp + 0x27c], ebx
cmp ebx, edx
je 0x4d59c4
mov dword [ebx + 0xc], eax
jmp 0x4d59ca
mov dword [ebp + 0x280], eax
mov eax, dword [esi + 0x50]
mov cl, byte [eax + 0x20]
test cl, cl
je 0x4d59f6
mov ecx, dword [eax + 0x1c]
cmp ecx, 2
jbe 0x4d5a2e
dec ecx
cmp esi, edx
mov dword [eax + 0x1c], ecx
je 0x4d5a18
push 0x54
push esi
call dword [ebp + 0x98]
add esp, 8
xor edx, edx
mov esi, ebx
jmp 0x4d5a1f
push eax
push ebp
call fcn.004d8cb0
add esp, 8
mov edi, eax
test esi, esi
je 0x4d5a12
push 0x54
push esi
call dword [ebp + 0x98]
add esp, 8
test edi, edi
jne 0x4d5a48
xor edx, edx
mov esi, ebx
jmp 0x4d5a1f
mov esi, dword [esi + 8]
cmp esi, edx
jne 0x4d599f
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
ret
push edx
push edx
push 0x3e7
push ebp
call fcn.004ea320
add esp, 0x10
mov eax, 0x3e7
pop edi
pop esi
pop ebp
pop ebx
ret
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
ret