Function at 0x4b8df0
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0xf00
mov eax, dword [0x5b7a9c]
xor eax, esp
mov dword [esp + 0xefc], eax
xor eax, eax
push ebx
mov word [esp + 0x1ac], ax
mov word [esp + 0x274], ax
mov eax, 1
push ebp
mov ebp, dword [esp + 0xf14]
mov dword [esp + 0xc], eax
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xf18]
xor ebx, ebx
push esi
xor ecx, ecx
xor edx, edx
push edi
mov edi, dword [esp + 0xf14]
mov dword [esp + 0x20], ebp
mov word [esp + 0x28], cx
mov word [esp + 0x348], dx
mov dword [esp + 0x10], 0x76c
mov dword [esp + 0x18], ebx
mov dword [esp + 0x24], ebx
cmp eax, 2
jne 0x4b8f4e
cmp word [edi + 0x10], 0x20
jne 0x4b9310
push 0x64
lea ecx, [esp + 0x284]
push ecx
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x30]
push edx
lea eax, [esp + 0x2c]
push eax
push str._d__d__d___d:_d_2s
push edi
call fcn.005412fb
mov eax, dword [esp + 0x34]
add esp, 0x24
cmp eax, 0x64
jge 0x4b8ec6
cmp eax, 0x32
jg 0x4b8ebd
add eax, 0x7d0
jmp 0x4b8ec2
add eax, 0x76c
mov dword [esp + 0x10], eax
push 2
push edi
call fcn.004b8c00
push 5
mov esi, eax
push str._DIR_
push esi
call fcn.005418b5
add esp, 0x14
test eax, eax
jne 0x4b8ef0
or dword [ebp + 0x410], 0x4000
jmp 0x4b8f05
add ebp, 0x414
push ebp
push 0x5832ec
push esi
call fcn.005412fb
add esp, 0xc
push 1
push esi
call fcn.004b8c00
push eax
lea ecx, [esp + 0x354]
push 0x1f5
push ecx
call fcn.0054013c
add esp, 0x14
mov esi, dword [esp + 0x20]
mov ebp, 1
mov eax, dword [esp + 0x10]
cmp eax, 0x3e8
jge 0x4b98af
cmp eax, 0x32
jg 0x4b98a6
add eax, 0x7d0
jmp 0x4b98ab
cmp eax, 3
jne 0x4b9167
mov ebp, edi
cmp word [0x5ed830], bx
je 0x4b8f9f
movzx eax, word [edi]
mov edx, 0x20
cmp dx, ax
je 0x4b8f79
mov ecx, 9
cmp cx, ax
jne 0x4b8f9f
push edi
push 0x1f5
push 0x5ed830
call fcn.005400bf
mov edx, dword [esp + 0xf24]
push 0x5ed830
push edx
push edi
call fcn.0054013c
add esp, 0x18
movzx eax, word [edi]
xor ecx, ecx
cmp ax, bx
je 0x4b9036
lea ecx, [ecx]
cmp ax, 0x3b
je 0x4b8fd1
add edi, 2
mov word [esp + ecx*2 + 0x348], ax
movzx eax, word [edi]
inc ecx
cmp ax, bx
jne 0x4b8fb0
xor eax, eax
jmp 0x4b993c
cmp word [edi], bx
je 0x4b9036
xor eax, eax
cmp ecx, 4
mov word [esp + ecx*2 + 0x348], ax
jle 0x4b9011
lea esi, [esp + ecx*2 + 0x340]
push str..DIR
push esi
call fcn.005408be
add esp, 8
test eax, eax
jne 0x4b9011
mov eax, dword [esp + 0x20]
or dword [eax + 0x410], 0x4000
xor ecx, ecx
mov word [esi], cx
push 1
push edi
call fcn.004b8c00
mov esi, eax
add esp, 8
cmp word [esi], bx
jne 0x4b903d
push ebp
push 0x1f5
push 0x5ed830
call fcn.0054013c
add esp, 0xc
xor eax, eax
jmp 0x4b993c
xor edx, edx
mov word [0x5ed830], dx
xor eax, eax
jmp 0x4b9050
movzx ecx, word [esi]
cmp cx, 0x30
jb 0x4b90fd
cmp cx, 0x39
ja 0x4b90fd
mov cl, byte [esi]
add esi, 2
mov byte [esp + eax + 0xf0], cl
movzx ecx, word [esi]
cmp cx, 0x30
jb 0x4b90ed
cmp cx, 0x39
ja 0x4b90ed
mov dl, byte [esi]
add esi, 2
mov byte [esp + eax + 0xf1], dl
movzx ecx, word [esi]
cmp cx, 0x30
jb 0x4b90f0
cmp cx, 0x39
ja 0x4b90f0
mov cl, byte [esi]
add esi, 2
mov byte [esp + eax + 0xf2], cl
movzx ecx, word [esi]
cmp cx, 0x30
jb 0x4b90f5
cmp cx, 0x39
ja 0x4b90f5
mov dl, byte [esi]
add esi, 2
mov byte [esp + eax + 0xf3], dl
movzx ecx, word [esi]
cmp cx, 0x30
jb 0x4b90fa
cmp cx, 0x39
ja 0x4b90fa
mov cl, byte [esi]
mov byte [esp + eax + 0xf4], cl
add eax, 5
add esi, 2
cmp eax, 0x14
jl 0x4b9050
jmp 0x4b90fd
inc eax
jmp 0x4b90fd
add eax, 2
jmp 0x4b90fd
add eax, 3
jmp 0x4b90fd
add eax, 4
lea edx, [esp + 0xf0]
push edx
mov byte [esp + eax + 0xf4], bl
call fcn.00540e69
mov ecx, dword [esp + 0x24]
add esp, 4
shl eax, 9
mov dword [ecx + 0x414], eax
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x18]
push ecx
push 0x64
lea edx, [esp + 0x38]
push edx
lea eax, [esp + 0x30]
push eax
push str._d__3s__d__2d:_2d
push 1
push esi
call fcn.004b8c00
add esp, 8
push eax
call fcn.005412fb
add esp, 0x20
lea esi, [esp + 0x28]
call fcn.004b8c70
mov dword [esp + 0x14], eax
jmp 0x4b8f23
cmp eax, 4
jne 0x4b9310
movzx eax, word [edi]
cmp ax, bx
je 0x4b9036
mov ecx, 0x20
cmp cx, ax
je 0x4b9036
mov edx, 9
cmp dx, ax
je 0x4b9036
push 0x1f5
lea eax, [esp + 0x34c]
push eax
push str._500s
push edi
call fcn.005412fb
push 1
push edi
call fcn.004b8c00
push 0x1f5
lea ecx, [esp + 0x750]
push ecx
mov esi, eax
push str._500s
push esi
call fcn.005412fb
lea edx, [edi + 0x12]
add esp, 0x28
cmp edx, esi
jne 0x4b923b
push 0x5770a4
lea eax, [esp + 0x34c]
push 0x1f5
push eax
call fcn.005400bf
lea ecx, [esp + 0x740]
push ecx
lea edx, [esp + 0x358]
push 0x1f5
push edx
call fcn.005400bf
push 1
push esi
call fcn.004b8c00
mov ecx, dword [esp + 0xf38]
mov esi, eax
sub eax, edi
sar eax, 1
sub ecx, eax
push ecx
lea edx, [esp + 0x758]
push edx
push str._500s
push esi
call fcn.005412fb
add esp, 0x30
lea eax, [esp + 0x734]
push str._DIR_
push eax
call fcn.005408be
add esp, 8
test eax, eax
jne 0x4b9260
or dword [ebp + 0x410], 0x4000
jmp 0x4b92b3
mov ax, word [esp + 0x734]
lea ecx, [esp + 0x734]
lea edx, [esp + 0xb20]
cmp ax, bx
je 0x4b9298
movzx eax, ax
mov edi, edi
cmp ax, 0x2c
je 0x4b928c
mov word [edx], ax
add edx, 2
movzx eax, word [ecx + 2]
add ecx, 2
cmp ax, bx
jne 0x4b9280
xor ecx, ecx
mov word [edx], cx
lea edx, [esp + 0xb20]
push edx
call fcn.00540de3
add esp, 4
mov dword [ebp + 0x414], eax
push 1
push esi
call fcn.004b8c00
mov esi, eax
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x24]
push edx
push str._d__d__d
push esi
call fcn.005412fb
add esp, 0x1c
push 0x64
lea eax, [esp + 0x284]
push eax
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x24]
push edx
push str._2d:_2d_2s
push 1
push esi
call fcn.004b8c00
add esp, 8
push eax
call fcn.005412fb
add esp, 0x18
jmp 0x4b8f23
movzx eax, word [edi]
mov ecx, 0x20
cmp cx, ax
je 0x4b9327
mov edx, 9
cmp dx, ax
jne 0x4b932c
add edi, 2
jmp 0x4b9310
push 0x64
lea eax, [esp + 0x1bc]
push eax
push str._11s
push edi
call fcn.005412fb
lea eax, [esp + 0x1c8]
add esp, 0x10
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4b9350
sub eax, edx
sar eax, 1
mov ebx, eax
mov ebp, 4
cmp ebx, 0xa
je 0x4b93e7
cmp ebx, 0xb
je 0x4b93e7
cmp ebx, 3
jne 0x4b93a2
mov ax, word [esp + 0x1b8]
mov ecx, 0x2d
cmp cx, ax
je 0x4b939b
mov edx, 0x64
cmp dx, ax
je 0x4b939b
mov ecx, 0x6c
cmp cx, ax
jne 0x4b93a2
mov ebp, 1
jmp 0x4b93e7
movzx eax, word [edi]
xor ebx, ebx
mov ecx, edi
test ax, ax
je 0x4b9036
movzx eax, ax
cmp ax, 0x20
je 0x4b93d4
cmp ax, 0x30
jb 0x4b93c7
cmp ax, 0x39
jbe 0x4b93d4
movzx eax, word [ecx + 2]
add ecx, 2
inc ebx
test ax, ax
jne 0x4b93b5
cmp ebx, 0xa
je 0x4b93e2
cmp ebx, 0xb
jne 0x4b9036
mov ebp, 3
push 3
push edi
call fcn.004b8c00
mov edx, 0x20
add esp, 8
cmp dx, word [eax + 6]
jne 0x4b9413
mov ecx, dword [eax]
mov dword [esp + 0x28], ecx
mov dx, word [eax + 4]
xor eax, eax
mov word [esp + 0x2c], dx
mov word [esp + 0x2e], ax
lea esi, [esp + 0x28]
call fcn.004b8c70
test eax, eax
je 0x4b942e
xor ecx, ecx
mov ebp, 2
mov word [esp + 0x28], cx
jmp 0x4b945c
lea edx, [ebp + 1]
push edx
push edi
call fcn.004b8c00
add esp, 8
mov ecx, eax
call fcn.004b8dc0
test eax, eax
je 0x4b945c
push ebp
push edi
call fcn.004b8c00
add esp, 8
mov ecx, eax
call fcn.004b8dc0
test eax, eax
jne 0x4b945c
dec ebp
push ebp
push edi
call fcn.004b8c00
mov esi, eax
mov eax, dword [esp + 0x28]
add eax, 0x414
push eax
push 0x574b14
push esi
call fcn.005412fb
push 1
push esi
call fcn.004b8c00
add esp, 0x1c
xor ecx, ecx
mov edi, eax
lea ebp, [ecx + 1]
lea esp, [esp]
movzx eax, word [edi + ecx*2]
cmp ax, 0x30
jb 0x4b94a0
cmp ax, 0x39
jbe 0x4b94a6
cmp ax, 0x2e
jne 0x4b94cf
add ecx, ebp
cmp ecx, 0xa
jl 0x4b9490
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x18]
push eax
push str._4d._2d._2d
push edi
call fcn.005412fb
add esp, 0x14
jmp 0x4b970c
xor ecx, ecx
movzx eax, word [edi + ecx*2]
cmp ax, 0x30
jb 0x4b94e1
cmp ax, 0x39
jbe 0x4b94e7
cmp ax, 0x2d
jne 0x4b954c
add ecx, ebp
cmp ecx, 0xa
jl 0x4b94d1
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x18]
push eax
push str._4d__2d__2d
push edi
call fcn.005412fb
push ebp
push edi
call fcn.004b8c00
mov esi, eax
push 0x3a
push esi
call fcn.0054068a
add esp, 0x24
test eax, eax
je 0x4b970c
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0x5731e8
push esi
call fcn.005412fb
add esp, 0x10
cmp eax, 2
jne 0x4b970c
mov edi, esi
jmp 0x4b970c
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x24]
push edx
push str._02d__02d__04d
push edi
call fcn.005412fb
add esp, 0x14
cmp eax, 3
jne 0x4b957f
push ebp
push edi
call fcn.004b8c00
add esp, 8
mov edi, eax
jmp 0x4b970c
lea eax, [esp + 0x1c]
push eax
push 0x64
lea ecx, [esp + 0x30]
push ecx
push str._3s__2d
push edi
call fcn.005412fb
add esp, 0x14
lea esi, [esp + 0x28]
call fcn.004b8c70
mov dword [esp + 0x14], eax
test eax, eax
jne 0x4b95d0
mov edx, esi
push edx
call fcn.00540de3
add esp, 4
cmp eax, ebp
jge 0x4b95bf
mov dword [esp + 0x14], ebp
jmp 0x4b95d0
lea eax, [esp + 0x28]
push eax
call fcn.00540de3
add esp, 4
mov dword [esp + 0x14], eax
push 2
push edi
call fcn.004b8c00
push 0x64
lea ecx, [esp + 0xfc]
push ecx
mov edi, eax
push 0x583210
push edi
call fcn.005412fb
lea edx, [esp + 0x108]
push 0x3a
push edx
call fcn.0054068a
add esp, 0x20
test eax, eax
je 0x4b96f8
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0xf8]
push 0x5731e8
push edx
call fcn.005412fb
mov edx, dword [esp + 0xf34]
movzx ecx, word [edx + 2]
movzx eax, word [edx]
add esp, 0x10
mov dword [esp + 0x10], eax
cmp cx, 6
jbe 0x4b96a5
mov esi, dword [esp + 0x14]
cmp esi, 6
jg 0x4b970c
movzx eax, cx
sub eax, esi
cmp eax, 6
jle 0x4b9660
add dword [esp + 0x10], ebp
jmp 0x4b970c
jne 0x4b970c
movzx eax, word [edx + 6]
mov ecx, dword [esp + 0x1c]
cmp eax, ecx
jle 0x4b967b
add dword [esp + 0x10], ebp
jmp 0x4b970c
jne 0x4b970c
movzx eax, word [edx + 8]
mov ecx, dword [esp + 0x18]
cmp eax, ecx
jle 0x4b9693
add dword [esp + 0x10], ebp
jmp 0x4b970c
jne 0x4b970c
movzx ecx, word [edx + 0xa]
cmp ecx, dword [esp + 0x24]
jle 0x4b970c
add dword [esp + 0x10], ebp
jmp 0x4b970c
mov eax, dword [esp + 0x14]
cmp eax, 6
jle 0x4b970c
movzx ecx, cx
sub eax, ecx
cmp eax, 6
jle 0x4b96be
sub dword [esp + 0x10], ebp
jmp 0x4b970c
jne 0x4b970c
movzx eax, word [edx + 6]
mov ecx, dword [esp + 0x1c]
cmp ecx, eax
jle 0x4b96d2
sub dword [esp + 0x10], ebp
jmp 0x4b970c
jne 0x4b970c
movzx eax, word [edx + 8]
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jle 0x4b96e6
sub dword [esp + 0x10], ebp
jmp 0x4b970c
jne 0x4b970c
movzx edx, word [edx + 0xa]
cmp dword [esp + 0x24], edx
jle 0x4b970c
sub dword [esp + 0x10], ebp
jmp 0x4b970c
lea eax, [esp + 0xf0]
push eax
call fcn.00540de3
add esp, 4
mov dword [esp + 0x10], eax
push ebp
push edi
call fcn.004b8c00
push eax
lea ecx, [esp + 0x354]
push 0x1f5
push ecx
call fcn.0054013c
add esp, 0x14
cmp dword [esp + 0xf28], 0
jne 0x4b97b5
mov ecx, 0x5770a4
lea eax, [esp + 0x348]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b9769
test dx, dx
je 0x4b9765
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b9769
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b9743
xor eax, eax
jmp 0x4b976e
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4b9036
mov ecx, 0x57805c
lea eax, [esp + 0x348]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b97a8
test dx, dx
je 0x4b97a4
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b97a8
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b9782
xor eax, eax
jmp 0x4b97ad
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4b9036
mov ax, word [esp + 0x1b8]
mov edx, 0x64
cmp dx, ax
jne 0x4b9812
cmp ebx, 3
jne 0x4b97ff
lea eax, [esp + 0x348]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4b97d6
sub eax, edx
sar eax, 1
cmp eax, ebp
jle 0x4b97ff
lea eax, [esp + eax*2 + 0x346]
mov ecx, 0x2f
cmp cx, word [eax]
jne 0x4b97ff
xor edx, edx
mov word [eax], dx
mov esi, dword [esp + 0x20]
or dword [esi + 0x410], 0x4000
jmp 0x4b988f
mov esi, dword [esp + 0x20]
mov ecx, 0x6c
cmp cx, ax
jne 0x4b988f
or dword [esi + 0x410], 0xa000
lea eax, [esp + 0x348]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4b9834
sub eax, edx
sar eax, 1
xor ecx, ecx
test eax, eax
jle 0x4b988f
lea esp, [esp]
mov edx, 0x20
cmp dx, word [esp + ecx*2 + 0x348]
jne 0x4b987d
mov edx, 0x2d
cmp dx, word [esp + ecx*2 + 0x34a]
jne 0x4b987d
mov edx, 0x3e
cmp dx, word [esp + ecx*2 + 0x34c]
je 0x4b9885
add ecx, ebp
cmp ecx, eax
jl 0x4b9850
jmp 0x4b988f
xor eax, eax
mov word [esp + ecx*2 + 0x348], ax
xor ecx, ecx
cmp cx, word [esp + 0x348]
jne 0x4b8f2c
xor eax, eax
jmp 0x4b993c
add eax, 0x76c
mov dword [esp + 0x10], eax
mov cx, word [esp + 0x280]
mov edx, 0x70
lea edi, [edx - 0x64]
cmp dx, cx
je 0x4b98ce
mov edx, 0x50
cmp dx, cx
jne 0x4b98d8
cmp dword [esp + 0x18], edi
jge 0x4b98d8
add dword [esp + 0x18], edi
mov cx, word [esp + 0x1c]
mov dx, word [esp + 0x18]
mov word [esi + 0x418], ax
movzx eax, word [esp + 0x14]
mov word [esi + 0x41e], cx
lea ecx, [esp + 0x348]
push ecx
mov word [esi + 0x41a], ax
movzx eax, word [esp + 0x28]
push 0x208
push esi
mov word [esi + 0x420], dx
mov word [esi + 0x422], ax
call fcn.0054013c
lea edx, [esp + 0x1c4]
push edx
push edi
add esi, 0x428
push esi
call fcn.0054013c
add esp, 0x18
mov eax, ebp
mov ecx, dword [esp + 0xf0c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0053fa67
add esp, 0xf00
ret