Function at 0x49bd80
Capabilities:
Enumerate pe sections

Disassembly:
mov eax, 0x22ec
call fcn.005322e0
push ebx
push ebp
push esi
push edi
xor edi, edi
lea eax, [esp + 0x54]
push edi
mov ebx, ecx
push eax
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x44], edi
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edi
call fcn.0049c750
test eax, eax
je case.0x49be32.3
mov ebp, dword [esp + 0x230c]
mov ecx, dword [esp + 0x2310]
mov eax, dword [0x67a8e4]
mov esi, dword [ebp]
shr esi, 0xc
and esi, 0xf
test ecx, eax
je 0x49bde3
xor esi, esi
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x1c5]
mov byte [esp + 0x1c4], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [esp + 0x2314]
mov edi, dword [esp + 0x2308]
lea edx, [esp + 0x1c4]
push edx
push eax
push edi
call fcn.0047a4d0
mov ecx, dword [ebp]
add esp, 0xc
mov eax, ecx
shr eax, 4
and eax, 0xf
cmp eax, 6
ja case.0x49be32.3
jmp dword [eax*4 + 0x49c608]
test cl, 3
jne 0x49c07f
test edi, edi
jge 0x49bf2f
mov esi, dword [esp + 0x2304]
mov eax, dword [ebp + 8]
test esi, esi
je 0x49bed4
and ecx, 0xf0
cmp cl, 0x20
jne 0x49be6f
mov ebp, dword [ebp + 4]
lea eax, [ebp + 0x1517f]
cdq
idiv ebp
xor ecx, ecx
xor edx, edx
mov cx, word [esi + 0x16]
mov dx, word [esi + 0x14]
push eax
push ecx
xor eax, eax
push edx
mov ax, word [esi + 0x12]
xor ecx, ecx
mov cx, word [esi + 0x10]
xor edx, edx
mov dx, word [esi + 0xe]
push eax
push ecx
xor eax, eax
mov ax, word [esi + 0xa]
push edx
xor ecx, ecx
xor edx, edx
mov cx, word [esi + 8]
mov dx, word [esi + 6]
push eax
push ecx
xor eax, eax
push edx
mov ax, word [esi + 4]
xor ecx, ecx
mov cx, word [esi + 2]
xor edx, edx
mov dx, word [esi]
push eax
push ecx
push edx
lea eax, [esp + 0x32c]
push str.select__from_SrcDat_where_time_between__04d__02d__02d__02d:_02d:_02d:000000_and_2030__02d__02d__02d:_02d:_02d:999999_order_by_time_desc_limit_0__d
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x38
jmp 0x49bf02
and ecx, 0xf0
cmp cl, 0x20
jne 0x49beeb
mov ebp, dword [ebp + 4]
lea eax, [ebp + 0x1517f]
cdq
idiv ebp
push eax
lea ecx, [esp + 0x300]
push str.select__from_SrcDat_order_by_time_desc_limit_0__d
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea edx, [esp + 0x3c]
lea eax, [esp + 0x38]
push edx
lea ecx, [esp + 0x38]
push eax
lea edx, [esp + 0x304]
push ecx
lea eax, [esp + 0x60]
push edx
push eax
call fcn.00487ef0
mov ecx, eax
call fcn.00487b50
jmp case.0x49be32.3
mov eax, dword [ebp + 8]
and ecx, 0xf0
cmp cl, 0x20
jne 0x49bf49
mov ecx, dword [ebp + 4]
lea eax, [ecx + 0x1517f]
cdq
idiv ecx
mov esi, dword [esp + 0x2304]
xor ecx, ecx
push eax
xor edx, edx
mov cx, word [esi + 0x16]
mov dx, word [esi + 0x14]
xor eax, eax
push ecx
mov ax, word [esi + 0x12]
push edx
xor ecx, ecx
push eax
mov cx, word [esi + 0x10]
xor edx, edx
mov dx, word [esi + 0xe]
xor eax, eax
mov ax, word [esi + 0xc]
push ecx
push edx
xor ecx, ecx
mov cx, word [esi + 0xa]
push eax
xor edx, edx
xor eax, eax
mov dx, word [esi + 8]
mov ax, word [esi + 6]
push ecx
push edx
xor ecx, ecx
push eax
mov cx, word [esi + 4]
xor edx, edx
mov dx, word [esi + 2]
xor eax, eax
mov ax, word [esi]
push ecx
push edx
lea ecx, [esp + 0x1f4]
push eax
push ecx
lea edx, [esp + 0x334]
push str.select__time____s__from_SrcDat_where_time_between__04d__02d__02d__02d:_02d:_02d:000000_and__04d__02d__02d__02d:_02d:_02d:999999_order_by_time_desc_limit_0__d
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x40
lea eax, [esp + 0x30]
lea ecx, [esp + 0x54]
push eax
push esi
push edi
push ecx
call fcn.00488820
mov ecx, eax
call fcn.004887c0
test eax, eax
jge case.0x49be32.3
lea edx, [esp + 0x2fc]
lea eax, [esp + 0x54]
push edx
push esi
push edi
push eax
call fcn.00488820
mov ecx, eax
call fcn.004885c0
test eax, eax
jge 0x49c02e
lea ecx, [esp + 0x3c]
lea edx, [esp + 0x38]
push ecx
lea eax, [esp + 0x38]
push edx
lea ecx, [esp + 0x304]
push eax
lea edx, [esp + 0x60]
push ecx
push edx
call fcn.00487ef0
mov ecx, eax
call fcn.00487b50
jmp case.0x49be32.3
mov ebp, dword [ebp]
push edi
mov eax, ebp
shr ebp, 4
and eax, 3
and ebp, 0xf
push eax
push ebp
push str.unready_type_d_mode_d_ich_d
call fcn.00458ab0
mov ecx, dword [esp + 0x40]
mov eax, dword [0x6192d8]
add esp, 0x10
or ecx, 4
test eax, eax
mov dword [esp + 0x30], ecx
jne case.0x49be32.3
push 0
push 0
push 0x488870
push 0x6192d8
call fcn.0047ad60
add esp, 0x10
jmp case.0x49be32.3
test dword [0x67a948], ecx
je 0x49c275
mov esi, dword [esp + 0x2304]
xor ecx, ecx
xor edx, edx
xor eax, eax
mov cx, word [esi + 0x16]
mov dx, word [esi + 0x14]
mov ax, word [esi + 0x12]
push ecx
push edx
xor ecx, ecx
mov cx, word [esi + 0x10]
push eax
xor edx, edx
xor eax, eax
mov dx, word [esi + 0xe]
mov ax, word [esi + 0xc]
push ecx
push edx
xor ecx, ecx
push eax
mov cx, word [esi + 0xa]
xor edx, edx
mov dx, word [esi + 8]
xor eax, eax
mov ax, word [esi + 6]
push ecx
push edx
xor ecx, ecx
mov cx, word [esi + 4]
push eax
xor edx, edx
mov edi, dword [sym.imp.MSVCRT.dll_sprintf]
mov dx, word [esi + 2]
xor eax, eax
mov ax, word [esi]
push ecx
push edx
lea ecx, [esp + 0x1f0]
push eax
push ecx
lea edx, [esp + 0x330]
push str.select__time____s__from_SrcDat_where_time_between__04d__02d__02d__02d:_02d:_02d:000000_and__04d__02d__02d__02d:_02d:_02d:999999_
push edx
call edi
mov eax, dword [0x67a8e4]
mov ecx, dword [ebp + 0x64]
add esp, 0x3c
test eax, ecx
je 0x49c21e
xor ecx, ecx
xor edx, edx
mov cx, word [esi + 0x16]
mov dx, word [esi + 0x14]
xor eax, eax
push ecx
mov ax, word [esi + 0x12]
push edx
xor ecx, ecx
push eax
mov cx, word [esi + 0x10]
xor edx, edx
mov dx, word [esi + 0xe]
xor eax, eax
mov ax, word [esi + 0xc]
push ecx
push edx
xor ecx, ecx
mov cx, word [esi + 0xa]
push eax
xor edx, edx
xor eax, eax
mov dx, word [esi + 8]
mov ax, word [esi + 6]
push ecx
push edx
xor ecx, ecx
push eax
mov cx, word [esi + 4]
xor edx, edx
mov dx, word [esi + 2]
xor eax, eax
mov ax, word [esi]
push ecx
push edx
push eax
lea ecx, [esp + 0x132c]
push str.select_count_0__from_SrcDat_where_time_between__04d__02d__02d__02d:_02d:_02d:000000_and__04d__02d__02d__02d:_02d:_02d:999999_
push ecx
call edi
add esp, 0x38
lea edx, [esp + 0x20]
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x18]
push edx
push eax
lea edx, [esp + 0x1304]
push ecx
lea eax, [esp + 0x60]
xor esi, esi
push edx
push eax
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], esi
call fcn.00487ef0
mov ecx, eax
call fcn.00487b50
mov ebx, dword [esp + 0x18]
cmp ebx, esi
je 0x49c213
mov ecx, dword [esp + 0x1c]
cmp ecx, esi
jle 0x49c213
mov edi, dword [esp + 0x20]
cmp edi, esi
jle 0x49c213
xor eax, eax
cmp ecx, 1
mov dword [esp + 0x10], esi
jl 0x49c1f1
mov eax, dword [esp + 0x28]
cdq
idiv ecx
inc edx
imul edx, edi
lea eax, [ebx + edx*4]
mov edx, dword [eax]
lea ecx, [esp + 0x10]
push ecx
push 0x5852c8
push edx
call dword [sym.imp.MSVCRT.dll_sscanf]
mov eax, dword [esp + 0x1c]
add esp, 0xc
mov ecx, ebp
push eax
call fcn.004693a0
lea ecx, [esp + 0x14]
call fcn.00488300
jmp 0x49c220
xor esi, esi
lea ecx, [esp + 0x4c]
mov dword [esp + 0x4c], esi
push ecx
mov ecx, ebp
mov dword [esp + 0x54], esi
call fcn.004693c0
test eax, eax
je 0x49bf02
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x4c]
sub edx, eax
lea edi, [esp + 0x2fc]
inc edx
or ecx, 0xffffffff
push edx
push eax
xor eax, eax
push str._limit__d__d_
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + ecx + 0x307]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
jmp 0x49bf02
mov edx, dword [esp + 0x2310]
mov eax, dword [0x67a8e8]
test edx, eax
mov ecx, str._time__
je 0x49c28f
mov ecx, 0x59ddd8
mov eax, dword [esp + 0x2304]
xor edx, edx
mov dx, word [eax + 0x16]
push edx
xor edx, edx
mov dx, word [eax + 0x14]
push edx
xor edx, edx
mov dx, word [eax + 0x12]
push edx
xor edx, edx
mov dx, word [eax + 0x10]
push edx
xor edx, edx
mov dx, word [eax + 0xe]
push edx
xor edx, edx
mov dx, word [eax + 0xc]
push edx
xor edx, edx
mov dx, word [eax + 0xa]
push edx
xor edx, edx
mov dx, word [eax + 8]
push edx
xor edx, edx
mov dx, word [eax + 6]
push edx
xor edx, edx
mov dx, word [eax + 4]
push edx
xor edx, edx
mov dx, word [eax + 2]
push edx
xor edx, edx
mov dx, word [eax]
lea eax, [esp + 0x1f0]
push edx
push eax
push ecx
lea ecx, [esp + 0x334]
push str.select__s__s__from_SrcDat_where_time_between__04d__02d__02d__02d:_02d:_02d:000000_and__04d__02d__02d__02d:_02d:_02d:999999_
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x40
jmp 0x49bf02
mov ecx, dword [esp + 0x2314]
mov edx, dword [esp + 0x2310]
mov eax, dword [esp + 0x2304]
push ecx
push edx
push ebp
push edi
lea ecx, [esp + 0x64]
push eax
lea edx, [esp + 0x2d8]
push ecx
push edx
mov ecx, ebx
call fcn.0049b300
jmp 0x49c5d7
test cl, 3
jne 0x49c378
mov eax, dword [esp + 0x2314]
mov ecx, dword [esp + 0x2310]
mov edx, dword [esp + 0x2304]
push eax
push ecx
push ebp
push edi
lea eax, [esp + 0x64]
push edx
lea ecx, [esp + 0x1a0]
push eax
push ecx
mov ecx, ebx
call fcn.0049b300
jmp 0x49c5d7
mov eax, dword [esp + 0x2304]
xor esi, esi
mov word [esp + 0x1a], si
mov word [esp + 0x1c], si
mov cx, word [eax]
mov dx, word [eax + 2]
mov ax, word [eax + 4]
mov word [esp + 0x16], dx
mov word [esp + 0x18], ax
mov word [esp + 0x24], ax
mov eax, 0x3b
mov word [esp + 0x22], dx
mov edx, dword [esp + 0x2314]
mov word [esp + 0x28], ax
mov word [esp + 0x2a], ax
mov eax, dword [esp + 0x2310]
push edx
mov word [esp + 0x18], cx
mov word [esp + 0x24], cx
push eax
push ebp
lea ecx, [esp + 0x20]
push edi
lea edx, [esp + 0x64]
push ecx
lea eax, [esp + 0x168]
push edx
push eax
mov ecx, ebx
mov word [esp + 0x3a], si
mov word [esp + 0x42], 0x17
call fcn.0049b300
jmp 0x49c5d7
cmp esi, 1
jl case.0x49be32.3
cmp esi, 4
jg case.0x49be32.3
mov edx, dword [esp + 0x2304]
mov ax, word [edx + 2]
cmp ax, 1
jb case.0x49be32.3
cmp ax, 0xc
ja case.0x49be32.3
mov ecx, eax
and ecx, 0xffff
cmp ax, 2
mov edi, dword [ecx*4 + 0x5557cc]
mov dword [esp + 0x10], edi
jne 0x49c483
xor eax, eax
mov edi, 0x190
mov ax, word [edx]
mov dword [esp + 0x4c], eax
cdq
idiv edi
test edx, edx
je 0x49c47f
mov eax, dword [esp + 0x4c]
mov edx, eax
and edx, reloc.WS2_32.dll_closesocket
jns 0x49c471
dec edx
or edx, 0xfffffffc
inc edx
jne 0x49c483
cdq
mov edi, 0x64
idiv edi
test edx, edx
je 0x49c483
inc dword [esp + 0x10]
mov edx, dword [esp + 0x2304]
xor eax, eax
push 0x1f
push ecx
mov ax, word [edx]
lea edx, [esp + 0x304]
push eax
push 1
push ecx
push eax
mov eax, dword [esi*4 + 0x587174]
lea ecx, [esp + 0x1dc]
push eax
push ecx
push str.select__time____s__from__s_where_time_between__04d__02d__02d_00:00:00:000000_and__04d__02d__02d_23:59:59:999999_order_by_time_
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
mov eax, dword [esp + 0x38]
add esp, 0x28
lea ecx, [esp + 0x2fc]
lea edx, [esp + 0x54]
push 1
push 0
push ebp
push eax
push ecx
lea eax, [esp + 0x1bc]
push edx
push eax
jmp 0x49c5d0
cmp esi, 1
jl case.0x49be32.3
cmp esi, 4
jg case.0x49be32.3
mov ecx, dword [esp + 0x2304]
mov ax, word [ecx + 2]
cmp ax, 1
jb case.0x49be32.3
cmp ax, 4
ja case.0x49be32.3
and eax, 0xffff
mov edx, dword [esi*4 + 0x587184]
push 0x1f
lea edi, [eax + eax*2 - 2]
xor eax, eax
mov ax, word [ecx]
lea ecx, [edi + 2]
push ecx
push eax
push 1
push edi
push eax
lea eax, [esp + 0x1dc]
push edx
push eax
lea ecx, [esp + 0x31c]
push str.select__time____s__from__s_where_time_between__04d__02d__02d_00:00:00:000000_and__04d__02d__02d_23:59:59:999999_order_by_time_
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x28
lea edx, [esp + 0x2fc]
lea eax, [esp + 0x54]
lea ecx, [esp + 0x2e0]
push edi
push 1
push ebp
push 3
push edx
push eax
push ecx
jmp 0x49c5d0
cmp esi, 1
jl case.0x49be32.3
cmp esi, 4
jg case.0x49be32.3
mov edx, dword [esp + 0x2304]
xor eax, eax
push 0x1f
push 0xc
mov ax, word [edx]
lea ecx, [esp + 0x1cc]
push eax
push 1
push 1
push eax
mov eax, dword [esi*4 + 0x587184]
lea edx, [esp + 0x314]
push eax
push ecx
push str.select__time____s__from__s_where_time_between__04d__02d__02d_00:00:00:000000_and__04d__02d__02d_23:59:59:999999_order_by_time_
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x28
lea eax, [esp + 0x2fc]
lea ecx, [esp + 0x54]
lea edx, [esp + 0x170]
push 1
push 1
push ebp
push 0xc
push eax
push ecx
push edx
mov ecx, ebx
call fcn.0049baf0
mov ecx, 7
mov esi, eax
lea edi, [esp + 0x30]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x2300]
mov ecx, 7
lea esi, [esp + 0x30]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x22ec
ret 0x18