Function at 0x4eb18a
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x38
push ebx
mov ebx, dword [esp + 0x40]
push ebp
push esi
mov esi, ecx
cmp byte [ebx + 0x2c], 0
lea ebp, [ebx + 4]
push edi
mov dword [esp + 0x24], esi
lea edi, [ebx + 0x18]
mov dword [esp + 0x10], ebp
jne 0x4eb1c0
lea eax, [ebx + 0x30]
mov byte [ebx + 0x2c], 1
push eax
push edi
push ebp
call fcn.004e7d5a
test al, al
je 0x4eb1d0
jmp 0x4eb1c4
mov dword [esp + 0x10], ebp
mov eax, dword [ebx + 0x24]
mov ecx, dword [edi]
add eax, ecx
cmp dword [ebp], eax
jle 0x4eb1de
mov byte [ebx + 0x4ad0], 1
xor al, al
jmp 0x4ebb80
mov eax, dword [ebx + 0x20]
mov ebp, dword [ebx + 0x4acc]
dec eax
add eax, ecx
sub ebp, 0x10
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ebp
mov dword [esp + 0x2c], eax
cmp eax, ebp
jl 0x4eb201
mov dword [esp + 0x2c], ebp
mov ecx, dword [esp + 0x10]
jmp 0x4eb20f
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x14]
mov edx, dword [esi + 0x7c]
mov edi, dword [esi + 0xe6dc]
and edx, edi
mov dword [esi + 0x7c], edx
mov ecx, dword [ecx]
cmp ecx, dword [esp + 0x2c]
jl 0x4eb258
cmp ecx, eax
jg 0x4ebb7e
jne 0x4eb23b
mov eax, dword [ebx + 8]
cmp eax, dword [ebx + 0x1c]
jge 0x4ebb7e
cmp ecx, ebp
jl 0x4eb24c
cmp byte [ebx + 0x4ad2], 0
je 0x4ebb77
cmp ecx, dword [ebx + 0x4acc]
jge 0x4ebb77
mov ecx, dword [esi + 0x4b3c]
mov eax, ecx
sub eax, edx
and eax, edi
cmp eax, 0x1004
jae 0x4eb29c
cmp ecx, edx
je 0x4eb29c
mov ecx, esi
call fcn.004e8b9d
mov eax, dword [esi + 0x4c5c]
cmp eax, dword [esi + 0x4c4c]
jg 0x4eb1d7
jl 0x4eb29c
mov eax, dword [esi + 0x4c58]
cmp eax, dword [esi + 0x4c48]
ja 0x4eb1d7
mov edi, dword [esp + 0x10]
mov ecx, edi
call fcn.004de238
mov edx, eax
mov eax, dword [ebx + 0xb4]
and edx, 0xfffe
cmp edx, dword [ebx + eax*4 + 0x34]
jae 0x4eb2ec
push 0x10
pop ecx
sub ecx, eax
shr edx, cl
mov ecx, edi
movzx ebp, byte [edx + ebx + 0xb8]
add ebp, dword [ecx + 4]
mov eax, ebp
shr eax, 3
add dword [ecx], eax
and ebp, 7
mov eax, dword [ecx]
mov dword [ecx + 4], ebp
movzx edx, word [ebx + edx*2 + 0x4b8]
mov dword [esp + 0x1c], eax
jmp 0x4eb35b
push 0xf
pop ecx
inc eax
mov dword [esp + 0x28], ecx
cmp eax, ecx
jae 0x4eb317
lea ecx, [eax + 0xd]
lea ecx, [ebx + ecx*4]
cmp edx, dword [ecx]
jb 0x4eb311
inc eax
add ecx, 4
cmp eax, 0xf
jb 0x4eb2fe
mov ecx, dword [esp + 0x28]
jmp 0x4eb317
mov ecx, eax
mov dword [esp + 0x28], eax
mov ebp, dword [edi + 4]
add ebp, ecx
mov eax, ebp
and ebp, 7
shr eax, 3
add dword [edi], eax
mov eax, dword [edi]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x28]
mov dword [edi + 4], ebp
push 0x10
pop ecx
sub edx, dword [ebx + eax*4 + 0x30]
sub ecx, eax
shr edx, cl
mov ecx, dword [ebx + eax*4 + 0x74]
add ecx, edx
cmp ecx, dword [ebx + 0x30]
sbb eax, eax
and eax, ecx
mov ecx, dword [esp + 0x10]
movzx edx, word [ebx + eax*2 + 0xcb8]
mov eax, dword [esp + 0x1c]
movzx edx, dx
mov edi, 0x100
cmp edx, edi
jae 0x4eb383
mov eax, dword [esi + 0x7c]
mov ecx, dword [esi + 0x4b40]
mov byte [ecx + eax], dl
inc dword [esi + 0x7c]
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
jmp 0x4eb20b
cmp edx, 0x106
jb 0x4eb81b
lea edi, [edx - 0x106]
cmp edi, 8
jae 0x4eb404
mov dword [esp + 0x1c], eax
add edi, 2
mov eax, dword [esp + 0x10]
mov ecx, eax
call fcn.004de238
mov edx, eax
mov eax, dword [ebx + 0xfa0]
and edx, 0xfffe
cmp edx, dword [ebx + eax*4 + 0xf20]
jae 0x4eb457
push 0x10
pop ecx
sub ecx, eax
shr edx, cl
movzx ecx, byte [edx + ebx + 0xfa4]
add ecx, ebp
mov ebp, dword [esp + 0x1c]
mov eax, ecx
shr eax, 3
add ebp, eax
mov eax, dword [esp + 0x10]
and ecx, 7
mov dword [esp + 0x20], ebp
mov dword [esp + 0x1c], ecx
mov dword [eax], ebp
mov dword [eax + 4], ecx
movzx eax, word [ebx + edx*2 + 0x13a4]
jmp 0x4eb4cd
mov eax, edi
and edi, 3
shr eax, 2
or edi, 4
dec eax
mov ecx, eax
mov dword [esp + 0x34], eax
shl edi, cl
add edi, 2
test eax, eax
je 0x4eb3a1
mov ecx, dword [esp + 0x10]
call fcn.004de238
add ebp, dword [esp + 0x34]
push 0x10
pop ecx
sub ecx, dword [esp + 0x34]
shr eax, cl
mov ecx, dword [esp + 0x1c]
add edi, eax
mov eax, ebp
shr eax, 3
add ecx, eax
mov eax, dword [esp + 0x10]
and ebp, 7
mov dword [esp + 0x1c], ecx
mov dword [eax], ecx
mov dword [eax + 4], ebp
jmp 0x4eb3a5
push 0xf
pop ebp
inc eax
mov dword [esp + 0x28], ebp
cmp eax, ebp
jae 0x4eb47e
lea ecx, [eax + 0x3c8]
lea ecx, [ebx + ecx*4]
cmp edx, dword [ecx]
jb 0x4eb47a
inc eax
add ecx, 4
cmp eax, ebp
jb 0x4eb46c
jmp 0x4eb47e
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x10]
push 0x10
mov ebp, dword [ecx + 4]
add ebp, dword [esp + 0x2c]
mov eax, ebp
and ebp, 7
shr eax, 3
add dword [ecx], eax
mov eax, dword [ecx]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x2c]
mov dword [ecx + 4], ebp
pop ecx
sub ecx, eax
mov dword [esp + 0x1c], ebp
sub edx, dword [ebx + eax*4 + 0xf1c]
shr edx, cl
mov ecx, dword [ebx + eax*4 + 0xf60]
add ecx, edx
cmp ecx, dword [ebx + 0xf1c]
sbb eax, eax
and eax, ecx
movzx eax, word [ebx + eax*2 + 0x1ba4]
movzx edx, ax
cmp edx, 4
jae 0x4eb4dd
lea ebp, [edx + 1]
jmp 0x4eb660
mov eax, edx
and edx, 1
shr eax, 1
or edx, 2
dec eax
mov ecx, eax
mov dword [esp + 0x30], eax
shl edx, cl
lea ecx, [edx + 1]
mov dword [esp + 0x34], ecx
mov ebp, ecx
mov dword [esp + 0x28], ebp
test eax, eax
je 0x4eb664
cmp eax, 4
jb 0x4eb62b
jbe 0x4eb557
mov ecx, dword [esp + 0x10]
call fcn.004ec2cf
mov edx, dword [esp + 0x20]
mov ebp, eax
mov eax, dword [esp + 0x30]
push 0x24
pop ecx
sub ecx, eax
add eax, 0xfffffffc
shr ebp, cl
mov ecx, dword [esp + 0x1c]
add ecx, eax
shl ebp, 4
add ebp, dword [esp + 0x34]
mov eax, ecx
shr eax, 3
add edx, eax
mov eax, dword [esp + 0x10]
and ecx, 7
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], ecx
mov dword [eax], edx
mov dword [eax + 4], ecx
jmp 0x4eb55b
mov eax, dword [esp + 0x10]
mov ecx, eax
call fcn.004de238
mov edx, eax
mov eax, dword [ebx + 0x1e8c]
and edx, 0xfffe
cmp edx, dword [ebx + eax*4 + 0x1e0c]
jae 0x4eb5ad
mov esi, dword [esp + 0x10]
push 0x10
pop ecx
sub ecx, eax
shr edx, cl
movzx ecx, byte [edx + ebx + 0x1e90]
add ecx, dword [esp + 0x1c]
mov eax, ecx
shr eax, 3
add eax, dword [esp + 0x20]
and ecx, 7
mov dword [esi], eax
mov eax, esi
mov dword [eax + 4], ecx
movzx eax, word [ebx + edx*2 + 0x2290]
jmp 0x4eb620
push 0xf
pop ecx
inc eax
mov dword [esp + 0x28], ecx
cmp eax, ecx
jae 0x4eb5d5
lea ecx, [eax + 0x783]
lea ecx, [ebx + ecx*4]
cmp edx, dword [ecx]
jb 0x4eb5d1
inc eax
add ecx, 4
cmp eax, 0xf
jb 0x4eb5c2
jmp 0x4eb5d5
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x10]
push 0x10
mov ecx, dword [eax + 4]
add ecx, dword [esp + 0x2c]
mov eax, ecx
and ecx, 7
shr eax, 3
add dword [esi], eax
mov eax, esi
mov dword [eax + 4], ecx
mov eax, dword [esp + 0x2c]
pop ecx
sub ecx, eax
sub edx, dword [ebx + eax*4 + 0x1e08]
shr edx, cl
mov ecx, dword [ebx + eax*4 + 0x1e4c]
add ecx, edx
cmp ecx, dword [ebx + 0x1e08]
sbb eax, eax
and eax, ecx
movzx eax, word [ebx + eax*2 + 0x2a90]
mov esi, dword [esp + 0x24]
movzx eax, ax
add ebp, eax
jmp 0x4eb660
mov ecx, dword [esp + 0x10]
call fcn.004ec2cf
mov edx, dword [esp + 0x10]
mov ebp, eax
push 0x20
pop ecx
sub ecx, dword [esp + 0x30]
shr ebp, cl
mov ecx, dword [esp + 0x1c]
add ecx, dword [esp + 0x30]
add ebp, dword [esp + 0x34]
mov eax, ecx
shr eax, 3
add eax, dword [esp + 0x20]
and ecx, 7
mov dword [edx], eax
mov dword [edx + 4], ecx
mov dword [esp + 0x28], ebp
cmp ebp, 0x100
jbe 0x4eb67f
inc edi
cmp ebp, 0x2000
jbe 0x4eb67f
inc edi
cmp ebp, 0x40000
jbe 0x4eb67f
inc edi
mov eax, dword [esi + 0x68]
mov dword [esi + 0x6c], eax
mov eax, dword [esi + 0x64]
mov dword [esi + 0x68], eax
mov eax, dword [esi + 0x60]
mov dword [esi + 0x64], eax
mov dword [esi + 0x60], ebp
mov edx, dword [esi + 0x7c]
mov ecx, edx
mov eax, dword [esi + 0xe6d8]
sub ecx, ebp
add eax, 0xffffeffc
mov dword [esi + 0x74], edi
mov dword [esp + 0x34], ecx
cmp ecx, eax
jae 0x4eb7d5
cmp edx, eax
jae 0x4eb7d5
mov eax, dword [esi + 0x4b40]
push 8
lea ebp, [eax + edx]
lea ebx, [eax + ecx]
lea eax, [edx + edi]
pop edx
mov dword [esi + 0x7c], eax
cmp edi, edx
jb 0x4eb745
cmp dword [esp + 0x28], edi
jae 0x4eb71d
mov ecx, edi
shr ecx, 3
mov al, byte [ebx]
sub edi, edx
mov byte [ebp], al
mov al, byte [ebx + 1]
mov byte [ebp + 1], al
mov al, byte [ebx + 2]
mov byte [ebp + 2], al
mov al, byte [ebx + 3]
mov byte [ebp + 3], al
mov al, byte [ebx + 4]
mov byte [ebp + 4], al
mov al, byte [ebx + 5]
mov byte [ebp + 5], al
mov al, byte [ebx + 6]
mov byte [ebp + 6], al
mov al, byte [ebx + 7]
add ebx, edx
mov byte [ebp + 7], al
add ebp, edx
sub ecx, 1
jne 0x4eb6e1
jmp 0x4eb745
mov eax, edi
shr eax, 3
mov dword [esp + 0x34], eax
mov esi, eax
push edx
push ebx
push ebp
call fcn.004f3cbb
add esp, 0xc
push 8
pop edx
add ebx, edx
add ebp, edx
sub edi, edx
sub esi, 1
jne 0x4eb728
mov esi, dword [esp + 0x24]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
test edi, edi
je 0x4eb207
mov al, byte [ebx]
mov byte [ebp], al
mov eax, dword [esp + 0x18]
cmp edi, 1
jbe 0x4eb207
mov al, byte [ebx + 1]
mov byte [ebp + 1], al
mov eax, dword [esp + 0x18]
cmp edi, 2
jbe 0x4eb207
mov al, byte [ebx + 2]
mov byte [ebp + 2], al
mov eax, dword [esp + 0x18]
cmp edi, 3
jbe 0x4eb207
mov al, byte [ebx + 3]
mov byte [ebp + 3], al
mov eax, dword [esp + 0x18]
cmp edi, 4
jbe 0x4eb207
mov al, byte [ebx + 4]
mov byte [ebp + 4], al
mov eax, dword [esp + 0x18]
cmp edi, 5
jbe 0x4eb207
mov al, byte [ebx + 5]
mov byte [ebp + 5], al
mov eax, dword [esp + 0x18]
cmp edi, 6
jbe 0x4eb207
mov al, byte [ebx + 6]
mov ebx, dword [esp + 0x4c]
mov byte [ebp + 6], al
jmp 0x4eb376
mov ecx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
test edi, edi
je 0x4eb20f
mov eax, dword [esi + 0xe6dc]
mov ebp, dword [esp + 0x34]
mov ecx, dword [esi + 0x4b40]
and eax, ebp
inc ebp
mov al, byte [eax + ecx]
mov byte [ecx + edx], al
mov edx, dword [esi + 0x7c]
mov eax, dword [esi + 0xe6dc]
inc edx
and edx, eax
mov dword [esi + 0x7c], edx
sub edi, 1
jne 0x4eb7f3
jmp 0x4eb376
cmp edx, edi
jne 0x4eb84d
lea eax, [esp + 0x38]
push eax
push ecx
mov ecx, esi
call fcn.004e7938
test al, al
je 0x4ebb7e
lea eax, [esp + 0x38]
mov ecx, esi
push eax
call fcn.004e5ed9
test al, al
je 0x4ebb7e
jmp 0x4eb376
cmp edx, 0x101
jne 0x4eb94d
mov edi, dword [esi + 0x74]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
test edi, edi
je 0x4eb20f
mov edx, dword [esi + 0x7c]
mov ebp, edx
mov eax, dword [esi + 0xe6d8]
mov ecx, dword [esi + 0x60]
add eax, 0xffffeffc
sub ebp, ecx
cmp ebp, eax
jae 0x4eb91f
cmp edx, eax
jae 0x4eb91f
mov eax, dword [esi + 0x4b40]
push 8
lea ebx, [eax + ebp]
lea ebp, [eax + edx]
lea eax, [edx + edi]
pop edx
mov dword [esi + 0x7c], eax
cmp edi, edx
jb 0x4eb745
cmp ecx, edi
jae 0x4eb8f6
mov ecx, edi
shr ecx, 3
mov al, byte [ebx]
sub edi, edx
mov byte [ebp], al
mov al, byte [ebx + 1]
mov byte [ebp + 1], al
mov al, byte [ebx + 2]
mov byte [ebp + 2], al
mov al, byte [ebx + 3]
mov byte [ebp + 3], al
mov al, byte [ebx + 4]
mov byte [ebp + 4], al
mov al, byte [ebx + 5]
mov byte [ebp + 5], al
mov al, byte [ebx + 6]
mov byte [ebp + 6], al
mov al, byte [ebx + 7]
add ebx, edx
mov byte [ebp + 7], al
add ebp, edx
sub ecx, 1
jne 0x4eb8b7
jmp 0x4eb745
mov eax, edi
shr eax, 3
mov dword [esp + 0x34], eax
mov esi, eax
push edx
push ebx
push ebp
call fcn.004f3cbb
add esp, 0xc
push 8
pop edx
add ebx, edx
add ebp, edx
sub edi, edx
sub esi, 1
jne 0x4eb901
jmp 0x4eb741
mov eax, dword [esi + 0xe6dc]
mov ecx, dword [esi + 0x4b40]
and eax, ebp
inc ebp
mov al, byte [eax + ecx]
mov byte [ecx + edx], al
mov edx, dword [esi + 0x7c]
mov eax, dword [esi + 0xe6dc]
inc edx
and edx, eax
mov dword [esi + 0x7c], edx
sub edi, 1
jne 0x4eb925
jmp 0x4eb376
add edx, 0xfffffefe
lea ecx, [edx + 0x18]
lea ecx, [esi + ecx*4]
mov ebp, dword [ecx]
mov dword [esp + 0x28], ebp
je 0x4eb96e
mov eax, dword [ecx - 4]
mov dword [ecx], eax
lea ecx, [ecx - 4]
sub edx, 1
jne 0x4eb961
mov dword [esi + 0x60], ebp
mov ebp, dword [esp + 0x10]
mov ecx, ebp
call fcn.004de238
mov edx, eax
mov eax, dword [ebx + 0x2d78]
and edx, 0xfffe
cmp edx, dword [ebx + eax*4 + 0x2cf8]
jae 0x4eb9c8
push 0x10
pop ecx
sub ecx, eax
shr edx, cl
movzx ecx, byte [edx + ebx + 0x2d7c]
add ecx, dword [ebp + 4]
mov eax, ecx
shr eax, 3
add dword [ebp], eax
and ecx, 7
mov eax, dword [ebp]
mov dword [esp + 0x30], eax
mov dword [ebp + 4], ecx
movzx eax, word [ebx + edx*2 + 0x317c]
mov dword [esp + 0x34], ecx
jmp 0x4eba31
push 0xf
pop edi
inc eax
cmp eax, edi
jae 0x4eb9ea
lea ecx, [eax + 0xb3e]
lea ecx, [ebx + ecx*4]
cmp edx, dword [ecx]
jb 0x4eb9e8
inc eax
add ecx, 4
cmp eax, 0xf
jb 0x4eb9d9
jmp 0x4eb9ea
mov edi, eax
mov ecx, dword [ebp + 4]
add ecx, edi
mov eax, ecx
and ecx, 7
mov dword [ebp + 4], ecx
shr eax, 3
add dword [ebp], eax
sub edx, dword [ebx + edi*4 + 0x2cf4]
mov eax, dword [ebp]
mov dword [esp + 0x34], ecx
push 0x10
pop ecx
sub ecx, edi
mov dword [esp + 0x30], eax
shr edx, cl
mov ecx, dword [ebx + edi*4 + 0x2d38]
add ecx, edx
cmp ecx, dword [ebx + 0x2cf4]
sbb eax, eax
and eax, ecx
movzx eax, word [ebx + eax*2 + 0x397c]
movzx edi, ax
cmp edi, 8
jae 0x4eba3e
add edi, 2
jmp 0x4eba82
mov ebp, edi
and edi, 3
shr ebp, 2
or edi, 4
dec ebp
mov ecx, ebp
shl edi, cl
add edi, 2
test ebp, ebp
je 0x4eba82
mov ecx, dword [esp + 0x10]
call fcn.004de238
mov edx, dword [esp + 0x10]
push 0x10
pop ecx
sub ecx, ebp
shr eax, cl
mov ecx, dword [esp + 0x34]
add edi, eax
add ecx, ebp
mov eax, ecx
shr eax, 3
add eax, dword [esp + 0x30]
and ecx, 7
mov dword [edx], eax
mov dword [edx + 4], ecx
mov edx, dword [esi + 0x7c]
mov ebp, edx
mov eax, dword [esi + 0xe6d8]
mov ecx, dword [esp + 0x28]
add eax, 0xffffeffc
sub ebp, ecx
mov dword [esi + 0x74], edi
cmp ebp, eax
jae 0x4ebb39
cmp edx, eax
jae 0x4ebb39
mov eax, dword [esi + 0x4b40]
push 8
lea ebx, [eax + ebp]
lea ebp, [eax + edx]
lea eax, [edx + edi]
pop edx
mov dword [esi + 0x7c], eax
cmp edi, edx
jb 0x4eb745
cmp ecx, edi
jae 0x4ebb10
mov ecx, edi
shr ecx, 3
mov al, byte [ebx]
sub edi, edx
mov byte [ebp], al
mov al, byte [ebx + 1]
mov byte [ebp + 1], al
mov al, byte [ebx + 2]
mov byte [ebp + 2], al
mov al, byte [ebx + 3]
mov byte [ebp + 3], al
mov al, byte [ebx + 4]
mov byte [ebp + 4], al
mov al, byte [ebx + 5]
mov byte [ebp + 5], al
mov al, byte [ebx + 6]
mov byte [ebp + 6], al
mov al, byte [ebx + 7]
add ebx, edx
mov byte [ebp + 7], al
add ebp, edx
sub ecx, 1
jne 0x4ebad1
jmp 0x4eb745
mov eax, edi
shr eax, 3
mov dword [esp + 0x34], eax
mov esi, eax
push edx
push ebx
push ebp
call fcn.004f3cbb
add esp, 0xc
push 8
pop edx
add ebx, edx
add ebp, edx
sub edi, edx
sub esi, 1
jne 0x4ebb1b
jmp 0x4eb741
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x18]
test edi, edi
je 0x4eb20b
mov eax, dword [esi + 0xe6dc]
mov ecx, dword [esi + 0x4b40]
and eax, ebp
inc ebp
mov al, byte [eax + ecx]
mov byte [ecx + edx], al
mov edx, dword [esi + 0x7c]
mov eax, dword [esi + 0xe6dc]
inc edx
and edx, eax
mov dword [esi + 0x7c], edx
sub edi, 1
jne 0x4ebb4f
jmp 0x4eb376
mov byte [ebx + 0x4ad3], 1
mov al, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x38
ret 4