Function at 0x492c70
Capabilities:
Enumerate pe sections

Disassembly:
push ebx
mov ebx, ecx
sub esp, 0x58
mov ax, word [ebx]
mov word [ebx + 0x2a], ax
mov dx, word [ebx + 2]
mov word [ebx + 0x2c], dx
mov ax, word [ebx + 4]
mov word [ebx + 0x2e], ax
mov cx, word [ebx + 6]
mov word [ebx + 0x30], cx
mov ax, word [ebx + 8]
mov word [ebx + 0x32], ax
mov dx, word [ebx + 0xa]
mov word [ebx + 0x34], dx
mov ax, word [ebx + 0xc]
mov word [ebx + 0x36], ax
mov cx, word [ebx + 0xe]
mov word [ebx + 0x38], cx
mov ax, word [ebx + 0x10]
mov word [ebx + 0x3a], ax
mov dx, word [ebx + 0x12]
mov word [ebx + 0x3c], dx
mov ax, word [ebx + 0x14]
mov word [ebx + 0x3e], ax
mov cx, word [ebx + 0x16]
mov word [ebx + 0x40], cx
mov ax, word [ebx + 0x18]
mov word [ebx + 0x42], ax
mov dx, word [ebx + 0x1a]
mov word [ebx + 0x44], dx
mov ax, word [ebx + 0x1c]
mov word [ebx + 0x46], ax
mov cx, word [ebx + 0x1e]
mov word [ebx + 0x48], cx
mov ax, word [ebx + 0x20]
mov word [ebx + 0x4a], ax
mov dx, word [ebx + 0x22]
mov word [ebx + 0x4c], dx
mov ax, word [ebx + 0x24]
mov word [ebx + 0x4e], ax
mov cx, word [ebx + 0x26]
mov word [ebx + 0x50], cx
mov ax, word [ebx + 0x28]
mov word [ebx + 0x52], ax
lea eax, [ebx + 0x7e]
lea edx, [ebx + 0x54]
push eax
lea eax, [esp + 4]
push edx
mov ecx, ebx
push eax
call fcn.00491e60
mov eax, dword [esp]
push ebx
mov word [ebx], ax
mov ecx, dword [esp + 6]
mov word [ebx + 2], cx
mov eax, dword [esp + 8]
mov word [ebx + 4], ax
mov edx, dword [esp + 0xa]
mov word [ebx + 6], dx
mov eax, dword [esp + 0xc]
mov word [ebx + 8], ax
mov ecx, dword [esp + 0xe]
mov word [ebx + 0xa], cx
mov eax, dword [esp + 0x10]
mov word [ebx + 0xc], ax
mov edx, dword [esp + 0x12]
mov word [ebx + 0xe], dx
mov eax, dword [esp + 0x14]
mov word [ebx + 0x10], ax
mov ecx, dword [esp + 0x16]
mov word [ebx + 0x12], cx
mov eax, dword [esp + 0x18]
mov word [ebx + 0x14], ax
mov edx, dword [esp + 0x1a]
mov word [ebx + 0x16], dx
mov eax, dword [esp + 0x1c]
mov word [ebx + 0x18], ax
mov ecx, dword [esp + 0x1e]
mov word [ebx + 0x1a], cx
mov eax, dword [esp + 0x20]
mov word [ebx + 0x1c], ax
mov edx, dword [esp + 0x22]
mov word [ebx + 0x1e], dx
mov eax, dword [esp + 0x24]
mov word [ebx + 0x20], ax
mov ecx, dword [esp + 0x26]
mov word [ebx + 0x22], cx
mov eax, dword [esp + 0x28]
mov word [ebx + 0x24], ax
mov edx, dword [esp + 0x2a]
mov word [ebx + 0x26], dx
mov eax, dword [esp + 0x2c]
mov word [ebx + 0x28], ax
lea ecx, [ebx + 0xa8]
lea eax, [esp + 0x30]
push ecx
mov ecx, ebx
push eax
call fcn.00491e60
mov eax, dword [esp + 0x2c]
mov word [ebx], ax
mov edx, dword [esp + 0x2e]
mov word [ebx + 2], dx
mov eax, dword [esp + 0x30]
mov word [ebx + 4], ax
mov ecx, dword [esp + 0x32]
mov word [ebx + 6], cx
mov eax, dword [esp + 0x34]
mov word [ebx + 8], ax
mov edx, dword [esp + 0x36]
mov word [ebx + 0xa], dx
mov eax, dword [esp + 0x38]
mov word [ebx + 0xc], ax
mov ecx, dword [esp + 0x3a]
mov word [ebx + 0xe], cx
mov eax, dword [esp + 0x3c]
mov word [ebx + 0x10], ax
mov edx, dword [esp + 0x3e]
mov word [ebx + 0x12], dx
mov eax, dword [esp + 0x40]
mov word [ebx + 0x14], ax
mov ecx, dword [esp + 0x42]
mov word [ebx + 0x16], cx
mov eax, dword [esp + 0x44]
mov word [ebx + 0x18], ax
mov edx, dword [esp + 0x46]
mov word [ebx + 0x1a], dx
mov eax, dword [esp + 0x48]
mov word [ebx + 0x1c], ax
mov ecx, dword [esp + 0x4a]
mov word [ebx + 0x1e], cx
mov eax, dword [esp + 0x4c]
mov word [ebx + 0x20], ax
mov edx, dword [esp + 0x4e]
mov word [ebx + 0x22], dx
mov eax, dword [esp + 0x50]
mov word [ebx + 0x24], ax
mov ecx, dword [esp + 0x52]
mov word [ebx + 0x26], cx
mov eax, dword [esp + 0x54]
mov word [ebx + 0x28], ax
lea ecx, [ebx + 0x7e]
call fcn.004916c0
lea ecx, [ebx + 0x54]
call fcn.004916c0
lea ecx, [ebx + 0xa8]
call fcn.004916c0
mov ecx, ebx
call fcn.00492c60
inc byte [ebx + 0xde]
cmp byte [ebx + 0xde], 5
jb 0x492eca
mov byte [ebx + 0xde], 0
mov ecx, ebx
call fcn.00493350
movzx edx, byte [ebx + 0xde]
mov byte [ebx + edx + 0xd9], al
cmp byte [0x95cd52], 0
jne 0x492eef
mov byte [0x5f4dd0], 0
add esp, 0x58
pop ebx
ret 4