Function at 0x4c5140
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x4c
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x68]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x2c], eax
add eax, 0x14
mov dword [esp + 0x18], eax
lea esi, [esi]
mov eax, dword [esp + 0x2c]
mov edx, 1
mov ebx, dword [esp + 0x68]
mov edi, edx
movzx ecx, byte [eax + 5]
movzx ebp, byte [eax + 6]
movzx eax, byte [eax + 4]
shl edi, cl
mov ecx, eax
mov dword [esp + 0x1c], edi
shl edx, cl
lea ecx, [edx - 1]
and ebx, ecx
test ebp, ebp
je 0x4c52d0
mov edi, dword [esp + 0x64]
mov esi, dword [sym.imp.python312.dll_PyUnicode_Type]
cmp dword [edi + 4], esi
je 0x4c5479
mov dword [esp + 0x20], ecx
mov edi, dword [esp + 0x68]
mov dword [esp + 0x34], ebp
mov ecx, dword [esp + 0x18]
jmp 0x4c51f9
movsx esi, byte [ecx + ebx]
test esi, esi
js 0x4c520b
mov edx, dword [esp + 0x1c]
lea edx, [edx + esi*8]
add edx, ecx
mov dword [esp + 0x24], edx
mov ebp, dword [edx]
cmp dword [esp + 0x64], ebp
je 0x4c5430
mov edx, dword [ebp + 0xc]
cmp dword [esp + 0x68], edx
je 0x4c5230
mov esi, dword [esp + 0x20]
shr edi, 5
lea ebx, [ebx + ebx*4 + 1]
add ebx, edi
and ebx, esi
cmp eax, 7
jle 0x4c51c0
cmp eax, 0xf
jg 0x4c5228
movsx esi, word [ecx + ebx*2]
test esi, esi
jns 0x4c51c8
cmp esi, 0xffffffff
jne 0x4c51ea
mov edx, esi
mov ecx, dword [esp + 0x6c]
xor eax, eax
mov dword [ecx], eax
add esp, 0x4c
mov eax, edx
pop ebx
pop esi
pop edi
pop ebp
ret
mov esi, dword [ecx + ebx*4]
jmp 0x4c51c4
mov eax, dword [ebp]
cmp eax, 0x3fffffff
je 0x4c5240
add eax, 1
mov dword [ebp], eax
mov eax, dword [esp + 0x64]
mov dword [esp], ebp
mov dword [esp + 0x30], ecx
mov dword [esp + 4], eax
call fcn.004c4ed0
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x28], eax
mov eax, dword [ebp]
cmp eax, 0x3fffffff
je 0x4c526e
sub eax, 1
mov dword [ebp], eax
je 0x4c52b0
cmp dword [esp + 0x28], 0xffffffff
je 0x4c52c4
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x2c]
mov eax, dword [eax + 0x18]
cmp eax, edx
jne 0x4c5469
mov eax, dword [esp + 0x24]
cmp ebp, dword [eax]
jne 0x4c5168
cmp dword [esp + 0x28], 1
je 0x4c5430
movzx eax, byte [edx + 4]
jmp 0x4c51ea
mov dword [esp], ebp
call dword [sym.imp.python312.dll__Py_Dealloc]
cmp dword [esp + 0x28], 0xffffffff
mov ecx, dword [esp + 0x30]
jne 0x4c5275
mov edx, 0xfffffffd
jmp 0x4c5212
mov dword [esp + 0x20], ecx
mov ebp, dword [esp + 0x68]
jmp 0x4c532a
mov edx, dword [esp + 0x18]
movsx esi, byte [edx + ebx]
test esi, esi
js 0x4c5340
mov ecx, dword [esp + 0x1c]
lea edx, [esi + esi*2]
lea edi, [edx*4]
mov dword [esp + 0x24], edi
add edi, ecx
mov ecx, dword [esp + 0x18]
add edi, ecx
mov ecx, dword [edi + 4]
cmp dword [esp + 0x64], ecx
je 0x4c53f0
mov edx, dword [edi]
cmp dword [esp + 0x68], edx
je 0x4c5358
mov edi, dword [esp + 0x20]
shr ebp, 5
lea ebx, [ebx + ebx*4 + 1]
add ebx, ebp
and ebx, edi
cmp eax, 7
jle 0x4c52e0
mov edi, dword [esp + 0x18]
cmp eax, 0xf
jg 0x4c5350
movsx esi, word [edi + ebx*2]
test esi, esi
jns 0x4c52ec
cmp esi, 0xffffffff
jne 0x4c531b
mov edx, esi
jmp 0x4c5212
mov esi, dword [edi + ebx*4]
jmp 0x4c52e8
mov eax, dword [ecx]
cmp eax, 0x3fffffff
je 0x4c5366
add eax, 1
mov dword [ecx], eax
mov eax, dword [esp + 0x64]
mov dword [esp], ecx
mov dword [esp + 0x30], ecx
mov dword [esp + 4], eax
call fcn.004c4070
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x28], eax
mov eax, dword [ecx]
cmp eax, 0x3fffffff
je 0x4c5392
sub eax, 1
mov dword [ecx], eax
je 0x4c53c0
cmp dword [esp + 0x28], 0xffffffff
je 0x4c52c4
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x2c]
cmp dword [eax + 0x18], edx
jne 0x4c53cf
cmp ecx, dword [edi + 4]
jne 0x4c53cf
cmp dword [esp + 0x28], 1
je 0x4c53f0
movzx eax, byte [edx + 4]
jmp 0x4c531b
mov dword [esp], ecx
call dword [sym.imp.python312.dll__Py_Dealloc]
mov ecx, dword [esp + 0x30]
jmp 0x4c5392
mov eax, dword [esp + 0x60]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x2c], eax
add eax, 0x14
mov dword [esp + 0x18], eax
jmp 0x4c5168
mov edi, dword [esp + 0x24]
mov edx, esi
test esi, esi
js 0x4c5212
mov eax, dword [esp + 0x2c]
movzx ecx, byte [eax + 5]
mov eax, 1
shl eax, cl
mov ecx, dword [esp + 0x18]
add eax, edi
lea eax, [ecx + eax + 8]
mov ecx, dword [esp + 0x6c]
mov dword [ecx], eax
add esp, 0x4c
mov eax, edx
pop ebx
pop esi
pop edi
pop ebp
ret
mov edi, dword [esp + 0x34]
mov edx, esi
cmp edi, 2
je 0x4c55f7
mov eax, dword [esp + 0x2c]
movzx ecx, byte [eax + 5]
mov eax, 1
shl eax, cl
mov ecx, dword [esp + 0x18]
lea eax, [eax + edx*8]
lea eax, [ecx + eax + 4]
mov ecx, dword [esp + 0x6c]
mov dword [ecx], eax
add esp, 0x4c
mov eax, edx
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 0x2c], eax
add eax, 0x14
mov dword [esp + 0x18], eax
jmp 0x4c5168
mov edi, ebp
mov esi, ecx
mov ebp, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x28], edi
add ebp, ecx
mov dword [esp + 0x20], ebp
mov ebp, dword [esp + 0x38]
cmp eax, 7
jle 0x4c56ac
mov dword [esp + 0x1c], eax
jmp 0x4c5513
mov edi, dword [eax + ebx*4]
test edi, edi
js 0x4c5526
mov eax, dword [esp + 0x20]
mov eax, dword [eax + edi*8]
cmp dword [esp + 0x64], eax
je 0x4c55e8
mov edx, dword [eax + 0xc]
cmp dword [esp + 0x68], edx
je 0x4c5611
mov eax, ebp
lea edx, [ebx + ebx*4]
shr eax, 5
lea ebx, [edx + eax + 1]
mov eax, dword [esp + 0x18]
and ebx, esi
cmp dword [esp + 0x1c], 0xf
jle 0x4c5550
mov edi, dword [eax + ebx*4]
test edi, edi
js 0x4c5540
mov eax, dword [esp + 0x20]
mov eax, dword [eax + edi*8]
cmp dword [esp + 0x64], eax
je 0x4c55e8
mov edx, dword [eax + 0xc]
cmp dword [esp + 0x68], edx
je 0x4c5556
shr ebp, 0xa
lea eax, [ebx + ebx*4]
lea ebx, [ebp + eax + 1]
and ebx, esi
cmp dword [esp + 0x1c], 0xf
mov eax, dword [esp + 0x18]
jg 0x4c54a8
movsx edi, word [eax + ebx*2]
test edi, edi
jns 0x4c54af
cmp edi, 0xffffffff
jne 0x4c54cd
mov ecx, dword [esp + 0x6c]
xor eax, eax
mov edx, edi
mov dword [ecx], eax
add esp, 0x4c
mov eax, edx
pop ebx
pop esi
pop edi
pop ebp
ret
cmp edi, 0xffffffff
jne 0x4c5507
jmp 0x4c552b
movsx edi, word [eax + ebx*2]
jmp 0x4c54e9
mov edx, dword [eax + 8]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x30], edx
cmp dword [ecx + 8], edx
jne 0x4c5507
movzx edx, byte [eax + 0x10]
mov byte [esp + 0x34], dl
shr dl, 2
mov ecx, edx
and ecx, 7
mov byte [esp + 0x3f], cl
movzx ecx, cl
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x64]
movzx edx, byte [ecx + 0x10]
mov byte [esp + 0x24], dl
shr dl, 2
and edx, 7
cmp dl, byte [esp + 0x3f]
jne 0x4c5507
test byte [esp + 0x34], 0x20
jne 0x4c5885
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x34], eax
test byte [esp + 0x24], 0x20
jne 0x4c586a
mov eax, dword [esp + 0x64]
mov eax, dword [eax + 0x1c]
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0x30]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x34]
imul edx, ecx
mov dword [esp], eax
mov dword [esp + 8], edx
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x4c5507
mov edx, edi
mov edi, dword [esp + 0x28]
cmp edi, 2
jne 0x4c543f
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x6c]
mov eax, dword [eax + 0x1c]
lea eax, [eax + edx*4]
mov dword [ecx], eax
add esp, 0x4c
mov eax, edx
pop ebx
pop esi
pop edi
pop ebp
ret
mov edx, dword [eax + 8]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x30], edx
cmp dword [ecx + 8], edx
jne 0x4c54cd
movzx edx, byte [eax + 0x10]
mov byte [esp + 0x34], dl
shr dl, 2
mov ecx, edx
and ecx, 7
mov byte [esp + 0x3f], cl
movzx ecx, cl
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x64]
movzx edx, byte [ecx + 0x10]
mov byte [esp + 0x24], dl
shr dl, 2
and edx, 7
cmp dl, byte [esp + 0x3f]
jne 0x4c54cd
test byte [esp + 0x34], 0x20
jne 0x4c58b7
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x34], eax
test byte [esp + 0x24], 0x20
jne 0x4c589c
mov eax, dword [esp + 0x64]
mov eax, dword [eax + 0x1c]
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0x30]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x34]
imul edx, ecx
mov dword [esp], eax
mov dword [esp + 8], edx
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x4c54cd
jmp 0x4c55e8
mov dword [esp + 0x1c], esi
mov esi, dword [esp + 0x18]
jmp 0x4c5722
mov eax, dword [esp + 0x20]
mov eax, dword [eax + edi*8]
cmp dword [esp + 0x64], eax
je 0x4c55e8
mov ecx, dword [eax + 0xc]
cmp dword [esp + 0x68], ecx
je 0x4c57d0
mov eax, ebp
lea ecx, [ebx + ebx*4]
shr eax, 5
lea ebx, [eax + ecx + 1]
mov eax, dword [esp + 0x1c]
and ebx, eax
movsx edi, byte [esi + ebx]
test edi, edi
js 0x4c5738
mov eax, dword [esp + 0x20]
mov eax, dword [eax + edi*8]
cmp dword [esp + 0x64], eax
je 0x4c55e8
mov ecx, dword [eax + 0xc]
cmp dword [esp + 0x68], ecx
je 0x4c5748
lea eax, [ebx + ebx*4]
shr ebp, 0xa
lea ebx, [ebp + eax + 1]
mov eax, dword [esp + 0x1c]
and ebx, eax
movsx edi, byte [esi + ebx]
test edi, edi
jns 0x4c56c0
cmp edi, 0xffffffff
jne 0x4c56de
jmp 0x4c552b
cmp edi, 0xffffffff
jne 0x4c5712
jmp 0x4c552b
mov ecx, dword [eax + 8]
mov edx, dword [esp + 0x64]
mov dword [esp + 0x30], ecx
cmp ecx, dword [edx + 8]
jne 0x4c5712
movzx ecx, byte [eax + 0x10]
mov byte [esp + 0x34], cl
shr cl, 2
mov edx, ecx
mov ecx, dword [esp + 0x64]
and edx, 7
movzx ecx, byte [ecx + 0x10]
mov byte [esp + 0x24], cl
shr cl, 2
and ecx, 7
cmp edx, ecx
jne 0x4c5712
test byte [esp + 0x34], 0x20
jne 0x4c58e1
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x64]
test byte [esp + 0x24], 0x20
jne 0x4c58ce
mov ecx, dword [eax + 0x1c]
mov eax, dword [esp + 0x30]
mov dword [esp + 4], ecx
imul eax, edx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x4c5712
jmp 0x4c55e8
mov ecx, dword [eax + 8]
mov edx, dword [esp + 0x64]
mov dword [esp + 0x30], ecx
cmp ecx, dword [edx + 8]
jne 0x4c56de
movzx ecx, byte [eax + 0x10]
mov byte [esp + 0x34], cl
shr cl, 2
mov edx, ecx
mov ecx, dword [esp + 0x64]
and edx, 7
movzx ecx, byte [ecx + 0x10]
mov byte [esp + 0x24], cl
shr cl, 2
and ecx, 7
cmp edx, ecx
jne 0x4c56de
test byte [esp + 0x34], 0x20
jne 0x4c5856
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x64]
test byte [esp + 0x24], 0x20
jne 0x4c58f8
mov ecx, dword [eax + 0x1c]
mov eax, dword [esp + 0x30]
mov dword [esp + 4], ecx
imul eax, edx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x4c56de
jmp 0x4c55e8
lea ecx, [eax + 0x14]
add eax, 0x1c
test byte [esp + 0x34], 0x40
cmove ecx, eax
mov dword [esp + 0x34], ecx
jmp 0x4c581c
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x64]
add eax, 0x1c
lea edx, [ecx + 0x14]
test byte [esp + 0x24], 0x40
cmovne eax, edx
jmp 0x4c55c1
lea edx, [eax + 0x1c]
add eax, 0x14
test byte [esp + 0x34], 0x40
cmovne edx, eax
mov dword [esp + 0x34], edx
jmp 0x4c55af
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x64]
add eax, 0x1c
lea edx, [ecx + 0x14]
test byte [esp + 0x24], 0x40
cmovne eax, edx
jmp 0x4c5680
lea edx, [eax + 0x1c]
add eax, 0x14
test byte [esp + 0x34], 0x40
cmovne edx, eax
mov dword [esp + 0x34], edx
jmp 0x4c566e
lea ecx, [eax + 0x14]
add eax, 0x1c
test byte [esp + 0x24], 0x40
cmove ecx, eax
jmp 0x4c57a2
lea ecx, [eax + 0x14]
add eax, 0x1c
test byte [esp + 0x34], 0x40
cmove ecx, eax
mov dword [esp + 0x34], ecx
jmp 0x4c5790
lea ecx, [eax + 0x14]
add eax, 0x1c
test byte [esp + 0x24], 0x40
cmove ecx, eax
jmp 0x4c582e