Function at 0x4a5f30
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4a6383
sub esp, 0x50
mov edx, dword [esp + 0x60]
test edx, edx
je 0x4a5f57
mov eax, dword [esp + 0x64]
jmp 0x4a5f5b
mov eax, dword [esp + 0x5c]
mov ebx, dword [esp + 0x54]
movzx ebp, byte [ebx + 5]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4a5f72
mov ebp, dword [ebx + 0x14]
cmp eax, ebp
jle 0x4a5f72
mov eax, ebp
mov ebp, eax
shl eax, 1
test eax, eax
jle 0x4a6095
movzx esi, byte [ebx + 9]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4a5f9d
movzx esi, byte [ebx + 8]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4a5f97
mov eax, ebp
shl eax, 2
lea esi, [eax + ebp - 1]
jmp 0x4a5fac
movzx esi, byte [ebx + 8]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4a5faa
add eax, 2
mov esi, eax
mov dword [esp + 0x40], ebp
mov dword [esp + 0x24], esi
mov eax, edx
movzx edx, byte [ebx + 4]
test dl, dl
je 0x4a5fed
mov edx, dword [ebx + 0x10]
cmp esi, edx
jge 0x4a5fed
mov ecx, edx
movzx edx, byte [ebx + 6]
test dl, dl
jne 0x4a5fed
mov dword [esp], ebx
sub ecx, esi
mov dword [esp + 4], ecx
call fcn.004a4c20
mov eax, dword [esp + 0x60]
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x40]
mov esi, dword [esp + 0x24]
mov edx, dword [ebx]
mov ecx, esi
mov esi, dword [edx + 4]
mov edi, ebp
mov ebp, dword [edx + 8]
mov edx, dword [edx]
movzx ebx, byte [ebx + 8]
test bl, bl
je 0x4a6081
mov ebx, dword [esp + 0x70]
cmp ebx, 0x10
jbe 0x4a6376
mov dword [esp + 0x2c], esi
lea ebx, [esi + 2]
mov esi, dword [esp + 0x6c]
movzx esi, byte [esi + 0x10]
cmp ebp, ebx
jae 0x4a606b
xchg esi, eax
mov byte [esp + 0x23], al
xchg esi, eax
lea eax, [0x4fa160]
mov dword [esp], eax
mov dword [esp + 4], edx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00446d70
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea ebx, [eax + 2]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x24]
movzx esi, byte [esp + 0x23]
mov edi, dword [esp + 0x40]
mov dword [esp + 0x3c], ebx
mov ebx, dword [esp + 0x2c]
mov byte [edx + ebx], 0x30
xchg esi, eax
mov byte [edx + ebx + 1], al
xchg esi, eax
mov esi, dword [esp + 0x3c]
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x44], eax
xor eax, eax
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x44]
jmp 0x4a60e7
movzx eax, byte [ebx + 4]
test al, al
je 0x4a60ac
mov eax, dword [ebx + 0x10]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.004a4c20
add esp, 0x50
ret
movzx ecx, byte [esp + 0x23]
mov eax, dword [esp + 0x4c]
mov byte [eax + edx], cl
xchg esi, ebx
mov byte [eax + edx + 1], bl
xchg esi, ebx
mov ecx, dword [esp + 0x28]
inc ecx
mov edx, dword [esp + 0x70]
mov esi, dword [esp + 0x64]
mov eax, dword [esp + 0x60]
mov dword [esp + 0x28], ecx
mov esi, ebx
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x24]
mov ebx, dword [esp + 0x70]
mov ebx, dword [esp + 0x28]
cmp ebx, edi
jge 0x4a62fc
mov dword [esp + 0x4c], edx
mov edx, dword [esp + 0x54]
movzx edx, byte [edx + 9]
test dl, dl
je 0x4a620d
test ebx, ebx
jle 0x4a6209
lea edx, [esi + 1]
cmp ebp, edx
jae 0x4a6163
mov dword [esp + 0x38], esi
lea eax, [0x4fa160]
mov dword [esp], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], edx
call fcn.00446d70
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
inc eax
mov ecx, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
mov esi, dword [esp + 0x38]
mov edi, dword [esp + 0x40]
mov dword [esp + 0x4c], edx
mov edx, eax
mov eax, dword [esp + 0x60]
mov ebx, dword [esp + 0x4c]
mov byte [ebx + esi], 0x20
mov esi, dword [esp + 0x54]
movzx esi, byte [esi + 8]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4a6205
mov esi, dword [esp + 0x70]
cmp esi, 0x10
jbe 0x4a636a
mov dword [esp + 0x34], edx
lea esi, [edx + 2]
mov edx, dword [esp + 0x6c]
movzx edx, byte [edx + 0x10]
cmp ebp, esi
jb 0x4a61a1
test eax, eax
jmp 0x4a61ef
mov byte [esp + 0x23], dl
lea eax, [0x4fa160]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0x34]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
call fcn.00446d70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
lea esi, [ecx + 2]
mov ecx, dword [esp + 0x60]
test ecx, ecx
mov ecx, dword [esp + 0x24]
movzx edx, byte [esp + 0x23]
mov edi, dword [esp + 0x40]
mov ebx, eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x2c], esi
mov esi, dword [esp + 0x34]
mov byte [ebx + esi], 0x30
mov byte [ebx + esi + 1], dl
mov edx, dword [esp + 0x2c]
jmp 0x4a6215
test eax, eax
jmp 0x4a6215
test eax, eax
jmp 0x4a620f
test eax, eax
mov edx, esi
mov ebx, dword [esp + 0x4c]
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x30], ebp
je 0x4a6235
mov esi, dword [esp + 0x64]
mov ebx, dword [esp + 0x28]
cmp esi, ebx
jbe 0x4a6361
movzx esi, byte [eax + ebx]
jmp 0x4a6254
mov esi, dword [esp + 0x5c]
mov ebx, dword [esp + 0x28]
cmp esi, ebx
jbe 0x4a6358
mov ebp, dword [esp + 0x58]
movzx ebp, byte [ebp + ebx]
mov esi, ebp
mov ebp, dword [esp + 0x30]
xchg esi, eax
mov byte [esp + 0x21], al
xchg esi, eax
xchg esi, eax
shr al, 4
xchg esi, eax
xchg esi, eax
movzx eax, al
xchg esi, eax
mov ebx, dword [esp + 0x70]
cmp ebx, esi
jbe 0x4a634f
mov ebp, dword [esp + 0x6c]
movzx esi, byte [esi + ebp]
xchg esi, eax
mov byte [esp + 0x23], al
xchg esi, eax
movzx esi, byte [esp + 0x21]
and esi, 0xf
cmp ebx, esi
jbe 0x4a6346
lea ebx, [edx + 2]
movzx esi, byte [esi + ebp]
mov ebp, dword [esp + 0x30]
cmp ebp, ebx
jae 0x4a60b0
xchg esi, eax
mov byte [esp + 0x22], al
xchg esi, eax
mov dword [esp + 0x2c], edx
lea eax, [0x4fa160]
mov dword [esp], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
call fcn.00446d70
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
add eax, 2
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
movzx esi, byte [esp + 0x22]
mov edi, dword [esp + 0x40]
mov dword [esp + 0x4c], ebx
mov ebx, eax
mov eax, dword [esp + 0x60]
jmp 0x4a60b0
mov ebx, dword [esp + 0x54]
mov edi, dword [ebx]
mov dword [edi + 4], esi
mov dword [edi + 8], ebp
mov ebp, dword [0x605b20]
test ebp, ebp
jne 0x4a6316
mov dword [edi], edx
jmp 0x4a631d
mov eax, edx
call fcn.0045d600
movzx eax, byte [ebx + 4]
test al, al
je 0x4a6342
mov eax, dword [ebx + 0x10]
cmp ecx, eax
jge 0x4a6342
movzx edx, byte [ebx + 6]
test dl, dl
je 0x4a6342
mov dword [esp], ebx
sub eax, ecx
mov dword [esp + 4], eax
call fcn.004a4c20
add esp, 0x50
ret
mov eax, esi
mov ecx, ebx
call fcn.0045d680
mov eax, esi
mov ecx, ebx
call fcn.0045d680
mov eax, ebx
mov ecx, esi
call fcn.0045d680
mov eax, ebx
mov ecx, esi
call fcn.0045d680
mov eax, 0x10
mov ecx, esi
call fcn.0045d680
mov eax, 0x10
mov ecx, ebx
call fcn.0045d680
nop
call fcn.0045c1c0
jmp fcn.004a5f30