Function at 0x4749d0
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0xc
mov edx, dword [esp + 0x14]
push ebx
push ebp
mov ebp, dword [esp + 0x18]
mov eax, dword [edx]
push esi
mov esi, ecx
shl ebp, 8
and eax, 0x7f5f7f5f
mov dword [esp + 0xc], esi
add ebp, esi
cmp eax, 0x30463046
je 0x474b70
cmp eax, 0x31463046
je 0x474b70
xor ebx, ebx
lea ecx, [edx - 6]
mov edx, dword [esp + 0x24]
mov eax, 6
push edi
xor edi, edi
mov dword [esp + 0x24], ebx
xor esi, esi
mov dword [esp + 0x18], ecx
mov cl, byte [ecx + eax]
inc eax
mov dword [esp + 0x14], eax
test cl, cl
je 0x474b66
mov al, cl
sub al, 0x30
cmp al, 9
ja 0x474a4a
movsx eax, cl
sub eax, 0x30
shl esi, 4
or esi, eax
inc edi
jmp 0x474b55
mov al, cl
sub al, 0x41
cmp al, 5
ja 0x474a63
movsx eax, cl
sub eax, 0x37
shl esi, 4
or esi, eax
inc edi
jmp 0x474b55
mov al, cl
sub al, 0x61
cmp al, 5
ja 0x474a7c
movsx eax, cl
sub eax, 0x57
shl esi, 4
or esi, eax
inc edi
jmp 0x474b55
cmp cl, 0x7a
je 0x474b4b
cmp cl, 0x5a
je 0x474b4b
cmp cl, 0x78
je 0x474b44
cmp cl, 0x58
je 0x474b44
cmp cl, 0x79
je 0x474b3a
cmp cl, 0x59
je 0x474b3a
cmp edi, 2
jb 0x474b55
lea ecx, [ebx*8]
xor edi, edi
shl esi, cl
inc ebx
or dword [esp + 0x24], esi
xor esi, esi
cmp ebx, 3
jb 0x474b55
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x20]
mov ecx, dword [edx + 0xe910]
cmp eax, ecx
jae 0x474aeb
inc eax
jmp 0x474af1
mov eax, dword [ebp + 0xa0]
test eax, eax
je 0x474b2e
cmp eax, ecx
ja 0x474b2e
lea eax, [eax + eax*8]
mov eax, dword [edx + eax*4 + 0xc1a8]
test eax, eax
je 0x474b2e
cmp eax, 8
ja 0x474b2e
lea eax, [eax + eax*8]
add eax, eax
mov ecx, dword [edx + eax*8 + 0xe3f0]
test ecx, ecx
je 0x474b2e
cmp dword [edx + eax*8 + 0xe3f4], esi
je 0x474b2e
mov eax, dword [ecx]
push dword [esp + 0x24]
call dword [eax + 0x1c]
mov edx, dword [esp + 0x28]
xor ebx, ebx
mov dword [esp + 0x24], ebx
jmp 0x474b55
mov esi, edx
and esi, 0xf
shl esi, 3
jmp 0x474b50
mov esi, edx
and esi, 0x70
jmp 0x474b50
mov esi, edx
and esi, 0x7f
mov edi, 2
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
cmp eax, 0x20
jbe 0x474a21
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 0xc
cmp byte [edx + 4], 0x30
jne 0x474b67
mov bl, byte [edx + 6]
xor ecx, ecx
cmp bl, 0x7a
je 0x474bcd
cmp bl, 0x5a
je 0x474bcd
mov ah, byte [edx + 7]
mov al, bl
sub al, 0x30
cmp al, 9
ja 0x474b98
movsx ecx, bl
sub ecx, 0x30
jmp 0x474ba6
mov al, bl
sub al, 0x41
cmp al, 5
ja 0x474ba9
movsx ecx, bl
sub ecx, 0x37
shl ecx, 4
mov al, ah
sub al, 0x30
cmp al, 9
ja 0x474bbb
movsx eax, ah
add ecx, 0xffffffd0
add ecx, eax
jmp 0x474bd1
mov al, ah
sub al, 0x41
cmp al, 5
ja 0x474bd1
movsx eax, ah
add ecx, 0xffffffc9
add ecx, eax
jmp 0x474bd1
mov ecx, dword [esp + 0x24]
movsx eax, byte [edx + 5]
sub eax, 0x30
je 0x474c0d
dec eax
jne 0x474b67
cmp ecx, 0x80
jae 0x474beb
mov byte [ebp + 0xef], cl
mov eax, dword [ebp + 0x24]
mov ecx, esi
shr eax, 0xe
not eax
push 0x100
and eax, 1
push eax
push ebp
call fcn.00487320
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 0xc
movzx edx, byte [ebp + 0xee]
cmp ecx, 0x80
jae 0x474c22
mov byte [ebp + 0xee], cl
movzx eax, byte [ebp + 0xee]
sub edx, eax
jns 0x474c2f
neg edx
cmp dword [ebp + 0x74], 0
jg 0x474c4f
cmp edx, 0x10
jl 0x474c4f
test dword [ebp + 0x24], 0x4000
je 0x474c4f
mov eax, dword [ebp + 0x14]
or eax, dword [ebp + 0x10]
jne 0x474b67
mov eax, dword [ebp + 0x24]
mov ecx, esi
shr eax, 0xe
not eax
push 0x100
and eax, 1
push eax
push ebp
call fcn.00487320
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 0xc