Function at 0x481770
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x1c
push ebx
mov ebx, dword [esp + 0x24]
lea eax, [esp + 0x18]
push ebp
push esi
push edi
mov edi, dword [esp + 0x34]
xor esi, esi
push eax
push ebx
mov dword [esp + 0x18], esi
mov dword [edi + 0x24], 0x80000
mov dword [edi + 0x28], str.mtree
mov dword [esp + 0x30], esi
call fcn.0047f030
xor eax, eax
mov dword [esp + 0x28], 1
mov dword [esp + 0x24], eax
lea eax, [esp + 0x20]
push 0x10000
push eax
push edi
push ebx
call fcn.00481ba0
mov ebp, eax
add esp, 0x18
test ebp, ebp
je 0x481ac4
js 0x481b6a
mov edi, dword [esp + 0x18]
mov al, byte [edi]
cmp al, 0x20
je 0x4817e2
cmp al, 9
jne 0x4817e6
inc edi
dec ebp
jmp 0x4817d8
mov dword [esp + 0x18], edi
cmp al, 0x23
je 0x481a98
cmp al, 0xd
je 0x481a98
cmp al, 0xa
je 0x481a98
test al, al
je 0x481a98
mov ebx, edi
lea eax, [ebx - 1]
add eax, ebp
mov dword [esp + 0x14], eax
cmp ebx, eax
jae 0x481840
nop dword [eax]
movzx eax, byte [ebx]
push eax
call fcn.0068a7a0
add esp, 4
test eax, eax
jne 0x481839
cmp byte [ebx], 9
jne 0x481b23
inc ebx
cmp ebx, dword [esp + 0x14]
jb 0x481820
cmp byte [edi], 0x2f
je 0x48186d
push dword [esp + 0x24]
mov ebx, dword [esp + 0x34]
lea eax, [esp + 0x2c]
push eax
push ebp
push edi
lea eax, [esp + 0x20]
push eax
push dword [esp + 0x48]
push ebx
call fcn.00481270
add esp, 0x1c
mov ebp, eax
jmp 0x481a94
cmp ebp, 4
jle 0x48198f
push 4
push str._set
push edi
call fcn.00689f90
add esp, 0xc
test eax, eax
jne 0x48198f
mov al, byte [edi + 4]
add edi, 4
cmp al, 0x20
je 0x4818a0
cmp al, 9
jne 0x481b23
push str.__t_r_n
push edi
call fcn.0068ac20
add esp, 8
cmp byte [edi + eax], 0
lea ebx, [edi + eax]
je 0x481a8e
nop dword [eax + eax]
push str.__t_r_n
mov ebp, ebx
push ebx
mov dword [esp + 0x1c], ebp
call fcn.006823c0
mov edi, eax
push 0x3d
push ebp
add ebx, edi
call fcn.0067dfd0
add esp, 0x10
cmp eax, ebx
jbe 0x4818e8
mov eax, ebp
jmp 0x4818f0
mov edi, eax
mov eax, dword [esp + 0x14]
sub edi, eax
xor ebp, ebp
test esi, esi
je 0x481943
push edi
push eax
push dword [esi + 4]
call fcn.00689f90
add esp, 0xc
test eax, eax
jne 0x481915
mov eax, dword [esi + 4]
mov al, byte [edi + eax]
test al, al
je 0x481923
cmp al, 0x3d
je 0x481923
mov ebp, esi
mov esi, dword [esi]
test esi, esi
je 0x481943
mov eax, dword [esp + 0x14]
jmp 0x4818f6
mov eax, dword [esi]
test ebp, ebp
jne 0x48192f
mov dword [esp + 0x10], eax
jmp 0x481932
mov dword [ebp], eax
push dword [esi + 4]
call fcn.00687807
push esi
call fcn.00687807
add esp, 8
mov ebp, dword [esp + 0x14]
mov eax, ebx
sub eax, ebp
push eax
push ebp
lea eax, [esp + 0x18]
push eax
push dword [esp + 0x3c]
call fcn.0047eb10
mov ebp, eax
add esp, 0x10
test ebp, ebp
jne 0x481986
push str.__t_r_n
push ebx
call fcn.0068ac20
mov esi, dword [esp + 0x18]
add ebx, eax
add esp, 8
cmp byte [ebx], 0
jne 0x4818c0
jmp 0x481a8e
mov esi, dword [esp + 0x10]
jmp 0x481a90
cmp ebp, 6
jle 0x481b23
push 6
push str._unset
push edi
call fcn.00689f90
add esp, 0xc
test eax, eax
jne 0x481b23
mov al, byte [edi + 6]
add edi, 6
cmp al, 0x20
je 0x4819c2
cmp al, 9
jne 0x481b23
push 0x3d
push edi
call fcn.0067dfd0
add esp, 8
test eax, eax
je 0x4819ef
mov ebx, dword [esp + 0x30]
push str._unset_shall_not_contain__
push 0xffffffffffffffff
push ebx
call fcn.00469db0
add esp, 0xc
mov ebp, 0xffffffe2
jmp 0x481a94
push str.__t_r_n
push edi
call fcn.0068ac20
add esp, 8
cmp byte [edi + eax], 0
lea ebx, [edi + eax]
je 0x481a8e
nop word [eax + eax]
push str.__t_r_n
push ebx
call fcn.006823c0
mov ebp, eax
add esp, 8
cmp ebp, 3
jne 0x481a61
push eax
push 0x6afc4c
push ebx
call fcn.00689f90
add esp, 0xc
test eax, eax
jne 0x481a61
test esi, esi
je 0x481a59
nop dword [eax]
push dword [esi + 4]
mov edi, dword [esi]
call fcn.00687807
push esi
call fcn.00687807
add esp, 8
mov esi, edi
test edi, edi
jne 0x481a40
xor esi, esi
mov dword [esp + 0x10], esi
jmp 0x481a74
push ebp
lea eax, [esp + 0x14]
push ebx
push eax
call fcn.00481d00
mov esi, dword [esp + 0x1c]
add esp, 0xc
lea edi, [ebx + ebp]
push str.__t_r_n
push edi
call fcn.0068ac20
add esp, 8
cmp byte [edi + eax], 0
lea ebx, [edi + eax]
jne 0x481a10
xor ebp, ebp
mov ebx, dword [esp + 0x30]
test ebp, ebp
jne 0x481af3
mov edi, dword [esp + 0x34]
lea eax, [esp + 0x18]
add dword [esp + 0x20], 1
push 0x10000
adc dword [esp + 0x20], 0
push eax
push edi
push ebx
call fcn.00481ba0
mov ebp, eax
add esp, 0x10
test ebp, ebp
jne 0x4817ce
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x30], eax
test esi, esi
je 0x481ae9
nop
push dword [esi + 4]
mov edi, dword [esi]
call fcn.00687807
push esi
call fcn.00687807
add esp, 8
mov esi, edi
test edi, edi
jne 0x481ad0
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x1c
ret
test esi, esi
je 0x481b89
nop dword [eax + eax]
push dword [esi + 4]
mov edi, dword [esi]
call fcn.00687807
push esi
call fcn.00687807
add esp, 8
mov esi, edi
test edi, edi
jne 0x481b00
pop edi
pop esi
mov eax, ebp
pop ebp
pop ebx
add esp, 0x1c
ret
mov eax, dword [esp + 0x1c]
push eax
mov eax, dword [esp + 0x24]
push eax
push str.Cant_parse_line__ju
push 0x2a
push dword [esp + 0x40]
call fcn.00469db0
add esp, 0x14
test esi, esi
je 0x481b5d
push dword [esi + 4]
mov edi, dword [esi]
call fcn.00687807
push esi
call fcn.00687807
add esp, 8
mov esi, edi
test edi, edi
jne 0x481b44
pop edi
pop esi
pop ebp
mov eax, 0xffffffe2
pop ebx
add esp, 0x1c
ret
test esi, esi
je 0x481b89
nop
push dword [esi + 4]
mov edi, dword [esi]
call fcn.00687807
push esi
call fcn.00687807
add esp, 8
mov esi, edi
test edi, edi
jne 0x481b70
pop edi
pop esi
mov eax, ebp
pop ebp
pop ebx
add esp, 0x1c
ret