Function at 0x4de030
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x40
push ebx
push ebp
push esi
push edi
mov edi, ecx
push 0x6d2738
mov dword [esp + 0x14], 0
mov ax, word [edi + 0x10]
mov cx, word [edi + 0x12]
mov word [esp + 0x18], ax
mov word [esp + 0x1a], cx
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x18]
lea ecx, [esp + 0x1c]
push eax
push ecx
mov dword [esp + 0x20], edx
call fcn.0047a800
mov edx, dword [eax]
lea eax, [edi + 0x58]
mov dword [esp + 0x28], edx
add esp, 0xc
mov ecx, dword [eax + 4]
cmp eax, ecx
mov dword [esp + 0x38], ecx
je 0x4de270
mov eax, dword [esp + 0x38]
mov ecx, 0x6d2738
lea ebx, [eax - 0x50]
push ebx
call fcn.004c35c0
test eax, eax
je 0x4de25a
lea ecx, [esp + 0x1c]
lea esi, [ebx + 0x10]
push 0
push ecx
mov ecx, esi
call fcn.004c93b0
test al, al
je 0x4de103
mov dx, word [esi]
mov ax, word [esi + 2]
mov ecx, dword [esp + 0x1c]
mov word [esp + 0x24], dx
mov word [esp + 0x26], ax
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x26]
sub ecx, edx
mov edx, dword [esp + 0x1e]
mov word [esp + 0x14], cx
sub edx, eax
lea ecx, [esp + 0x18]
mov word [esp + 0x16], dx
mov eax, dword [esp + 0x14]
push 0
push ecx
lea ecx, [ebx + 0x34]
mov dword [esp + 0x20], eax
call fcn.004c93b0
test al, al
jne 0x4de13d
mov eax, dword [0x6d2744]
xor edx, edx
mov dx, word [0x6d2746]
and eax, 0xffff
movsx ecx, word [esp + 0x1e]
push edx
push eax
movsx edx, word [esp + 0x24]
push ecx
push edx
lea ecx, [esp + 0x3c]
call fcn.004c9320
push eax
mov ecx, esi
call fcn.004c9480
test al, al
je 0x4de25a
mov eax, dword [ebx]
push 0
mov ecx, ebx
call dword [eax + 0xa0]
test eax, eax
je 0x4de241
mov eax, dword [ebx + 8]
test al, 1
je 0x4de165
not eax
test al, 0x80
je 0x4de165
mov ebp, 1
jmp 0x4de167
xor ebp, ebp
lea ecx, [esp + 0x10]
push ecx
mov ecx, ebx
call fcn.0041b970
test eax, eax
je 0x4de233
mov dx, word [esi]
mov cx, word [esi + 4]
mov ax, word [ebx + 0x12]
mov word [esp + 0x40], dx
sub cx, dx
mov dx, word [esi + 6]
sub dx, word [esi + 2]
inc ecx
mov word [esp + 0x42], ax
mov ax, word [edi + 0x10]
inc edx
mov word [esp + 0x44], cx
mov cx, word [edi + 0x12]
mov word [esp + 0x46], dx
mov dx, word [edi + 0x14]
mov word [esp + 0x48], ax
sub dx, ax
mov ax, word [edi + 0x16]
mov word [esp + 0x4a], cx
sub ax, cx
lea ecx, [esp + 0x40]
inc edx
inc eax
push ecx
push 0x2544
mov word [esp + 0x54], dx
mov word [esp + 0x56], ax
call fcn.00493e00
mov ecx, eax
call fcn.004906f0
lea edx, [esp + 0x44]
push edx
push 0x2546
call fcn.00493e00
mov ecx, eax
call fcn.004906f0
lea eax, [esp + 0x48]
push eax
push 0x2548
call fcn.00493e00
mov ecx, eax
call fcn.004906f0
lea ecx, [esp + 0x4c]
push ecx
push 0x254a
call fcn.00493e00
mov ecx, eax
call fcn.004906f0
push ebx
mov ecx, edi
call fcn.004e01c0
test ebp, ebp
je 0x4de25a
mov eax, dword [ebx + 8]
test ah, 0x80
jne 0x4de270
jmp 0x4de25a
mov ebx, dword [ebx + 8]
test bl, 1
je 0x4de25a
not ebx
test bl, 0x80
je 0x4de25a
mov eax, dword [esp + 0x10]
or al, 2
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x38]
lea ecx, [edi + 0x58]
mov eax, dword [edx + 4]
cmp ecx, eax
mov dword [esp + 0x38], eax
jne 0x4de08a
mov eax, dword [esp + 0x10]
pop edi
pop esi
pop ebp
test eax, eax
pop ebx
jne 0x4de281
mov eax, 4
add esp, 0x40
ret