Function at 0x4d0d30
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x2c
xor ebp, ebp
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x44]
mov edi, dword [esp + 0x40]
mov edx, dword [edx]
mov cl, byte [ebx + 8]
mov dword [esp + 0x18], edx
test cl, 2
je 0x4d0dd2
mov ax, word [edi + 0x22a]
and eax, 0xffff
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x22c]
and eax, 0xffff
mov dword [esp + 0x24], eax
mov ax, word [edi + 0x22e]
and eax, 0xffff
cmp cl, 2
mov dword [esp + 0x28], eax
je 0x4d0fa0
cmp cl, 6
je 0x4d0df4
mov edi, dword [esp + 0x44]
mov al, byte [edi + 9]
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x44]
and ecx, 0xfffffffd
mov dl, byte [edx + 0xa]
mov byte [ebx + 8], cl
mov byte [esp + 0xb], dl
sub edx, 2
imul eax, edx
mov byte [ebx + 0xa], dl
mov byte [ebx + 0xb], al
cmp al, 7
jbe 0x4d0de0
shr al, 3
mov esi, dword [esp + 0x18]
and eax, 0xff
imul eax, esi
mov edi, dword [esp + 0x44]
mov dword [edi + 4], eax
add esp, 0x2c
mov eax, ebp
pop ebx
pop esi
pop edi
pop ebp
ret
and eax, 0xff
mov ebx, dword [esp + 0x18]
imul eax, ebx
add eax, 7
shr eax, 3
jmp 0x4d0dcb
mov edx, dword [esp + 0x44]
mov al, byte [edx + 9]
cmp al, 8
je 0x4d1120
mov edx, dword [edi + 0x178]
test edx, edx
je 0x4d1300
mov esi, dword [edi + 0x174]
test esi, esi
je 0x4d1300
mov ebx, dword [esp + 0x18]
test ebx, ebx
je 0x4d0d97
mov edx, dword [esp + 0x48]
mov dword [esp + 0x10], 0
mov eax, edx
mov dword [esp + 0x1c], edi
lea esi, [esi]
xor ecx, ecx
xor ebx, ebx
mov cl, byte [eax]
mov bl, byte [eax + 1]
shl ecx, 8
or ebx, ecx
mov cl, byte [eax + 2]
and ecx, 0xff
mov esi, ecx
mov cl, byte [eax + 3]
shl esi, 8
and ecx, 0xff
mov edi, ecx
xor ecx, ecx
mov cl, byte [eax + 4]
or edi, esi
shl ecx, 8
mov dword [esp + 0x14], ecx
mov cl, byte [eax + 5]
and ecx, 0xff
mov esi, ecx
mov ecx, dword [esp + 0x14]
or esi, ecx
cmp bx, si
jne 0x4d0e96
cmp bx, di
mov ecx, ebx
je 0x4d0f5c
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x1c]
mov ecx, dword [ecx + 0x158]
mov ebp, dword [ebp + 0x178]
mov dword [esp], ecx
mov ecx, edi
and ecx, 0xff
mov dword [esp + 0xc], ebp
mov ebp, ecx
mov cl, byte [esp]
sar ebp, cl
mov ecx, edi
movzx edi, ch
mov ecx, dword [esp + 0xc]
mov ebp, dword [ecx + ebp*4]
mov cl, bl
and ecx, 0xff
mov di, word [ebp + edi*2]
mov ebp, dword [esp + 0x24]
and edi, 0xffff
imul edi, ebp
mov ebp, ecx
mov cl, byte [esp]
sar ebp, cl
mov ecx, dword [esp + 0xc]
movzx ebx, bh
mov ebp, dword [ecx + ebp*4]
mov ecx, dword [esp + 0x20]
mov bx, word [ebp + ebx*2]
mov ebp, dword [esp + 0xc]
and ebx, 0xffff
imul ebx, ecx
add edi, ebx
mov ebx, esi
mov cl, byte [esp]
and ebx, 0xff
sar ebx, cl
mov ecx, esi
movzx esi, ch
mov ebx, dword [ebp + ebx*4]
mov cl, byte [esp]
mov ebp, 1
mov bx, word [ebx + esi*2]
mov esi, dword [esp + 0x28]
and ebx, 0xffff
imul ebx, esi
add ebx, edi
mov edi, dword [esp + 0x1c]
shr ebx, 0xf
movzx esi, bl
sar esi, cl
mov ecx, dword [edi + 0x174]
movzx ebx, bh
mov ecx, dword [ecx + esi*4]
mov cx, word [ecx + ebx*2]
mov ebx, ecx
mov byte [edx + 1], cl
shr bx, 8
mov edi, dword [esp + 0x18]
mov byte [edx], bl
mov cl, byte [eax + 6]
mov byte [edx + 2], cl
mov bl, byte [eax + 7]
add eax, 8
mov byte [edx + 3], bl
mov ebx, dword [esp + 0x10]
inc ebx
add edx, 4
mov dword [esp + 0x10], ebx
cmp dword [esp + 0x10], edi
jne 0x4d0e40
mov edx, dword [esp + 0x44]
mov cl, byte [edx + 8]
mov al, byte [edx + 9]
jmp 0x4d0d97
mov al, byte [ebx + 9]
cmp al, 8
je 0x4d1218
mov esi, dword [edi + 0x178]
test esi, esi
je 0x4d13e0
mov edx, dword [edi + 0x174]
test edx, edx
je 0x4d13e0
mov esi, dword [esp + 0x18]
test esi, esi
je 0x4d15c0
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], ecx
mov eax, ecx
xor ecx, ecx
xor edx, edx
mov cl, byte [eax]
mov dl, byte [eax + 1]
shl ecx, 8
mov bl, byte [eax + 3]
or edx, ecx
xor ecx, ecx
and ebx, 0xff
mov cl, byte [eax + 2]
shl ecx, 8
mov esi, ebx
or esi, ecx
xor ecx, ecx
mov cl, byte [eax + 4]
xor ebx, ebx
shl ecx, 8
mov bl, byte [eax + 5]
or ebx, ecx
add eax, 6
cmp dx, bx
jne 0x4d102a
cmp dx, si
mov ecx, edx
je 0x4d10d7
mov ecx, esi
and ecx, 0xff
mov ebp, ecx
mov cl, byte [edi + 0x158]
sar ebp, cl
mov ecx, esi
movzx esi, ch
mov ecx, dword [edi + 0x178]
mov ebp, dword [ecx + ebp*4]
mov cl, dl
and ecx, 0xff
mov si, word [ebp + esi*2]
mov ebp, dword [esp + 0x24]
and esi, 0xffff
imul esi, ebp
mov ebp, ecx
mov cl, byte [edi + 0x158]
sar ebp, cl
mov ecx, dword [edi + 0x178]
movzx edx, dh
mov ebp, dword [ecx + ebp*4]
mov ecx, dword [esp + 0x20]
mov dx, word [ebp + edx*2]
mov ebp, dword [edi + 0x178]
and edx, 0xffff
imul edx, ecx
add esi, edx
xor edx, edx
mov cl, byte [edi + 0x158]
mov dl, bl
sar edx, cl
movzx ebx, bh
mov edx, dword [ebp + edx*4]
mov ebp, 1
mov dx, word [edx + ebx*2]
mov ebx, dword [esp + 0x28]
and edx, 0xffff
imul edx, ebx
add edx, esi
shr edx, 0xf
movzx ebx, dl
sar ebx, cl
mov ecx, dword [edi + 0x174]
movzx edx, dh
mov ecx, dword [ecx + ebx*4]
mov cx, word [ecx + edx*2]
mov ebx, dword [esp + 0x10]
mov edx, ecx
shr dx, 8
mov byte [ebx + 1], cl
mov ecx, dword [esp + 0x14]
inc ecx
mov byte [ebx], dl
mov dword [esp + 0x14], ecx
add ebx, 2
mov edx, dword [esp + 0x18]
mov dword [esp + 0x10], ebx
cmp dword [esp + 0x14], edx
jne 0x4d0fe5
mov ebx, dword [esp + 0x44]
mov cl, byte [ebx + 8]
cmp cl, 6
jne 0x4d0d90
jmp 0x4d0df4
mov esi, dword [edi + 0x168]
test esi, esi
je 0x4d1530
mov edx, dword [edi + 0x16c]
test edx, edx
je 0x4d1530
mov ebx, dword [esp + 0x18]
test ebx, ebx
je 0x4d0d97
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x1c], ebp
mov eax, ecx
mov dword [esp + 0x10], 0
mov dword [esp + 4], ecx
mov ebp, edi
jmp 0x4d116e
mov edx, dword [ebp + 0x16c]
mov esi, dword [ebp + 0x168]
mov cl, byte [eax + 1]
xor ebx, ebx
and ecx, 0xff
mov bl, byte [eax]
mov cl, byte [edx + ecx]
mov bl, byte [edx + ebx]
mov byte [esp + 0x14], cl
mov cl, byte [eax + 2]
and ecx, 0xff
mov dl, byte [edx + ecx]
cmp bl, dl
jne 0x4d119b
cmp bl, byte [esp + 0x14]
je 0x4d11a3
mov dword [esp + 0x1c], 1
mov cl, byte [esp + 0x14]
mov edi, dword [esp + 0x24]
and ecx, 0xff
and ebx, 0xff
imul edi, ecx
mov ecx, dword [esp + 0x20]
and edx, 0xff
imul ebx, ecx
add edi, ebx
mov ebx, dword [esp + 0x28]
imul edx, ebx
add edi, edx
shr edi, 0xf
mov bl, byte [esi + edi]
mov edi, dword [esp + 4]
mov esi, dword [esp + 0x10]
mov byte [edi], bl
inc esi
mov dl, byte [eax + 3]
mov dword [esp + 0x10], esi
mov byte [edi + 1], dl
mov ebx, dword [esp + 0x18]
add edi, 2
add eax, 4
mov dword [esp + 4], edi
cmp dword [esp + 0x10], ebx
jne 0x4d1162
mov edi, dword [esp + 0x44]
mov ebp, dword [esp + 0x1c]
mov cl, byte [edi + 8]
mov al, byte [edi + 9]
jmp 0x4d0d97
mov edx, dword [edi + 0x168]
test edx, edx
je 0x4d14b0
mov edx, dword [edi + 0x16c]
test edx, edx
je 0x4d14b0
mov esi, dword [esp + 0x18]
test esi, esi
je 0x4d15c9
mov eax, dword [esp + 0x48]
mov ebx, dword [esp + 0x18]
add eax, ebx
mov esi, dword [esp + 0x48]
mov dword [esp + 0x14], eax
inc esi
mov eax, dword [esp + 0x48]
mov dword [esp + 0x1c], ebp
jmp 0x4d12b9
mov bl, byte [esp + 0x10]
mov ebp, dword [esp + 0x24]
and ebx, 0xff
and ecx, 0xff
imul ebp, ebx
mov ebx, dword [esp + 0x20]
and edx, 0xff
imul ecx, ebx
add ebp, ecx
mov ecx, dword [esp + 0x28]
imul edx, ecx
mov dword [esp + 0x1c], 1
lea ecx, [ebp + edx]
mov edx, dword [edi + 0x168]
shr ecx, 0xf
mov dl, byte [edx + ecx]
mov byte [esi - 1], dl
cmp esi, dword [esp + 0x14]
je 0x4d14a0
mov edx, dword [edi + 0x16c]
inc esi
xor ebx, ebx
xor ecx, ecx
mov bl, byte [eax + 1]
mov cl, byte [eax]
mov bl, byte [edx + ebx]
mov cl, byte [edx + ecx]
mov byte [esp + 0x10], bl
mov bl, byte [eax + 2]
mov byte [esp + 0xa], bl
and ebx, 0xff
add eax, 3
mov dl, byte [edx + ebx]
cmp cl, dl
jne 0x4d1260
cmp cl, byte [esp + 0x10]
jne 0x4d1260
mov dl, byte [esp + 0xa]
mov byte [esi - 1], dl
jmp 0x4d12a8
mov edi, dword [esp + 0x18]
test edi, edi
je 0x4d0d97
mov edx, dword [esp + 0x48]
xor ecx, ecx
mov dword [esp + 0x14], ebp
mov eax, edx
mov ebp, ecx
lea esi, [esi]
xor ebx, ebx
xor ecx, ecx
mov bl, byte [eax]
mov cl, byte [eax + 1]
shl ebx, 8
or ecx, ebx
mov bl, byte [eax + 2]
and ebx, 0xff
mov edi, ebx
mov bl, byte [eax + 3]
shl edi, 8
and ebx, 0xff
mov esi, ebx
mov bl, byte [eax + 4]
and ebx, 0xff
or esi, edi
mov edi, ebx
xor ebx, ebx
shl edi, 8
mov bl, byte [eax + 5]
or ebx, edi
cmp cx, bx
jne 0x4d1368
cmp cx, si
je 0x4d1370
mov dword [esp + 0x14], 1
and esi, 0xffff
mov edi, dword [esp + 0x24]
imul esi, edi
and ecx, 0xffff
mov edi, dword [esp + 0x20]
imul ecx, edi
and ebx, 0xffff
add esi, ecx
mov ecx, dword [esp + 0x28]
inc ebp
imul ebx, ecx
lea ecx, [esi + ebx]
shr ecx, 0xf
mov ebx, ecx
mov byte [edx + 1], cl
shr bx, 8
mov byte [edx], bl
mov cl, byte [eax + 6]
mov byte [edx + 2], cl
mov bl, byte [eax + 7]
add eax, 8
mov byte [edx + 3], bl
add edx, 4
cmp ebp, dword [esp + 0x18]
jne 0x4d1320
mov edi, dword [esp + 0x44]
mov ebp, dword [esp + 0x14]
mov cl, byte [edi + 8]
mov al, byte [edi + 9]
jmp 0x4d0d97
mov ebx, dword [esp + 0x18]
test ebx, ebx
je 0x4d15c9
mov esi, dword [esp + 0x48]
xor ebp, ebp
mov eax, esi
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], edi
lea esi, [esi]
xor ecx, ecx
xor edx, edx
mov cl, byte [eax]
mov dl, byte [eax + 1]
shl ecx, 8
xor ebx, ebx
or edx, ecx
xor ecx, ecx
mov cl, byte [eax + 2]
mov bl, byte [eax + 3]
shl ecx, 8
or ebx, ecx
mov cl, byte [eax + 4]
and ecx, 0xff
mov edi, ecx
xor ecx, ecx
shl edi, 8
mov cl, byte [eax + 5]
or ecx, edi
add eax, 6
cmp dx, cx
jne 0x4d143f
cmp dx, bx
je 0x4d1447
mov dword [esp + 0x10], 1
and ebx, 0xffff
mov edi, dword [esp + 0x24]
imul ebx, edi
and edx, 0xffff
mov edi, dword [esp + 0x20]
imul edx, edi
and ecx, 0xffff
add ebx, edx
mov edx, dword [esp + 0x28]
inc ebp
imul ecx, edx
lea edx, [ebx + ecx]
shr edx, 0xf
mov ecx, edx
mov byte [esi + 1], dl
shr cx, 8
mov byte [esi], cl
add esi, 2
cmp ebp, dword [esp + 0x18]
jne 0x4d1400
mov ebp, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
jmp 0x4d1104
mov ebx, dword [esp + 0x44]
mov ebp, dword [esp + 0x1c]
mov cl, byte [ebx + 8]
jmp 0x4d0d8b
mov ebp, dword [esp + 0x18]
test ebp, ebp
je 0x4d15c9
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x48]
mov esi, dword [esp + 0x48]
mov dword [esp + 0x10], edi
lea edx, [eax + ebp + 1]
inc esi
xor ebp, ebp
mov edi, edx
jmp 0x4d1516
mov ebp, dword [esp + 0x24]
and ebx, 0xff
imul ebx, ebp
and ecx, 0xff
mov ebp, dword [esp + 0x20]
imul ecx, ebp
and edx, 0xff
add ebx, ecx
mov ecx, dword [esp + 0x28]
mov ebp, 1
imul edx, ecx
add ebx, edx
shr ebx, 0xf
mov byte [esi - 1], bl
inc esi
cmp esi, edi
je 0x4d15b0
mov cl, byte [eax]
mov dl, byte [eax + 2]
mov bl, byte [eax + 1]
add eax, 3
cmp cl, dl
jne 0x4d14d7
cmp cl, bl
jne 0x4d14d7
mov byte [esi - 1], dl
jmp 0x4d150d
mov esi, dword [esp + 0x18]
test esi, esi
je 0x4d0d97
mov edx, dword [esp + 0x48]
xor edi, edi
mov eax, edx
movzx esi, byte [eax + 2]
mov bl, byte [eax + 1]
mov cl, byte [eax]
mov byte [esp + 0x10], bl
mov ebx, esi
cmp cl, bl
jne 0x4d155d
cmp cl, byte [esp + 0x10]
je 0x4d1562
mov ebp, 1
xor ebx, ebx
and ecx, 0xff
mov bl, byte [esp + 0x10]
and esi, 0xff
imul ebx, dword [esp + 0x24]
imul ecx, dword [esp + 0x20]
add ecx, ebx
mov ebx, dword [esp + 0x28]
imul esi, ebx
add ecx, esi
inc edi
shr ecx, 0xf
mov byte [edx], cl
mov cl, byte [eax + 3]
add eax, 4
mov byte [edx + 1], cl
add edx, 2
cmp edi, dword [esp + 0x18]
jne 0x4d1544
mov ebx, dword [esp + 0x44]
mov cl, byte [ebx + 8]
mov al, byte [ebx + 9]
jmp 0x4d0d97
mov edx, dword [esp + 0x44]
mov edi, dword [esp + 0x10]
mov cl, byte [edx + 8]
jmp 0x4d0d8b
mov ebp, dword [esp + 0x18]
jmp 0x4d0d97
xor ebp, ebp
jmp 0x4d0d97