Function at 0x747480
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword [0xf33f68]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x218]
cmp eax, dword [ecx + 8]
jbe 0x747a82
sub esp, 0x298
mov ecx, dword [esp + 0x29c]
movzx edx, byte [ecx + 0x295]
test dl, dl
je 0x747610
lea edi, [esp + 0x40]
xor eax, eax
call fcn.0046ca76
lea edi, [esp + 0x98]
call fcn.0046ca76
lea ecx, [0x79fba0]
mov dword [esp], ecx
lea edx, [esp + 0x98]
mov dword [esp + 4], edx
call fcn.005039d0
mov ecx, dword [esp + 8]
mov dword [esp + 0x7c], ecx
mov edx, dword [esp + 0x29c]
mov dword [esp], edx
mov ebx, dword [esp + 0x2a0]
mov dword [esp + 4], ebx
call fcn.00736060
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x29c]
mov dword [esp], edx
lea ebx, [0x764f00]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x40]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x10], ecx
call fcn.00736d20
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x7475f7
lea eax, [0x79fba0]
mov dword [esp], eax
lea eax, [esp + 0x40]
mov dword [esp + 4], eax
call fcn.0040ac00
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 8]
test eax, eax
setne al
test ecx, ecx
setne cl
or ecx, eax
test cl, cl
je 0x7475ee
lea edi, [esp + 0x1a0]
xor eax, eax
call fcn.0046ca44
mov ecx, dword [esp + 0x29c]
mov ebx, dword [ecx + 0x78]
lea ebp, [0x7b0bc0]
cmp ebx, ebp
jne 0x747a6b
mov dword [esp + 0x294], edx
mov esi, dword [ecx + 0x7c]
lea edi, [esp + 0x1a0]
call fcn.0046cd38
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x1b8]
mov edx, dword [esp + 0x29c]
mov dword [esp], edx
sub eax, ecx
mov dword [esp + 4], eax
call fcn.00736060
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x29c]
xor edx, edx
lea ebx, [0xf33e00]
xor ebp, ebp
jmp 0x7478e3
xor eax, eax
xor ecx, ecx
jmp 0x7478be
mov eax, dword [esp + 0x18]
mov dword [esp + 0x2a8], ecx
mov dword [esp + 0x2ac], eax
add esp, 0x298
ret
lea edi, [esp + 0x28]
xor eax, eax
call fcn.0046ca7a
lea edi, [esp + 0x80]
call fcn.0046ca7a
lea ecx, [0x79fb00]
mov dword [esp], ecx
lea edx, [esp + 0x80]
mov dword [esp + 4], edx
call fcn.005039d0
mov ecx, dword [esp + 8]
mov dword [esp + 0x7c], ecx
mov edx, dword [esp + 0x29c]
mov dword [esp], edx
mov ebx, dword [esp + 0x2a0]
mov dword [esp + 4], ebx
call fcn.00736060
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x29c]
mov dword [esp], edx
lea ebx, [0x764ec0]
mov dword [esp + 4], ebx
lea ebx, [esp + 0x28]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x10], ecx
call fcn.00736d20
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x74773b
lea eax, [0x79fb00]
mov dword [esp], eax
lea eax, [esp + 0x28]
mov dword [esp + 4], eax
call fcn.0040ac00
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 8]
test eax, eax
je 0x747735
mov dword [esp + 0x294], ecx
lea edi, [esp + 0xc0]
xor eax, eax
call fcn.0046ca48
mov ecx, dword [esp + 0x29c]
mov edx, dword [ecx + 0x78]
lea ebx, [0x7b0f40]
cmp edx, ebx
jne 0x7478a8
mov esi, dword [ecx + 0x7c]
lea edi, [esp + 0xc0]
call fcn.0046cd60
mov eax, dword [esp + 0x34]
sub eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00736060
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x29c]
xor edx, edx
lea ebx, [0xf33e00]
xor ebp, ebp
jmp 0x7477ca
xor eax, eax
xor edx, edx
jmp 0x747754
mov eax, dword [esp + 0x18]
mov dword [esp + 0x2a8], ecx
mov dword [esp + 0x2ac], eax
add esp, 0x298
ret
lea ebx, [0x79fb00]
mov ebp, dword [esp + 0x29c]
mov dword [ebp + 0x128], ebx
mov dword [ebp + 0x130], eax
mov eax, dword [0xf34078]
test eax, eax
je 0x747793
call fcn.0046c800
mov dword [edi], ecx
mov eax, dword [ebp + 0x12c]
mov dword [edi + 4], eax
mov dword [edi + 8], edx
mov eax, dword [ebp + 0x134]
mov dword [edi + 0xc], eax
mov dword [ebp + 0x12c], ecx
mov dword [ebp + 0x134], edx
mov byte [ebp + 0x2a4], 1
mov dword [esp + 0x2a8], 0
mov dword [esp + 0x2ac], 0
add esp, 0x298
ret
mov dword [ebx + ebp*4 - 4], edi
add eax, 4
mov esi, dword [ecx + 0x2ac]
add esi, 0xfffffffc
cmp eax, esi
jbe 0x7477e1
mov esi, dword [0xed1398]
xor edi, edi
jmp 0x747818
mov esi, dword [ecx + 0x28c]
cmp eax, esi
ja 0x7478a1
mov edi, dword [ecx + 0x290]
sub esi, eax
sub edi, eax
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, eax
cmp esi, 3
jbe 0x747895
mov esi, dword [ecx + 0x288]
mov edi, dword [esi + edi]
xor esi, esi
test esi, esi
jne 0x74786f
test edi, edi
je 0x74786f
inc ebp
cmp edx, ebp
jae 0x7477c3
mov dword [esp + 0x70], edi
mov dword [esp + 0x68], eax
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x776980]
mov dword [esp + 0x10], eax
call fcn.00450c90
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x29c]
mov edi, dword [esp + 0x70]
jmp 0x7477c3
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
call fcn.0040ae50
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x294]
lea eax, [0x76bfa0]
jmp 0x747754
mov eax, 3
mov ecx, esi
call fcn.0046c850
mov ecx, esi
call fcn.0046c8c0
mov dword [esp], edx
mov dword [esp + 4], ebx
lea eax, [0x778160]
mov dword [esp + 8], eax
call fcn.0040aa00
lea ebx, [0x79fba0]
mov ebp, edx
mov edx, ecx
mov ecx, ebp
jmp 0x74775a
lea edi, [ebx + ebp*8 - 8]
mov dword [edi], eax
mov dword [edi + 4], esi
mov ecx, dword [esp + 0x29c]
mov eax, dword [esp + 0x78]
lea esi, [eax + 8]
mov dword [esp + 0x78], esi
cmp dword [ecx + 0x2ac], esi
jae 0x747907
mov edi, dword [0xed1398]
xor eax, eax
xor eax, eax
mov dword [esp + 0x24], eax
xor eax, eax
jmp 0x7479ce
mov edi, dword [ecx + 0x28c]
cmp eax, edi
ja 0x747a64
mov esi, dword [ecx + 0x290]
sub edi, eax
sub esi, eax
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and eax, esi
cmp edi, 7
jbe 0x747a58
mov dword [esp + 0x6c], edx
mov dword [esp + 0x290], ebx
mov esi, dword [ecx + 0x288]
movzx edi, byte [esi + eax]
movzx ecx, byte [esi + eax + 1]
mov dword [esp + 0x74], ecx
shl ecx, 8
or edi, ecx
mov ebx, dword [esp + 0x74]
shr ebx, 0x18
movzx ecx, byte [esi + eax + 2]
mov dword [esp + 0x74], ecx
shr ecx, 0x10
or ecx, ebx
mov ebx, dword [esp + 0x74]
shl ebx, 0x10
or edi, ebx
movzx ebx, byte [esi + eax + 3]
mov dword [esp + 0x74], ebx
shr ebx, 8
or ebx, ecx
mov edx, dword [esp + 0x74]
shl edx, 0x18
movzx ecx, byte [esi + eax + 4]
or ecx, ebx
movzx ebx, byte [esi + eax + 5]
shl ebx, 8
or ecx, ebx
movzx ebx, byte [esi + eax + 6]
shl ebx, 0x10
or ecx, ebx
movzx ebx, byte [esi + eax + 7]
shl ebx, 0x18
or edx, edi
or ebx, ecx
mov ecx, dword [esp + 0x29c]
mov esi, dword [esp + 0x78]
xor edi, edi
mov eax, edx
mov dword [esp + 0x24], ebx
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0x290]
test edi, edi
jne 0x747a32
test eax, eax
xchg edi, ebx
sete bl
xchg edi, ebx
mov esi, dword [esp + 0x24]
test esi, esi
sete cl
and ecx, edi
test cl, cl
jne 0x747a32
inc ebp
cmp edx, ebp
jae 0x7478cf
mov dword [esp + 0x20], eax
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
lea eax, [0x776a00]
mov dword [esp + 0x10], eax
call fcn.00450c90
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x24]
jmp 0x7478cf
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
call fcn.0040ae50
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x294]
lea eax, [0x76c020]
jmp 0x7478be
mov eax, 7
mov ecx, edi
call fcn.0046c850
mov ecx, edi
call fcn.0046c8c0
mov dword [esp], ebx
mov dword [esp + 4], ebp
lea eax, [0x778160]
mov dword [esp + 8], eax
call fcn.0040aa00
nop
call fcn.0046b3d0
jmp fcn.00747480