Function at 0x49d470
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xdc
push ebx
mov ebx, ecx
cmp dword [ebx], 0
push esi
push edi
je 0x49d760
mov al, byte [ebx + 8]
cmp al, 0x64
jne 0x49d4a1
xor eax, eax
mov ax, word [ebx + 6]
push 1
mov ecx, 0x85932c
push eax
jmp 0x49d4ae
xor ecx, ecx
mov cx, word [ebx + 6]
push eax
push ecx
mov ecx, 0x859304
call fcn.004602e0
mov edi, eax
test edi, edi
je 0x49d760
mov edx, dword [0x851370]
mov esi, dword [0x6f44e0]
push edx
push edi
mov ecx, ebx
call fcn.0049cbd0
mov ecx, dword [0x708794]
mov edx, dword [0x708798]
add eax, 0x20
sub ecx, esi
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], edx
jns 0x49d4fe
mov ecx, dword [0x708794]
add ecx, 0x10
mov dword [esp + 0x10], ecx
lea edx, [ecx + esi]
mov ecx, dword [0x6f355c]
cmp edx, ecx
jle 0x49d511
sub ecx, esi
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0xc]
test ecx, ecx
jge 0x49d521
mov dword [esp + 0xc], 0
mov ecx, dword [esp + 0xc]
lea edx, [ecx + eax]
mov ecx, dword [0x6f3560]
cmp edx, ecx
jle 0x49d538
sub ecx, eax
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xc]
push eax
mov eax, dword [esp + 0x14]
add ecx, 0xa
push esi
push ecx
push eax
mov dword [esp + 0x1c], ecx
push edi
mov ecx, ebx
call fcn.0049d2c0
mov bl, byte [ebp + 8]
xor eax, eax
test bl, bl
mov ecx, 0x19
lea edi, [esp + 0x80]
rep stosd dword es:[edi], eax
mov ecx, 0x19
lea edi, [esp + 0x18]
rep stosd dword es:[edi], eax
je 0x49d5d8
movzx ecx, bl
push ecx
lea edx, [esp + 0x84]
push 0x6ae50c
push edx
call fcn.005baa1d
add esp, 0xc
cmp bl, 0xa
jae 0x49d5a9
lea edi, [esp + 0x18]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x49d598
mov ax, word [0x6ac65c]
mov word [edi], ax
lea eax, [esp + 0x80]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x49d5b2
lea edi, [esp + 0x18]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x49d5c0
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov bl, byte [ebp + 0xc]
movzx ecx, bl
push ecx
lea edx, [esp + 0x84]
push 0x6ae508
push edx
call fcn.005baa1d
add esp, 0xc
cmp bl, 0xa
jae 0x49d611
lea edi, [esp + 0x18]
dec edi
mov edi, edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x49d600
mov ax, word [0x6ac65c]
mov word [edi], ax
lea eax, [esp + 0x80]
mov esi, eax
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x49d620
lea edi, [esp + 0x18]
sub eax, esi
dec edi
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x49d630
mov bl, byte [ebp + 0x10]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
movzx ecx, bl
push ecx
lea edx, [esp + 0x84]
push 0x6ae508
push edx
call fcn.005baa1d
add esp, 0xc
cmp bl, 0xa
jae 0x49d681
lea edi, [esp + 0x18]
dec edi
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x49d670
mov ax, word [0x6ac65c]
mov word [edi], ax
lea eax, [esp + 0x80]
mov edx, eax
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x49d690
lea edi, [esp + 0x18]
sub eax, edx
dec edi
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x49d6a0
mov bl, byte [ebp + 0x14]
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
movzx ecx, bl
push ecx
lea edx, [esp + 0x84]
push 0x6a9858
push edx
call fcn.005baa1d
add esp, 0xc
cmp bl, 0xa
jae 0x49d6f1
lea edi, [esp + 0x18]
dec edi
mov edi, edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x49d6e0
mov ax, word [0x6ac65c]
mov word [edi], ax
lea eax, [esp + 0x80]
mov esi, eax
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x49d700
lea edi, [esp + 0x18]
sub eax, esi
dec edi
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x49d710
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x21f3fa0
call fcn.0052bf90
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push ecx
lea ecx, [edx + eax - 0xf]
mov edx, dword [esp + 0x14]
push 0xffffffffffffffff
push ecx
add edx, 0xa
push edx
mov ecx, 0x21f3fa0
call fcn.0052c1f0
mov ecx, 0x21f3fa0
call fcn.0052bfa0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10