Function at 0x48fca0
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x64
mov eax, dword [0x80100c]
xor eax, esp
mov dword [esp + 0x60], eax
mov edx, dword [esp + 0x68]
mov ecx, dword [esp + 0x7c]
push ebx
push ebp
mov ebp, dword [esp + 0x74]
xor eax, eax
push esi
mov esi, dword [esp + 0x84]
cmp dword [esi + 0x338], 6
mov ebx, dword [esi]
sete al
push edi
mov dword [esp + 0x18], edx
mov dword [esp + 0x28], ecx
lea edi, [esi + 8]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 0
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x84]
mov eax, dword [esi + eax*4 + 0x420]
mov dword [esp + 0x20], eax
mov eax, dword [esi + 4]
cmp eax, 1
jl 0x48fd0d
cmp eax, 0x11
jl 0x48fd1e
cmp dword [ecx], 0
jne 0x48fd1e
mov eax, 1
mov ecx, esi
call fcn.0048fc30
mov eax, dword [esi + 4]
dec eax
cmp eax, 0xd
ja case.0x48fd32.2
movzx ecx, byte [eax + 0x49032c]
jmp dword [ecx*4 + 0x490310]
cmp dword [esi + 0x53c], 0
mov ebx, dword [esp + 0x80]
mov dword [esi + 0x5f8], 1
je 0x48fd77
cmp dword [esp + 0x1c], 0
mov eax, 0x753970
jne 0x48fd64
mov eax, 0x7c554c
mov edx, dword [esi]
push ebx
push ebp
push eax
push 0x753940
push edx
call fcn.00463b80
add esp, 0x14
mov eax, dword [esp + 0x10]
push ebx
push ebp
push 0x753920
push eax
call fcn.00463b80
mov ecx, ebx
sar ecx, 8
add esp, 0x10
cmp dword [esp + 0x1c], 0
mov byte [edi], 4
mov byte [edi + 1], 1
mov byte [edi + 2], cl
mov byte [edi + 3], bl
jne 0x48fe70
lea edx, [esp + 0x14]
push edx
push 0
push ebx
push ebp
push esi
call fcn.0048c2d0
add esp, 0x14
cmp eax, 0xffffffff
je 0x48ff9d
mov ecx, esi
cmp eax, 1
jne 0x48fdfc
mov eax, 0xa
call fcn.0048fc30
mov eax, dword [esp + 0x10]
push ebp
push 0x7538fc
push eax
call fcn.00463b80
add esp, 0xc
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.005635df
add esp, 0x64
ret
mov eax, 0xb
call fcn.0048fc30
mov ebx, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
test ecx, ecx
je case.0x48fd32.11
mov ebx, dword [ecx]
test ebx, ebx
je 0x48ff8a
push 0x40
lea ecx, [esp + 0x34]
push ecx
push ebx
call fcn.0048b850
add esp, 0xc
cmp dword [ebx + 4], 2
jne 0x48ff57
mov eax, dword [ebx + 0x18]
movzx edx, byte [eax + 4]
mov byte [edi + 4], dl
mov cl, byte [eax + 5]
mov byte [edi + 5], cl
movzx edx, byte [eax + 6]
lea ecx, [esp + 0x30]
push ecx
mov byte [edi + 6], dl
mov edx, dword [esp + 0x14]
mov al, byte [eax + 7]
push 0x7538cc
push edx
mov byte [edi + 7], al
call fcn.00463b80
jmp 0x48ff6d
mov eax, 9
mov ecx, esi
call fcn.0048fc30
mov edx, dword [esp + 0x18]
lea ebx, [edi + 8]
mov byte [ebx], 0
test edx, edx
je 0x48ffc1
mov eax, edx
lea ecx, [eax + 1]
mov dword [esp + 0x18], ecx
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48fe97
sub eax, dword [esp + 0x18]
cmp eax, 0x250
jb 0x48ffb5
mov edx, dword [esp + 0x10]
push 0x7538a0
push edx
call fcn.00463c60
add esp, 8
pop edi
pop esi
pop ebp
mov eax, 0xb
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.005635df
add esp, 0x64
ret
mov ecx, dword [esi + 0x364]
push ecx
push ebp
push esi
call fcn.0048bb00
add esp, 0xc
mov dword [esp + 0x14], eax
test eax, eax
je 0x48ff20
push ebp
push 0x753884
push ebx
mov dword [esi + 0x66c], eax
mov dword [esi + 0x678], 1
call fcn.00463b80
add esp, 0xc
mov eax, 0xb
mov ecx, esi
call fcn.0048fc30
jmp 0x48fe0a
mov eax, dword [ebx + 8]
lea edx, [esp + 0x14]
push edx
push eax
call fcn.0048c230
mov ecx, dword [esp + 0x1c]
add esp, 8
test ecx, ecx
jne 0x48fe16
pop edi
neg eax
pop esi
sbb eax, eax
pop ebp
and eax, 0x1b
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.005635df
add esp, 0x64
ret
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x30]
push eax
push 0x75385c
push ecx
xor ebx, ebx
call fcn.00463c60
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
add esp, 0xc
push edx
push eax
call fcn.0048c560
add esp, 8
test ebx, ebx
jne 0x48fe7c
mov ebx, dword [esp + 0x10]
push ebp
push 0x753830
push ebx
call fcn.00463c60
add esp, 0xc
pop edi
pop esi
pop ebp
mov eax, 0x1b
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.005635df
add esp, 0x64
ret
inc eax
push eax
push edx
push ebx
call fcn.005645b0
add esp, 0xc
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48ffc6
sub eax, edx
cmp dword [esp + 0x1c], 0
lea ebx, [eax + 9]
je 0x490020
mov eax, ebp
mov byte [edi + 4], cl
mov byte [edi + 5], cl
mov byte [edi + 6], cl
mov byte [edi + 7], 1
lea edx, [eax + 1]
jmp 0x48fff0
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x48fff0
sub eax, edx
inc eax
mov dword [esp + 0x18], eax
cmp eax, 0xff
ja 0x49008c
mov ecx, ebx
sub ecx, ebp
mov eax, ebp
lea edx, [ecx + edi]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x490012
add ebx, dword [esp + 0x18]
mov eax, 0xe
mov ecx, esi
mov dword [esi + 0x264], edi
mov dword [esi + 0x260], ebx
call fcn.0048fc30
mov ebx, dword [esp + 0x10]
mov ecx, dword [esi + 0x260]
mov edx, dword [esi + 0x264]
lea eax, [esp + 0x2c]
push eax
mov eax, dword [esp + 0x24]
push ecx
push edx
push eax
push esi
call fcn.004641a0
add esp, 0x14
test eax, eax
je 0x4900b6
cmp eax, 0x51
je 0x4900b6
push 0x753808
push ebx
call fcn.00463c60
add esp, 8
pop edi
pop esi
pop ebp
mov eax, 0x1d
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.005635df
add esp, 0x64
ret
mov edx, dword [esp + 0x10]
push 0x7537ec
push edx
call fcn.00463c60
add esp, 8
pop edi
pop esi
pop ebp
mov eax, 9
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.005635df
add esp, 0x64
ret
mov eax, dword [esi + 0x260]
mov ecx, dword [esp + 0x2c]
cmp ecx, eax
je 0x4900e7
add dword [esi + 0x264], ecx
sub eax, ecx
pop edi
mov dword [esi + 0x260], eax
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.005635df
add esp, 0x64
ret
mov eax, 4
mov ecx, esi
mov dword [esi + 0x260], 8
mov dword [esi + 0x264], edi
call fcn.0048fc30
mov edx, dword [esi + 0x260]
mov eax, dword [esi + 0x264]
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x24]
push edx
push eax
push ecx
call fcn.00463a20
mov ecx, dword [esp + 0x34]
add esp, 0x10
test eax, eax
je 0x49015d
cmp eax, 0x51
je 0x490187
push eax
call fcn.00491290
push eax
push 0x7537b8
push ebx
call fcn.00463c60
add esp, 0x10
pop edi
pop esi
pop ebp
mov eax, 0xf
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.005635df
add esp, 0x64
ret
test ecx, ecx
jne 0x490187
push 0x75379c
push ebx
call fcn.00463c60
add esp, 8
pop edi
pop esi
pop ebp
mov eax, 3
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.005635df
add esp, 0x64
ret
mov eax, dword [esi + 0x260]
cmp ecx, eax
jne 0x4900c4
mov eax, 0x11
mov ecx, esi
call fcn.0048fc30
cmp byte [edi], 0
je 0x4901cc
push 0x753764
push ebx
call fcn.00463c60
add esp, 8
pop edi
pop esi
pop ebp
mov eax, 2
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.005635df
add esp, 0x64
ret
movzx eax, byte [edi + 1]
lea ecx, [eax - 0x5a]
cmp ecx, 3
ja case.default.0x4901dc
jmp dword [ecx*4 + 0x49033c]
cmp dword [esp + 0x1c], 0
mov eax, 0x753970
jne 0x4901f4
mov eax, 0x7c554c
push eax
push 0x753748
push ebx
call fcn.00463b80
mov edx, dword [esp + 0x34]
add esp, 0xc
pop edi
pop esi
pop ebp
mov dword [edx], 1
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.005635df
add esp, 0x64
ret
movzx ecx, byte [edi + 3]
movzx edx, byte [edi + 7]
push eax
movzx eax, byte [edi + 2]
shl eax, 8
or eax, ecx
movzx ecx, byte [edi + 5]
push eax
movzx eax, byte [edi + 6]
push edx
movzx edx, byte [edi + 4]
push eax
push ecx
push edx
push 0x7536f0
push ebx
call fcn.00463c60
mov eax, 0x1a
jmp 0x4902f7
movzx ecx, byte [edi + 3]
movzx edx, byte [edi + 7]
push eax
movzx eax, byte [edi + 2]
shl eax, 8
or eax, ecx
movzx ecx, byte [edi + 5]
push eax
movzx eax, byte [edi + 6]
push edx
movzx edx, byte [edi + 4]
push eax
push ecx
push edx
push 0x753668
push ebx
call fcn.00463c60
mov eax, 7
jmp 0x4902f7
movzx ecx, byte [edi + 3]
movzx edx, byte [edi + 7]
push eax
movzx eax, byte [edi + 2]
shl eax, 8
or eax, ecx
movzx ecx, byte [edi + 5]
push eax
movzx eax, byte [edi + 6]
push edx
movzx edx, byte [edi + 4]
push eax
push ecx
push edx
push 0x7535d8
push ebx
call fcn.00463c60
mov eax, 8
jmp 0x4902f7
movzx ecx, byte [edi + 3]
movzx edx, byte [edi + 7]
push eax
movzx eax, byte [edi + 2]
shl eax, 8
or eax, ecx
movzx ecx, byte [edi + 5]
push eax
movzx eax, byte [edi + 6]
push edx
movzx edx, byte [edi + 4]
push eax
push ecx
push edx
push 0x753590
push ebx
call fcn.00463c60
mov eax, 0x1f
mov ecx, dword [esp + 0x90]
add esp, 0x20
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.005635df
add esp, 0x64
ret