Function at 0x4db720
Capabilities:
Enumerate pe sections

Disassembly:
push ecx
push ebx
mov ebx, dword [esp + 0x10]
push ebp
push esi
push edi
mov edi, dword [esp + 0x18]
push 0xef
push ebx
push edi
call fcn.004dcb70
movzx ecx, word [ebx]
mov ebp, eax
mov al, byte [ebx + 4]
mov edx, 0x8000
and al, 0x9f
mov dword [esp + 0x1c], ebp
add esp, 0xc
mov byte [esp + 0x1c], al
cmp cx, dx
jae 0x4db794
cmp al, 0x85
je 0x4db794
mov eax, dword [edi + 0x48]
mov edx, ecx
movzx ecx, byte [ebx + 3]
mov esi, dword [edi + 0x40]
mov eax, dword [eax + edx*8]
mov eax, dword [eax + ecx*4 + 0x14]
add eax, 0x10
mov dword [esi - 4], eax
mov eax, ebp
and al, 7
shl al, 3
add al, 5
mov byte [esi - 5], al
lea eax, [esi - 6]
mov dword [esi - 9], 0x8b0000fe
mov dword [edi + 0x40], eax
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
mov eax, dword [edi + 0x58]
and eax, 0xef
jne 0x4db832
mov eax, dword [edi + 4]
or ecx, 0xffffffff
cmp dword [edi], 0xffffffff
mov esi, dword [edi + 0x18]
cmovb ecx, dword [edi]
cmp eax, ecx
cmovae eax, ecx
mov ecx, dword [edi + 8]
cmp ecx, eax
cmovae ecx, eax
mov eax, dword [edi + 0xc]
cmp eax, ecx
cmovae eax, ecx
mov ecx, dword [edi + 0x14]
cmp ecx, eax
cmovae ecx, eax
cmp esi, ecx
cmovae esi, ecx
mov ecx, dword [edi + 0x1c]
cmp ecx, esi
movzx edx, cx
movzx eax, si
cmovae edx, eax
movzx ecx, dx
mov dword [esp + 0x10], ecx
cmp ecx, 0x8000
jb 0x4db824
mov edx, dword [edi + 0x60]
mov esi, edx
and esi, 0xef
je 0x4db824
mov eax, dword [edi + 0x48]
mov cl, byte [eax + ecx*8 + 6]
shr edx, cl
test dl, 1
jne 0x4db820
bsf eax, esi
movzx ecx, word [edi + eax*4]
push ecx
push edi
call fcn.004dd480
add esp, 8
mov edx, eax
jmp 0x4db835
mov ecx, dword [esp + 0x10]
push ecx
push edi
call fcn.004dd480
add esp, 8
mov edx, eax
jmp 0x4db835
bsr edx, eax
mov eax, dword [edi + 0x5c]
bts eax, edx
mov dword [esp + 0x10], edx
mov dword [edi + 0x5c], eax
xor eax, eax
cmp byte [ebx + 5], 0x3d
setne al
lea eax, [eax*8 + 8]
push eax
push edx
mov edx, 0x8b0000fe
mov eax, 0x8d0000fe
push ebp
cmovne eax, edx
push eax
push edi
call fcn.004dbfc0
add esp, 0x14
cmp byte [esp + 0x1c], 0x85
jne 0x4db8e1
xor eax, eax
cmp byte [ebx + 5], 0x3d
setne al
add eax, 4
push eax
push edi
call fcn.004d6440
dec dword [edi + 0x40]
add esp, 8
mov eax, dword [edi + 0x40]
mov edx, dword [esp + 0x10]
mov byte [eax], 0
mov ecx, dword [edi + 0x40]
test dl, dl
js 0x4db8b6
dec ecx
mov eax, edx
and al, 7
mov byte [ecx], 6
cmp al, 4
jne 0x4db8ad
dec ecx
mov byte [ecx], 0x24
mov byte [esp + 0x1c], 0x78
mov eax, edx
jmp 0x4db8c9
add ecx, 0xfffffffc
mov eax, 5
mov byte [esp + 0x1c], 0x38
mov dword [ecx], 6
and al, 7
add al, byte [esp + 0x1c]
mov byte [ecx - 1], al
lea eax, [ecx - 2]
mov dword [ecx - 5], 0x800000fe
mov dword [edi + 0x40], eax
jmp 0x4db8e5
mov edx, dword [esp + 0x10]
movzx eax, word [ebx]
mov ecx, 0x8000
mov ebp, dword [edi + 0x48]
mov esi, eax
cmp ax, cx
jae 0x4db913
movzx ecx, byte [ebx + 3]
mov eax, dword [ebp + esi*8]
push dword [eax + ecx*4 + 0x14]
push edx
push edi
call fcn.004dbce0
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
movzx eax, byte [ebp + esi*8 + 6]
test al, al
jns 0x4db92b
push 0xef
push esi
push edi
call fcn.004dcab0
add esp, 0xc
mov ecx, dword [edi + 0x60]
mov edx, dword [esp + 0x10]
btr ecx, eax
mov dword [edi + 0x60], ecx
movzx ecx, byte [ebx + 3]
lea ecx, [ecx*4 + 0x14]
push ecx
push eax
push edx
push 0x8b0000fe
push edi
call fcn.004dbfc0
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret