Function at 0x4cba45
Capabilities:
Enumerate pe sections

Disassembly:
push 0x30
push 0x60454cb0
call fcn.00496c1d
mov edi, ecx
mov dword [ebp - 0x30], edi
mov eax, dword [ebp + 8]
movzx ecx, byte [eax]
dec ecx
je 0x4cbc96
dec ecx
je 0x4cbc62
dec ecx
je 0x4cbc46
sub ecx, 3
je 0x4cbc08
dec ecx
je 0x4cbaa2
dec ecx
jne 0x4cbca3
cmp word [eax + 2], 0x24
jb 0x4cbca3
mov esi, dword [ebp + 0xc]
add esi, 4
add edi, 0x74
push 8
pop ecx
rep movsd dword es:[edi], dword [esi]
jmp 0x4cbca3
and dword [ebp - 0x1c], 0
mov esi, dword [ebp + 0xc]
add esi, 0xfffffffc
mov dword [ebp - 0x34], esi
mov ax, word [eax + 2]
cmp ax, 0x14
jb 0x4cbca3
movzx eax, ax
sub eax, 0x14
lea ecx, [esi + 0x18]
mov ebx, ecx
and dword [ebp - 0x20], 0
movzx edx, word [esi + 0x12]
test edx, edx
jbe 0x4cbaef
movzx ecx, word [ebx + 0x10]
add ecx, 0x12
cmp ecx, eax
ja 0x4cbbf0
add ebx, ecx
sub eax, ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jb 0x4cbad4
mov al, byte [esi + 0x14]
mov byte [edi + 0x24], al
mov ecx, edi
call fcn.004caa0d
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [esi + 0x18]
push eax
movzx eax, word [esi + 0x12]
push eax
mov ecx, edi
call fcn.004ca8c5
xor ebx, ebx
cmp eax, ebx
je 0x4cbb41
push dword [ebp - 0x24]
push dword [ebp - 0x1c]
mov ecx, edi
call fcn.004caa49
cmp eax, ebx
jne 0x4cbb41
push dword [ebp - 0x1c]
call fcn.00496ab0
pop ecx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], ebx
mov edi, dword [ebp - 0x28]
add edi, 0x18
mov dword [ebp - 0x2c], edi
mov dword [ebp - 4], ebx
mov eax, edi
add eax, 3
and eax, 0xfffffffc
call fcn.00496d7d
mov dword [ebp - 0x18], esp
mov ebx, esp
mov dword [ebp - 0x38], ebx
or dword [ebp - 4], 0xffffffff
jmp 0x4cbb90
test ebx, ebx
je 0x4cbbf0
mov byte [ebx], 7
add edi, 0xfffffffc
mov word [ebx + 2], di
mov ax, word [ebp - 0x24]
mov word [ebx + 0x12], ax
push ebx
mov edi, dword [ebp - 0x30]
mov ecx, edi
call fcn.004cb99d
movzx eax, word [esi + 0x15]
mov dword [edi + 0x38], eax
xor eax, eax
cmp word [esi + 0x15], 1
setne al
lea eax, [eax*4 + 1]
mov word [ebx + 0x15], ax
mov ecx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x1c]
lea edi, [ebx + 0x18]
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push dword [ebp - 0x2c]
push ebx
mov ecx, dword [ebp - 0x30]
call fcn.004caff5
cmp dword [ebp - 0x1c], 0
je 0x4cbca3
push dword [ebp - 0x1c]
call fcn.00496ab0
pop ecx
jmp 0x4cbca3
cmp word [eax + 2], 4
jb 0x4cbca3
and dword [edi + 0x30], 0
and dword [edi + 0x34], 0
mov eax, dword [ebp + 0xc]
mov byte [ebp - 0x40], 6
mov word [ebp - 0x3e], 4
mov cx, word [eax]
mov word [ebp - 0x3c], cx
mov ax, word [eax + 2]
mov word [ebp - 0x3a], ax
push 8
lea eax, [ebp - 0x40]
push eax
mov ecx, edi
call fcn.004caff5
jmp 0x4cbca3
cmp word [eax + 2], 4
jb 0x4cbca3
mov edi, dword [edi + 0x20]
test edi, edi
je 0x4cbca3
mov eax, dword [ebp + 0xc]
push dword [eax]
push edi
call dword [0x60451788]
jmp 0x4cbca3
and dword [edi + 0x30], 0
and dword [edi + 0x34], 0
mov cx, word [eax + 2]
cmp cx, 8
jb 0x4cbca3
push dword [ebp + 0xc]
movzx ecx, cx
sub ecx, 8
push ecx
movzx ecx, word [eax + 4]
push ecx
movzx ecx, word [eax + 6]
push ecx
movzx eax, byte [eax + 8]
push eax
mov ecx, edi
call fcn.004cb853
jmp 0x4cbca3
cmp dword [edi + 0x20], 0
je 0x4cbca3
mov ecx, edi
call fcn.004cab41
lea esp, [ebp - 0x4c]
call fcn.00496c58
ret 8