Function at 0x4d1c64
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x18
mov eax, dword [ecx + 0x30]
push ebx
mov ebx, dword [ecx + 4]
push ebp
push esi
push edi
lea edi, [eax + ebx]
mov dword [esp + 0x10], eax
movzx ecx, byte [edi]
mov eax, 0x100
imul ecx, eax
mov esi, edx
movzx eax, byte [edi + 1]
add cx, ax
movzx ebp, cx
test bp, bp
jne 0x4d1cb6
movzx ecx, byte [edi + 2]
movzx eax, byte [edi + 3]
shl ecx, 8
add eax, 0xfffffffa
add eax, ecx
cmp esi, eax
jge 0x4d1f2d
movzx eax, byte [edi + esi + 6]
jmp 0x4d1f2f
cmp ebp, 6
jne 0x4d1d04
movzx edx, byte [edi + 6]
movzx eax, byte [edi + 7]
shl edx, 8
add edx, eax
cmp esi, edx
jb 0x4d1f2d
movzx ecx, byte [edi + 8]
movzx eax, byte [edi + 9]
shl ecx, 8
add ecx, edx
add eax, ecx
cmp esi, eax
jae 0x4d1f2d
mov eax, dword [esp + 0x10]
sub esi, edx
lea ecx, [eax + esi*2]
movzx eax, byte [ecx + ebx + 0xb]
movzx ecx, byte [ecx + ebx + 0xa]
shl ecx, 8
add eax, ecx
jmp 0x4d1f2f
push 2
pop eax
cmp bp, ax
je 0x4d1f2d
cmp ebp, 4
jne 0x4d1eb1
movzx ecx, byte [edi + 6]
mov ebp, 0x100
movzx edx, byte [edi + 7]
imul ecx, ebp
add dx, cx
movzx ecx, byte [edi + 8]
imul ecx, ebp
shr dx, 1
movzx eax, dx
mov dword [esp + 0x18], eax
movzx eax, byte [edi + 9]
add cx, ax
shr cx, 1
movzx eax, cx
movzx ecx, byte [edi + 0xa]
imul ecx, ebp
mov ebp, dword [esp + 0x10]
mov dword [esp + 0x1c], eax
movzx eax, byte [edi + 0xb]
add cx, ax
lea edx, [ebp + 0xe]
movzx eax, cx
mov dword [esp + 0x14], eax
cmp esi, 0xffff
jg 0x4d1f2d
movzx ecx, byte [edi + 0xc]
movzx eax, byte [edi + 0xd]
lea edi, [ebp + 0xe]
shl ecx, 8
add ecx, eax
shr ecx, 1
lea edx, [edx + ecx*2]
movzx ecx, byte [edx + ebx]
movzx eax, byte [edx + ebx + 1]
shl ecx, 8
add ecx, eax
cmp esi, ecx
cmovge edi, edx
sub edi, 2
cmp word [esp + 0x14], 0
je 0x4d1de0
mov bp, word [esp + 0x1c]
shr bp, 1
movzx eax, bp
lea edx, [edi + eax*2]
movzx ecx, byte [edx + ebx]
movzx eax, byte [edx + ebx + 1]
shl ecx, 8
add ecx, eax
mov eax, dword [esp + 0x14]
cmp esi, ecx
cmovg edi, edx
add eax, 0xffff
mov dword [esp + 0x14], eax
test ax, ax
jne 0x4d1dae
mov ebp, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
lea ecx, [ebp + 0xe]
sub edi, ecx
movzx eax, ax
add edi, 2
shr edi, 1
movzx edx, di
add eax, edx
mov dword [esp + 0x14], edx
lea edi, [ecx + edx*2]
lea eax, [eax*2]
add eax, ebp
movzx ecx, byte [eax + ebx + 0x10]
movzx eax, byte [eax + ebx + 0x11]
shl ecx, 8
add eax, ecx
mov dword [esp + 0x1c], eax
cmp esi, eax
jl 0x4d1f2d
movzx ecx, byte [edi + ebx]
movzx eax, byte [edi + ebx + 1]
shl ecx, 8
add ecx, eax
cmp esi, ecx
jg 0x4d1f2d
mov ecx, dword [esp + 0x18]
movzx eax, cx
imul edi, eax, 3
lea eax, [edi + edx]
lea eax, [eax*2]
add eax, ebp
movzx edx, byte [eax + ebx + 0x11]
movzx ecx, byte [eax + ebx + 0x10]
mov eax, 0x100
imul ecx, eax
add dx, cx
movzx ecx, dx
test cx, cx
jne 0x4d1e93
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
movzx ecx, dx
lea eax, [eax + ecx*2]
lea ecx, [eax*2 + 0x10]
add ecx, ebp
add ecx, ebx
call fcn.004d1616
add ax, si
movzx eax, ax
jmp 0x4d1f2f
sub edi, dword [esp + 0x1c]
add edi, dword [esp + 0x14]
add edi, esi
add ecx, ebp
lea ecx, [ecx + edi*2]
movzx eax, byte [ecx + ebx + 0x11]
movzx ecx, byte [ecx + ebx + 0x10]
jmp 0x4d1cfa
push 0xc
pop eax
cmp bp, ax
je 0x4d1ebe
cmp ebp, 0xd
jne 0x4d1f2d
and dword [esp + 0x18], 0
lea ecx, [edi + 0xc]
call fcn.004d162d
mov dword [esp + 0x14], eax
test eax, eax
jle 0x4d1f2d
xor ecx, ecx
mov edi, eax
mov eax, dword [esp + 0x10]
sub edi, ecx
sar edi, 1
add edi, ecx
imul ecx, edi, 0xc
add eax, ecx
mov dword [esp + 0x20], ecx
lea ecx, [ebx + 0x10]
mov dword [esp + 0x1c], eax
add ecx, eax
call fcn.004d162d
mov dword [esp + 0x24], eax
cmp esi, eax
jae 0x4d1f0c
mov ecx, dword [esp + 0x18]
mov eax, edi
mov dword [esp + 0x14], eax
jmp 0x4d1f29
mov ecx, dword [esp + 0x1c]
add ecx, 0x14
add ecx, ebx
call fcn.004d162d
cmp esi, eax
jbe 0x4d1f37
mov eax, dword [esp + 0x14]
lea ecx, [edi + 1]
mov dword [esp + 0x18], ecx
cmp ecx, eax
jl 0x4d1ed5
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x20]
add eax, 0x18
add ecx, eax
add ecx, ebx
call fcn.004d162d
push 0xc
pop ecx
cmp bp, cx
jne 0x4d1f2f
sub eax, dword [esp + 0x24]
add eax, esi
jmp 0x4d1f2f