Function at 0x483930
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x48417b
sub esp, 0x50
mov eax, dword [0x9b8c64]
mov ecx, dword [0x9b8c60]
test ecx, ecx
jne 0x48415f
mov eax, dword [esp + 0x5c]
cmp eax, 4
jge 0x483f18
cmp eax, 3
jge 0x483df1
cmp eax, 2
jne 0x483de5
mov ecx, dword [esp + 0x58]
movzx ebx, word [ecx]
cmp bx, 0x7069
jne 0x483cfa
movzx ebx, byte [esp + 0x60]
test bl, bl
jne 0x483cc8
xor edx, edx
xor ebp, ebp
mov esi, dword [0x9b8574]
test esi, esi
jne 0x483c89
test edx, edx
jne 0x483c6d
test bl, bl
je 0x483a10
movzx edx, byte [0x9caad2]
test dl, dl
je 0x483a10
cmp eax, 3
jne 0x483c63
movzx edx, word [ecx]
cmp dx, 0x6374
jne 0x483c59
movzx edx, byte [ecx + 2]
cmp dl, 0x70
jne 0x483c4f
mov edx, 3
mov byte [esp + 0x2f], dl
mov eax, dword [esp + 0x54]
mov ecx, dword [eax + 0x10]
mov dword [esp], ecx
mov byte [esp + 4], dl
call fcn.0046ee50
mov eax, dword [esp + 8]
test eax, eax
je 0x483c31
mov eax, dword [esp + 0x5c]
cmp eax, 3
jne 0x483c28
mov ecx, dword [esp + 0x58]
movzx edx, word [ecx]
cmp dx, 0x6475
jne 0x483c23
movzx edx, byte [ecx + 2]
cmp dl, 0x70
jne 0x483bf5
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 0
mov eax, dword [esp + 0x54]
mov ecx, dword [eax + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], 0x9800000c
lea ecx, [esp + 0x38]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
lea ecx, [esp + 0x34]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
call fcn.0046de60
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
test eax, eax
jne 0x483bd7
mov eax, dword [esp + 0x54]
mov dword [eax + 0x2c], 0x72
mov dword [eax + 0xa0], 0x77
mov ecx, dword [0x9cadb0]
lea edx, [eax + 0x38]
lea ebx, [eax + 0xac]
test ecx, ecx
jne 0x483baa
mov dword [eax + 0x38], eax
mov dword [eax + 0xac], eax
mov ecx, dword [eax + 0xfc]
mov dword [eax + 0x28], ecx
mov ecx, dword [eax + 0xfc]
mov dword [eax + 0x9c], ecx
movzx ecx, byte [0x9caad0]
test cl, cl
je 0x483b24
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
add esp, 0x50
ret
lea eax, [0x6bc720]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00402ce0
mov eax, dword [0x9cadb0]
mov ecx, dword [esp + 0x54]
lea edx, [ecx + 0x3c]
mov ebx, dword [esp + 8]
test eax, eax
jne 0x483b9c
mov dword [ecx + 0x3c], ebx
lea eax, [0x6bc720]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00402ce0
mov eax, dword [0x9cadb0]
mov ecx, dword [esp + 0x54]
lea edx, [ecx + 0xb0]
mov ebx, dword [esp + 8]
test eax, eax
jne 0x483b8b
mov dword [ecx + 0xb0], ebx
jmp 0x483b00
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.0040ecd0
jmp 0x483b00
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.0040ecd0
jmp 0x483b52
mov dword [esp + 0x4c], ebx
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.0040ecd0
mov eax, dword [esp + 0x54]
jmp 0x483ae0
lea edx, [0x71e4ac]
mov dword [esp + 0x64], edx
mov dword [esp + 0x68], 8
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], ecx
add esp, 0x50
ret
cmp eax, 4
jne 0x483c0b
mov edx, dword [ecx]
cmp edx, 0x34706475
je 0x483a3c
cmp eax, 4
jne 0x483aab
mov eax, dword [ecx]
cmp eax, 0x36706475
je 0x483a3c
jmp 0x483aab
cmp eax, 4
jmp 0x483bf8
cmp eax, 4
mov ecx, dword [esp + 0x58]
jmp 0x483bf8
movzx eax, byte [esp + 0x2f]
test al, 1
je 0x483a10
mov eax, dword [esp + 0x54]
mov byte [eax + 0x138], 1
jmp 0x483a10
mov edx, 2
jmp 0x4839ed
mov edx, 2
jmp 0x4839ed
mov edx, 2
jmp 0x4839ed
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], edx
mov dword [esp + 0x70], ebp
add esp, 0x50
ret
mov dword [esp + 0x40], edx
mov dword [esp + 0x44], ebp
mov dword [esp], ecx
mov dword [esp + 4], eax
mov ebx, dword [esp + 0x54]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
mov edi, dword [esi]
mov edx, esi
call edi
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x40]
movzx ebx, byte [esp + 0x60]
mov ebp, dword [esp + 0x44]
jmp 0x4839ad
mov eax, dword [esp + 0x54]
test byte [eax], al
lea ecx, [eax + 0xfc]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00482930
mov edx, dword [esp + 8]
mov ebp, dword [esp + 0xc]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x58]
movzx ebx, byte [esp + 0x60]
jmp 0x48399f
cmp eax, 3
jne 0x483d29
movzx ebx, word [ecx]
cmp bx, 0x6964
jne 0x483ddd
movzx ebx, byte [ecx + 2]
cmp bl, 0x72
jne 0x483d26
mov ebx, dword [esp + 0x54]
mov byte [ebx + 0x13c], 1
jmp 0x48398e
cmp eax, 3
jne 0x483d42
movzx ebx, word [ecx]
cmp bx, 0x7069
jne 0x483d42
movzx ebx, byte [ecx + 2]
cmp bl, 0x34
je 0x48398e
mov dword [esp], 0
lea edx, [0x72f2cb]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x25
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.0043c050
mov eax, dword [esp + 0x14]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x30], ecx
lea edx, [0x6d86a0]
mov dword [esp], edx
call fcn.0040e460
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x30]
mov dword [eax + 4], ecx
mov ecx, dword [0x9cadb0]
test ecx, ecx
jne 0x483dc3
mov ecx, dword [esp + 0x3c]
mov dword [eax], ecx
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
lea ecx, [0x79b5e0]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x70], eax
add esp, 0x50
ret
mov dword [esp + 0x48], eax
mov dword [esp], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
call fcn.0040ecd0
mov eax, dword [esp + 0x48]
jmp 0x483da1
cmp eax, 3
jmp 0x483d29
cmp eax, 3
mov ecx, dword [esp + 0x58]
jmp 0x483cfd
je 0x483ed9
je 0x483e4b
jne 0x483e42
mov ecx, dword [esp + 0x58]
movzx ebx, word [ecx]
cmp bx, 0x6475
jne 0x483e3d
movzx ebx, byte [ecx + 2]
cmp bl, 0x70
je 0x48398e
cmp eax, 4
jne 0x483d42
mov ebx, dword [ecx]
cmp ebx, 0x656c6966
jne 0x483d42
mov ebx, dword [esp + 0x54]
mov byte [ebx + 0x13b], 1
jmp 0x48398e
cmp eax, 4
jmp 0x483e19
cmp eax, 4
mov ecx, dword [esp + 0x58]
jmp 0x483e19
mov ecx, dword [esp + 0x58]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea edx, [0x71a391]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
call fcn.0044c620
mov eax, dword [esp + 0x10]
test eax, eax
jg 0x483ecd
mov eax, dword [esp + 0x5c]
cmp eax, 3
jne 0x483ec7
mov ecx, dword [esp + 0x58]
movzx ebx, word [ecx]
cmp bx, 0x7069
jne 0x483ec2
movzx ebx, byte [ecx + 2]
cmp bl, 0x36
je 0x48398e
cmp eax, 3
jne 0x483d42
movzx ebx, word [ecx]
cmp bx, 0x6374
jne 0x483d42
movzx ebx, byte [ecx + 2]
cmp bl, 0x70
je 0x48398e
jmp 0x483d42
cmp eax, 3
jmp 0x483e9c
mov ecx, dword [esp + 0x58]
jmp 0x483e9c
mov eax, dword [esp + 0x5c]
cmp eax, 3
jmp 0x483df9
mov ecx, dword [esp + 0x58]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea edx, [0x71a322]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 3
call fcn.0044c620
mov eax, dword [esp + 0x10]
test eax, eax
jg 0x483f0c
mov eax, dword [esp + 0x5c]
jmp 0x483973
mov eax, dword [esp + 0x5c]
cmp eax, 3
jmp 0x483df7
je 0x484120
je 0x484037
cmp eax, 7
jge 0x483f8c
cmp eax, 4
jne 0x483f83
mov ecx, dword [esp + 0x58]
mov ebx, dword [ecx]
cmp ebx, 0x78696e75
je 0x48398e
cmp eax, 7
jne 0x483d42
mov ebx, dword [ecx]
cmp ebx, 0x736e6f63
jne 0x483d42
movzx ebx, word [ecx + 4]
cmp bx, 0x6c6f
jne 0x483d42
movzx ebx, byte [ecx + 6]
cmp bl, 0x65
jne 0x483d42
mov ebx, dword [esp + 0x54]
mov byte [ebx + 0x108], 1
jmp 0x48398e
cmp eax, 7
mov ecx, dword [esp + 0x58]
jmp 0x483f43
je 0x483ff8
cmp eax, 8
jne 0x483ff2
mov ecx, dword [esp + 0x58]
mov ebx, dword [ecx]
cmp ebx, 0x78696e75
jne 0x483fb0
mov ebx, dword [ecx + 4]
cmp ebx, 0x6d617267
je 0x48398e
cmp eax, 0xa
jne 0x483d42
mov dword [esp], ecx
lea edx, [0x71f88c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.0044c4d0
movzx eax, byte [esp + 0xc]
test al, al
je 0x483fe5
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x58]
jmp 0x48398e
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x58]
jmp 0x483d42
mov ecx, dword [esp + 0x58]
jmp 0x483fb0
mov ecx, dword [esp + 0x58]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea edx, [0x71cd9f]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 7
call fcn.0044c620
mov eax, dword [esp + 0x10]
test eax, eax
jg 0x48402e
mov eax, dword [esp + 0x5c]
cmp eax, 4
jmp 0x483f2c
mov eax, dword [esp + 0x5c]
jmp 0x483f8e
mov ecx, dword [esp + 0x58]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea edx, [0x71aa92]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 4
call fcn.0044c620
mov eax, dword [esp + 0x10]
test eax, eax
jg 0x484117
mov eax, dword [esp + 0x5c]
cmp eax, 4
je 0x4840a4
jne 0x48409e
mov ecx, dword [esp + 0x58]
mov ebx, dword [ecx]
cmp ebx, 0x34706475
je 0x48398e
cmp eax, 4
jne 0x483d42
mov ebx, dword [ecx]
cmp ebx, 0x36706475
je 0x48398e
jmp 0x483d42
mov ecx, dword [esp + 0x58]
jmp 0x484085
mov ecx, dword [esp + 0x58]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea edx, [0x71aa7a]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 4
call fcn.0044c620
mov eax, dword [esp + 0x10]
test eax, eax
jg 0x48410b
mov eax, dword [esp + 0x5c]
cmp eax, 4
jne 0x484105
mov ecx, dword [esp + 0x58]
mov ebx, dword [ecx]
cmp ebx, 0x34706374
je 0x48398e
cmp eax, 4
jne 0x483d42
mov ebx, dword [ecx]
cmp ebx, 0x36706374
je 0x48398e
jmp 0x483d42
mov ecx, dword [esp + 0x58]
jmp 0x4840ec
mov eax, dword [esp + 0x5c]
cmp eax, 4
jmp 0x48406e
mov eax, dword [esp + 0x5c]
jmp 0x483f24
mov ecx, dword [esp + 0x58]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea edx, [0x71a842]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 4
call fcn.0044c620
mov eax, dword [esp + 0x10]
test eax, eax
jg 0x484153
mov eax, dword [esp + 0x5c]
jmp 0x48396a
mov eax, dword [esp + 0x5c]
cmp eax, 4
jmp 0x483f1e
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x70], eax
add esp, 0x50
ret
call fcn.0044ae20
jmp fcn.00483930