Function at 0x4c86b0
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x40
push ebx
push ebp
push esi
push edi
mov edi, ecx
push 0x6b1210
mov dword [esp + 0x14], 0
mov ax, word [edi + 0x10]
mov cx, word [edi + 0x12]
mov word [esp + 0x18], ax
mov word [esp + 0x1a], cx
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x18]
lea ecx, [esp + 0x1c]
push eax
push ecx
mov dword [esp + 0x20], edx
call fcn.004724f0
mov edx, dword [eax]
lea eax, [edi + 0x58]
mov dword [esp + 0x28], edx
add esp, 0xc
mov ecx, dword [eax + 4]
cmp eax, ecx
mov dword [esp + 0x38], ecx
je 0x4c88f0
mov eax, dword [esp + 0x38]
mov ecx, 0x6b1210
lea ebx, [eax - 0x50]
push ebx
call fcn.004af250
test eax, eax
je 0x4c88da
lea ecx, [esp + 0x1c]
lea esi, [ebx + 0x10]
push 0
push ecx
mov ecx, esi
call fcn.004b4af0
test al, al
je 0x4c8783
mov dx, word [esi]
mov ax, word [esi + 2]
mov ecx, dword [esp + 0x1c]
mov word [esp + 0x24], dx
mov word [esp + 0x26], ax
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x26]
sub ecx, edx
mov edx, dword [esp + 0x1e]
mov word [esp + 0x14], cx
sub edx, eax
lea ecx, [esp + 0x18]
mov word [esp + 0x16], dx
mov eax, dword [esp + 0x14]
push 0
push ecx
lea ecx, [ebx + 0x34]
mov dword [esp + 0x20], eax
call fcn.004b4af0
test al, al
jne 0x4c87bd
mov eax, dword [0x6b121c]
xor edx, edx
mov dx, word [0x6b121e]
and eax, 0xffff
movsx ecx, word [esp + 0x1e]
push edx
push eax
movsx edx, word [esp + 0x24]
push ecx
push edx
lea ecx, [esp + 0x3c]
call fcn.004b4a60
push eax
mov ecx, esi
call fcn.004b4bc0
test al, al
je 0x4c88da
mov eax, dword [ebx]
push 0
mov ecx, ebx
call dword [eax + 0x9c]
test eax, eax
je 0x4c88c1
mov eax, dword [ebx + 8]
test al, 1
je 0x4c87e5
not eax
test al, 0x80
je 0x4c87e5
mov ebp, 1
jmp 0x4c87e7
xor ebp, ebp
lea ecx, [esp + 0x10]
push ecx
mov ecx, ebx
call fcn.0041be50
test eax, eax
je 0x4c88b3
mov dx, word [esi]
mov cx, word [esi + 4]
mov ax, word [ebx + 0x12]
mov word [esp + 0x40], dx
sub cx, dx
mov dx, word [esi + 6]
sub dx, word [esi + 2]
inc ecx
mov word [esp + 0x42], ax
mov ax, word [edi + 0x10]
inc edx
mov word [esp + 0x44], cx
mov cx, word [edi + 0x12]
mov word [esp + 0x46], dx
mov dx, word [edi + 0x14]
mov word [esp + 0x48], ax
sub dx, ax
mov ax, word [edi + 0x16]
mov word [esp + 0x4a], cx
sub ax, cx
lea ecx, [esp + 0x40]
inc edx
inc eax
push ecx
push 0x2544
mov word [esp + 0x54], dx
mov word [esp + 0x56], ax
call fcn.00487160
mov ecx, eax
call fcn.00483bc0
lea edx, [esp + 0x44]
push edx
push 0x2546
call fcn.00487160
mov ecx, eax
call fcn.00483bc0
lea eax, [esp + 0x48]
push eax
push 0x2548
call fcn.00487160
mov ecx, eax
call fcn.00483bc0
lea ecx, [esp + 0x4c]
push ecx
push 0x254a
call fcn.00487160
mov ecx, eax
call fcn.00483bc0
push ebx
mov ecx, edi
call fcn.004ca750
test ebp, ebp
je 0x4c88da
mov eax, dword [ebx + 8]
test ah, 0x80
jne 0x4c88f0
jmp 0x4c88da
mov ebx, dword [ebx + 8]
test bl, 1
je 0x4c88da
not ebx
test bl, 0x80
je 0x4c88da
mov eax, dword [esp + 0x10]
or al, 2
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x38]
lea ecx, [edi + 0x58]
mov eax, dword [edx + 4]
cmp ecx, eax
mov dword [esp + 0x38], eax
jne 0x4c870a
mov eax, dword [esp + 0x10]
pop edi
pop esi
pop ebp
test eax, eax
pop ebx
jne 0x4c8901
mov eax, 4
add esp, 0x40
ret