Function at 0x492cc0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x344
mov eax, dword [0x5be410]
xor eax, esp
mov dword [esp + 0x340], eax
push ebx
mov ebx, dword [ebp + 8]
lea eax, [esp + 0x270]
push esi
push edi
mov edi, dword [ebp + 0xc]
mov esi, ecx
push 0x64
push 0
push eax
mov dword [esp + 0x28], ebx
mov dword [esp + 0x38], edi
call sub.VCRUNTIME140.dll_memset
push 0x64
lea eax, [esp + 0x2f0]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x32
lea eax, [esp + 0x260]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0xa28
push 0
push edi
call sub.VCRUNTIME140.dll_memset
add esp, 0x30
mov ecx, esi
call fcn.00493e40
test al, al
jne 0x492d52
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x340]
xor ecx, esp
call fcn.0054462a
mov esp, ebp
pop ebp
ret 0xc
mov esi, 0x5d7534
mov edi, 0x19
nop dword [eax]
mov al, byte [esi - 0x64]
test al, al
je 0x492d83
mov ecx, esi
movzx edx, al
nop dword [eax]
movzx eax, word [ecx]
lea ecx, [ecx + 2]
or byte [esp + eax + 0x244], 1
sub edx, 1
jne 0x492d70
add esi, 0x204
sub edi, 1
jne 0x492d60
movzx eax, byte [0x5e0a6c]
xor ecx, ecx
cmp cx, ax
jae 0x492dcb
mov esi, 0x5e0a74
mov edi, eax
mov al, byte [esi - 6]
test al, al
je 0x492dc3
mov ecx, esi
movzx edx, al
nop
movzx eax, word [ecx]
lea ecx, [ecx + 2]
or byte [esp + eax + 0x244], 4
sub edx, 1
jne 0x492db0
add esi, 0x46
sub edi, 1
jne 0x492da3
movzx eax, byte [0x5e1144]
xor ecx, ecx
cmp cx, ax
jae 0x492e0b
mov esi, 0x5e114c
mov edi, eax
mov al, byte [esi - 6]
test al, al
je 0x492e03
mov ecx, esi
movzx edx, al
nop dword [eax]
movzx eax, word [ecx]
add ecx, 2
or byte [esp + eax + 0x244], 2
sub edx, 1
jne 0x492df0
add esi, 0x46
sub edi, 1
jne 0x492de0
lea edx, [esp + 0x244]
mov esi, 0x32
mov cl, byte [edx]
mov al, cl
and al, 6
cmp al, 6
jne 0x492e26
or cl, 8
mov byte [edx], cl
inc edx
sub esi, 1
jne 0x492e17
mov eax, 0x5d74d0
mov dword [ebx], esi
mov edx, 0x19
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], edx
mov esi, eax
mov byte [esp + 0xf], 0
mov ecx, 0x81
lea edi, [esp + 0x38]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x38]
mov ecx, eax
shr ecx, 0x10
mov dword [esp + 0x30], ecx
test al, al
je 0x492f9a
cmp byte [ebp + 0x10], 0
je 0x492e71
mov al, 1
jmp 0x492e79
test al, al
je 0x492f9a
mov edi, dword [esp + 0x2c]
lea ecx, [esp + 0x21c]
mov dword [esp + 0x14], ecx
lea ebx, [esp + 0xdc]
lea ecx, [esp + 0x11c]
movzx eax, al
mov dword [esp + 0x10], ecx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x20], eax
movzx edx, word [ebx - 0x40]
mov esi, dword [esp + 0x1c]
mov eax, edx
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x34], eax
imul eax, dword [esi], 0x34
mov word [eax + edi + 4], cx
xor al, al
mov bl, byte [esi]
test bl, bl
je 0x492ee7
nop word [eax + eax]
movzx ecx, al
cmp dx, word [esp + ecx*2 + 0x278]
je 0x492fcd
add al, 1
cmp al, bl
jb 0x492ed0
mov eax, dword [esi]
mov esi, edx
mov ebx, dword [esp + 0x18]
mov word [esp + eax*2 + 0x278], dx
mov word [esp + esi*2 + 0x2e0], ax
imul eax, eax, 0x34
mov word [eax + edi + 2], dx
mov edx, dword [esp + 0x1c]
mov al, byte [esp + esi + 0x244]
imul ecx, dword [edx], 0x34
mov byte [ecx + edi], al
imul eax, dword [edx], 0x34
mov cl, byte [esp + 0xf]
inc byte [esp + 0xf]
mov byte [eax + edi + 1], cl
imul ecx, dword [edx], 0x34
mov ax, word [ebx]
mov word [ecx + edi + 8], ax
imul ecx, dword [edx], 0x34
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov dword [ecx + edi + 0xa], eax
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 4]
mov dword [ecx + edi + 0xe], eax
imul ecx, dword [edx], 0x34
mov eax, dword [esp + 0x14]
mov al, byte [eax]
mov byte [ecx + edi + 0x12], al
inc dword [edx]
movzx ecx, word [esp + esi*2 + 0x2e0]
add dword [esp + 0x10], 8
inc dword [esp + 0x14]
imul edx, ecx, 0x34
imul ecx, ecx, 0x1a
movzx eax, byte [edx + edi + 6]
add ecx, eax
mov ax, word [ebx - 0x80]
add ebx, 2
mov dword [esp + 0x18], ebx
mov word [edi + ecx*2 + 0x14], ax
inc byte [edx + edi + 6]
sub dword [esp + 0x20], 1
jne 0x492ea5
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add eax, 0x204
sub edx, 1
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], edx
jne 0x492e40
mov ecx, dword [esp + 0x34c]
mov al, 1
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0054462a
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [esp + 0x34]
mov ebx, dword [esp + 0x18]
movzx esi, ax
jmp 0x492f59