Function at 0x4995e0
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x499a0f
sub esp, 0x34
mov eax, dword [esp + 0x44]
test eax, eax
je 0x499a06
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x38]
movzx ebx, byte [edx + 5]
test bl, bl
je 0x4999ff
mov ebx, dword [edx + 0x14]
cmp ebx, ecx
jge 0x4999ff
mov dword [esp + 0x28], ebx
mov ecx, ebx
shl ebx, 1
test ebx, ebx
jle 0x4999e2
movzx ebp, byte [edx + 9]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4999ca
movzx ebp, byte [edx + 8]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4999bf
mov ebx, ecx
shl ecx, 2
lea ecx, [ecx + ebx - 1]
mov dword [esp + 0x24], ecx
movzx ebp, byte [edx + 4]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x49967c
mov ebp, dword [edx + 0x10]
cmp ebp, ecx
jle 0x49967c
movzx esi, byte [edx + 6]
xchg esi, eax
test al, al
xchg esi, eax
je 0x49999c
mov ebp, dword [edx]
mov esi, dword [ebp + 4]
mov dword [esp + 0x30], esi
mov edi, dword [ebp]
mov ebp, dword [ebp + 8]
movzx ecx, byte [edx + 8]
test cl, cl
je 0x499995
mov ecx, dword [esp + 0x54]
cmp ecx, 0x10
jbe 0x49998e
mov ecx, dword [esp + 0x50]
movzx ecx, byte [ecx + 0x10]
mov byte [esp + 0x23], cl
lea eax, [esi + 2]
cmp eax, ebp
jg 0x49994b
mov byte [edi + esi], 0x30
mov byte [edi + esi + 1], cl
xor ecx, ecx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], eax
cmp ecx, ebx
jge 0x4997c7
movzx esi, byte [edx + 9]
xchg esi, eax
test al, al
xchg esi, eax
je 0x49993a
test ecx, ecx
jle 0x499929
lea esi, [eax + 1]
cmp esi, ebp
jg 0x4998e7
mov dword [esp + 0x30], esi
mov byte [edi + eax], 0x20
movzx eax, byte [edx + 8]
test al, al
je 0x4998da
mov eax, dword [esp + 0x54]
cmp eax, 0x10
jbe 0x4998d3
mov edx, dword [esp + 0x50]
movzx ebx, byte [edx + 0x10]
mov byte [esp + 0x23], bl
lea edx, [esi + 2]
cmp edx, ebp
jg 0x49988e
mov eax, dword [esp + 0x44]
test eax, eax
mov byte [edi + esi], 0x30
mov byte [edi + esi + 1], bl
mov dword [esp + 0x30], edx
je 0x49986e
mov ebx, dword [esp + 0x48]
cmp ecx, ebx
jae 0x499867
movzx esi, byte [eax + ecx]
xchg esi, eax
mov byte [esp + 0x21], al
xchg esi, eax
xchg esi, eax
shr al, 4
xchg esi, eax
xchg esi, eax
movzx eax, al
xchg esi, eax
mov ebx, dword [esp + 0x54]
cmp esi, ebx
jae 0x499860
mov eax, dword [esp + 0x50]
movzx esi, byte [eax + esi]
xchg esi, eax
mov byte [esp + 0x23], al
xchg esi, eax
movzx ecx, byte [esp + 0x21]
and ecx, 0xf
cmp ecx, ebx
jae 0x499860
movzx ecx, byte [eax + ecx]
mov byte [esp + 0x22], cl
lea eax, [edx + 2]
cmp eax, ebp
jg 0x49981c
xchg esi, eax
mov byte [edi + edx], al
xchg esi, eax
mov byte [edi + edx + 1], cl
mov esi, dword [esp + 0x2c]
lea ecx, [esi + 1]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], eax
cmp ecx, ebx
jl 0x4996d5
mov ecx, dword [edx]
mov dword [ecx + 4], eax
mov dword [ecx + 8], ebp
mov eax, dword [0x884700]
test eax, eax
jne 0x49980a
mov dword [ecx], edi
movzx eax, byte [edx + 4]
test al, al
je 0x4997f6
mov eax, dword [edx + 0x10]
mov ecx, dword [esp + 0x24]
cmp eax, ecx
jle 0x4997f6
movzx ebx, byte [edx + 6]
test bl, bl
jne 0x4997fa
add esp, 0x34
ret
sub eax, ecx
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.00498410
jmp 0x4997f6
mov dword [esp], ecx
mov dword [esp + 4], edi
call fcn.0040d5a0
mov edx, dword [esp + 0x38]
jmp 0x4997db
lea ebx, [0x6b4b60]
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], eax
call fcn.00437660
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
add eax, 2
movzx ecx, byte [esp + 0x22]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x54]
movzx esi, byte [esp + 0x23]
jmp 0x49979f
call fcn.00424680
ud2
call fcn.00424680
ud2
mov ebx, dword [esp + 0x40]
cmp ecx, ebx
jae 0x499887
mov esi, dword [esp + 0x3c]
movzx esi, byte [esi + ecx]
mov ebx, dword [esp + 0x48]
jmp 0x499756
call fcn.00424680
ud2
lea eax, [0x6b4b60]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00437660
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea edx, [eax + 2]
mov eax, dword [esp + 0x44]
test eax, eax
mov ecx, dword [esp + 0x2c]
movzx ebx, byte [esp + 0x23]
mov esi, dword [esp + 0x30]
jmp 0x499734
call fcn.00424680
ud2
mov eax, dword [esp + 0x44]
test eax, eax
mov edx, esi
jmp 0x49973c
lea ebx, [0x6b4b60]
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.00437660
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea esi, [eax + 1]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x28]
jmp 0x4996f6
mov esi, dword [esp + 0x44]
test esi, esi
mov eax, esi
mov edx, dword [esp + 0x30]
jmp 0x49973c
mov esi, dword [esp + 0x44]
test esi, esi
mov eax, esi
mov edx, dword [esp + 0x30]
jmp 0x49973c
lea edx, [0x6b4b60]
mov dword [esp], edx
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], eax
call fcn.00437660
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
add eax, 2
movzx ecx, byte [esp + 0x23]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x28]
mov esi, dword [esp + 0x30]
jmp 0x4996bb
call fcn.00424680
ud2
mov eax, esi
jmp 0x4996c3
sub ebp, ecx
mov dword [esp + 4], ebp
mov dword [esp], edx
call fcn.00498410
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x28]
jmp 0x49967c
mov ecx, ebx
mov ebx, dword [esp + 0x28]
jmp 0x499655
movzx ebp, byte [edx + 8]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4999d7
add ebx, 2
mov ecx, ebx
mov ebx, dword [esp + 0x28]
jmp 0x499659
movzx eax, byte [edx + 4]
test al, al
jne 0x4999ee
add esp, 0x34
ret
mov eax, dword [edx + 0x10]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.00498410
jmp 0x4999ea
mov ebx, ecx
jmp 0x499624
mov ecx, dword [esp + 0x40]
jmp 0x499609
call fcn.004486b0
jmp fcn.004995e0