Function at 0x4b4740
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x64
mov eax, dword [0x6214e0]
xor eax, esp
mov dword [esp + 0x60], eax
mov edx, dword [esp + 0x68]
mov ecx, dword [esp + 0x7c]
push ebx
push ebp
mov ebp, dword [esp + 0x74]
xor eax, eax
push esi
mov esi, dword [esp + 0x84]
cmp dword [esi + 0x338], 6
mov ebx, dword [esi]
sete al
push edi
mov dword [esp + 0x18], edx
mov dword [esp + 0x28], ecx
lea edi, [esi + 8]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 0
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x84]
mov eax, dword [esi + eax*4 + 0x420]
mov dword [esp + 0x20], eax
mov eax, dword [esi + 4]
cmp eax, 1
jl 0x4b47ad
cmp eax, 0x11
jl 0x4b47be
cmp dword [ecx], 0
jne 0x4b47be
mov eax, 1
mov ecx, esi
call fcn.004b46d0
mov eax, dword [esi + 4]
dec eax
cmp eax, 0xd
ja case.0x4b47d2.2
movzx ecx, byte [eax + 0x4b4d30]
jmp dword [ecx*4 + 0x4b4d14]
cmp dword [esi + 0x544], 0
mov ebx, dword [esp + 0x80]
mov dword [esi + 0x5d0], 1
je 0x4b4817
cmp dword [esp + 0x1c], 0
mov eax, 0x5b6f68
jne 0x4b4804
mov eax, 0x5a0a81
mov edx, dword [esi]
push ebx
push ebp
push eax
push 0x5b6f38
push edx
call fcn.0048a2e0
add esp, 0x14
mov eax, dword [esp + 0x10]
push ebx
push ebp
push 0x5b6f18
push eax
call fcn.0048a2e0
mov ecx, ebx
sar ecx, 8
add esp, 0x10
cmp dword [esp + 0x1c], 0
mov byte [edi], 4
mov byte [edi + 1], 1
mov byte [edi + 2], cl
mov byte [edi + 3], bl
jne 0x4b4924
lea edx, [esp + 0x14]
push edx
push 0
push ebx
push ebp
push esi
call fcn.004b0cd0
add esp, 0x14
cmp eax, 0xffffffff
jne 0x4b4877
pop edi
pop esi
pop ebp
mov eax, 5
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.0058fcd6
add esp, 0x64
ret
mov ecx, esi
cmp eax, 1
jne 0x4b48b0
mov eax, 0xa
call fcn.004b46d0
mov eax, dword [esp + 0x10]
push ebp
push 0x5b6ef4
push eax
call fcn.0048a2e0
add esp, 0xc
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.0058fcd6
add esp, 0x64
ret
mov eax, 0xb
call fcn.004b46d0
mov ebx, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
test ecx, ecx
je case.0x4b47d2.11
mov ebx, dword [ecx]
test ebx, ebx
je 0x4b4a29
push 0x40
lea ecx, [esp + 0x34]
push ecx
push ebx
call fcn.004b0240
add esp, 0xc
cmp dword [ebx + 4], 2
jne 0x4b49f6
mov eax, dword [ebx + 0x18]
movzx edx, byte [eax + 4]
mov byte [edi + 4], dl
mov cl, byte [eax + 5]
mov byte [edi + 5], cl
movzx edx, byte [eax + 6]
lea ecx, [esp + 0x30]
push ecx
mov byte [edi + 6], dl
mov edx, dword [esp + 0x14]
mov al, byte [eax + 7]
push 0x5b6ec4
push edx
mov byte [edi + 7], al
call fcn.0048a2e0
jmp 0x4b4a0c
mov eax, 9
mov ecx, esi
call fcn.004b46d0
mov edx, dword [esp + 0x18]
lea ebx, [edi + 8]
mov byte [ebx], 0
test edx, edx
je 0x4b4a60
mov eax, edx
lea ecx, [eax + 1]
mov dword [esp + 0x18], ecx
jmp 0x4b4950
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4b4950
sub eax, dword [esp + 0x18]
cmp eax, 0x250
jb 0x4b4a54
mov edx, dword [esp + 0x10]
push 0x5b6e9c
push edx
call fcn.0048a3c0
add esp, 8
jmp 0x4b4cf9
mov ecx, dword [esi + 0x364]
push ecx
push ebp
push esi
call fcn.004b04f0
add esp, 0xc
mov dword [esp + 0x14], eax
test eax, eax
je 0x4b49c6
push ebp
push 0x5b6e80
push ebx
mov dword [esi + 0x66c], eax
mov dword [esi + 0x678], 1
call fcn.0048a2e0
add esp, 0xc
mov eax, 0xb
mov ecx, esi
call fcn.004b46d0
jmp 0x4b48be
mov eax, dword [ebx + 8]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.004b0c30
mov ecx, dword [esp + 0x1c]
add esp, 8
test ecx, ecx
jne 0x4b48ca
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.0058fcd6
add esp, 0x64
ret
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x30]
push eax
push 0x5b6e58
push ecx
xor ebx, ebx
call fcn.0048a3c0
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
add esp, 0xc
push edx
push eax
call fcn.004b0f70
add esp, 8
test ebx, ebx
jne 0x4b4930
mov ebx, dword [esp + 0x10]
push ebp
push 0x5b6e2c
push ebx
call fcn.0048a3c0
add esp, 0xc
pop edi
pop esi
pop ebp
mov eax, 6
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.0058fcd6
add esp, 0x64
ret
inc eax
push eax
push edx
push ebx
call fcn.0058fe84
add esp, 0xc
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4b4a65
sub eax, edx
cmp dword [esp + 0x1c], 0
lea ebx, [eax + 9]
je 0x4b4abe
mov eax, ebp
mov byte [edi + 4], cl
mov byte [edi + 5], cl
mov byte [edi + 6], cl
mov byte [edi + 7], 1
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4b4a90
sub eax, edx
inc eax
cmp eax, 0xff
mov dword [esp + 0x18], eax
jg 0x4b4b17
mov ecx, ebx
sub ecx, ebp
mov eax, ebp
lea edx, [ecx + edi]
mov edi, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4b4ab0
add ebx, dword [esp + 0x18]
mov eax, 0xe
mov ecx, esi
mov dword [esi + 0x264], edi
mov dword [esi + 0x260], ebx
call fcn.004b46d0
mov ebx, dword [esp + 0x10]
mov ecx, dword [esi + 0x260]
mov edx, dword [esi + 0x264]
lea eax, [esp + 0x2c]
push eax
mov eax, dword [esp + 0x24]
push ecx
push edx
push eax
push esi
call fcn.0048a9e0
add esp, 0x14
test eax, eax
je 0x4b4b2e
cmp eax, 0x51
je 0x4b4b2e
push 0x5b6e04
push ebx
call fcn.0048a3c0
add esp, 8
jmp 0x4b4cf9
mov edx, dword [esp + 0x10]
push 0x5b6de8
push edx
call fcn.0048a3c0
add esp, 8
jmp 0x4b4cf9
mov eax, dword [esi + 0x260]
mov ecx, dword [esp + 0x2c]
cmp ecx, eax
je 0x4b4b5f
add dword [esi + 0x264], ecx
sub eax, ecx
pop edi
mov dword [esi + 0x260], eax
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.0058fcd6
add esp, 0x64
ret
mov eax, 4
mov ecx, esi
mov dword [esi + 0x260], 8
mov dword [esi + 0x264], edi
call fcn.004b46d0
mov edx, dword [esi + 0x260]
mov eax, dword [esi + 0x264]
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x24]
push edx
push eax
push ecx
call fcn.0048a190
add esp, 0x10
test eax, eax
je 0x4b4bbe
cmp eax, 0x51
je 0x4b4bbe
push eax
call fcn.004b5be0
push eax
push 0x5b6db4
push ebx
call fcn.0048a3c0
add esp, 0x10
jmp 0x4b4cf9
mov eax, dword [esi + 0x260]
mov ecx, dword [esp + 0x24]
cmp ecx, eax
jne 0x4b4b3c
mov eax, 0x11
mov ecx, esi
call fcn.004b46d0
cmp byte [edi], 0
je 0x4b4bf4
push 0x5b6d7c
push ebx
call fcn.0048a3c0
add esp, 8
jmp 0x4b4cf9
movzx eax, byte [edi + 1]
lea ecx, [eax - 0x5a]
cmp ecx, 3
ja case.default.0x4b4c04
jmp dword [ecx*4 + 0x4b4d40]
cmp dword [esp + 0x1c], 0
mov eax, 0x5b6f68
jne 0x4b4c1c
mov eax, 0x5a0a81
push eax
push 0x5b6d60
push ebx
call fcn.0048a2e0
mov edx, dword [esp + 0x34]
add esp, 0xc
pop edi
pop esi
pop ebp
mov dword [edx], 1
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.0058fcd6
add esp, 0x64
ret
movzx ecx, byte [edi + 3]
movzx edx, byte [edi + 7]
push eax
movzx eax, byte [edi + 2]
shl eax, 8
or eax, ecx
movzx ecx, byte [edi + 5]
push eax
movzx eax, byte [edi + 6]
push edx
movzx edx, byte [edi + 4]
push eax
push ecx
push edx
push 0x5b6d08
jmp 0x4b4cf0
movzx ecx, byte [edi + 3]
movzx edx, byte [edi + 7]
push eax
movzx eax, byte [edi + 2]
shl eax, 8
or eax, ecx
movzx ecx, byte [edi + 5]
push eax
movzx eax, byte [edi + 6]
push edx
movzx edx, byte [edi + 4]
push eax
push ecx
push edx
push 0x5b6c80
jmp 0x4b4cf0
movzx ecx, byte [edi + 3]
movzx edx, byte [edi + 7]
push eax
movzx eax, byte [edi + 2]
shl eax, 8
or eax, ecx
movzx ecx, byte [edi + 5]
push eax
movzx eax, byte [edi + 6]
push edx
movzx edx, byte [edi + 4]
push eax
push ecx
push edx
push 0x5b6bf0
jmp 0x4b4cf0
movzx ecx, byte [edi + 3]
movzx edx, byte [edi + 7]
push eax
movzx eax, byte [edi + 2]
shl eax, 8
or eax, ecx
movzx ecx, byte [edi + 5]
push eax
movzx eax, byte [edi + 6]
push edx
movzx edx, byte [edi + 4]
push eax
push ecx
push edx
push 0x5b6ba8
push ebx
call fcn.0048a3c0
add esp, 0x20
mov ecx, dword [esp + 0x70]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
mov eax, 7
call fcn.0058fcd6
add esp, 0x64
ret