Function at 0x4853ce
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x654
mov eax, dword [0x47d410]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0x644], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x648], eax
mov eax, dword [ebp + 0x14]
push edi
mov dword [ebp - 0x650], eax
mov eax, dword [esi + 0x138]
push 4
add eax, 6
mov dword [ebp - 0x63c], esi
push 0x3000
push dword [esi + 0x13c]
imul ebx, eax, 0x38
push 0
add ebx, esi
call dword [0x496004]
push dword [ebx + 0x28]
mov dword [ebp - 0x630], eax
lea ecx, [ebp - 0x62c]
mov eax, dword [ebx + 0x30]
mov dword [ebp - 0x634], eax
mov eax, dword [ebx + 0x2c]
add eax, esi
push eax
lea eax, [ebp - 0x634]
push eax
lea eax, [ebp - 0x630]
push eax
call fcn.00484c4b
mov edi, dword [ebx + 0x30]
add esi, 0x38
mov edx, dword [ebp - 0x630]
add edi, edx
push 0x3e
pop ecx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebx + 0x30]
lea esi, [edx + 0x18]
mov ebx, dword [ebp - 0x63c]
movzx ecx, word [eax + edx + 0x14]
add ecx, eax
mov eax, dword [ebx + 0x138]
add esi, ecx
xor ecx, ecx
mov dword [ebp - 0x640], esi
mov dword [ebp - 0x634], ecx
inc eax
je 0x4854f9
mov edi, esi
lea edx, [ebx + 0x150]
mov dword [ebp - 0x638], edi
movzx eax, word [ebx + 0x132]
push 0xa
cmp ecx, eax
pop ecx
jne 0x4854bf
sub edx, 0x38
lea esi, [ebx + 0x10]
jmp 0x4854c1
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x634]
add edx, 0x38
mov edi, dword [ebp - 0x638]
inc ecx
mov eax, dword [ebx + 0x138]
add edi, 0x28
inc eax
mov dword [ebp - 0x634], ecx
mov dword [ebp - 0x638], edi
cmp ecx, eax
jb 0x4854a9
mov edx, dword [ebp - 0x630]
mov esi, dword [ebp - 0x640]
imul eax, dword [ebx + 0x138], 0x28
mov ecx, dword [eax + esi + 0x14]
add ecx, dword [eax + esi + 0x10]
xor esi, esi
mov eax, dword [edx + 0x3c]
add eax, edx
mov dword [ebp - 0x654], ecx
xor edx, edx
mov dword [ebp - 0x64c], eax
mov dword [ebp - 0x63c], esi
cmp dx, word [eax + 6]
movzx edi, word [eax + 0x14]
mov edx, dword [ebp - 0x630]
jae 0x48562b
lea ecx, [edi + 0x2c]
add ecx, eax
lea edi, [ebx + 0x178]
mov dword [ebp - 0x638], ecx
movzx eax, word [ebx + 0x132]
cmp esi, eax
mov esi, dword [ecx]
je 0x4855a9
mov eax, dword [edi + 8]
add esi, edx
push eax
push 0
push esi
mov dword [ebp - 0x634], eax
mov dword [ebp - 0x640], esi
call fcn.00487840
mov eax, dword [edi + 4]
add esp, 0xc
add eax, ebx
cmp dword [edi + 0xc], 0
push dword [edi]
push eax
je 0x48559b
lea eax, [ebp - 0x634]
push eax
lea eax, [ebp - 0x640]
push eax
lea ecx, [ebp - 0x62c]
call fcn.00484c4b
jmp 0x4855a4
push esi
call fcn.004871f0
add esp, 0xc
add edi, 0x38
jmp 0x4855f1
push dword [ecx - 4]
mov eax, dword [ebp - 0x648]
add esi, edx
mov ecx, dword [ebp - 0x644]
mov eax, dword [eax + 0x34]
add eax, dword [ecx + 0xc]
push eax
push esi
call fcn.004871f0
mov eax, dword [ebp - 0x648]
mov ecx, dword [ebp - 0x644]
mov eax, dword [eax + 0x88]
sub eax, dword [ecx + 0xc]
add eax, esi
push eax
mov eax, dword [ebx + 0x134]
neg eax
push eax
push esi
call fcn.0047e6d0
add esp, 0x18
mov eax, dword [ebp - 0x64c]
mov ecx, dword [ebp - 0x638]
mov esi, dword [ebp - 0x63c]
add ecx, 0x28
mov edx, dword [ebp - 0x630]
inc esi
movzx eax, word [eax + 6]
mov dword [ebp - 0x638], ecx
mov dword [ebp - 0x63c], esi
cmp esi, eax
jl 0x485548
mov ecx, dword [ebp - 0x654]
push ecx
push edx
call dword [ebp - 0x650]
pop ecx
pop ecx
push 0x8000
push dword [ebx + 0x13c]
mov esi, eax
push dword [ebp - 0x630]
call dword [0x496008]
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00486d46
mov esp, ebp
pop ebp
ret