Function at 0x4db970
Capabilities:
Enumerate pe sections
Parse pe header

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffef4
push 0
push 0x4040fc
call fcn.004dcb6e
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
push dword [ebp + 8]
call fcn.004dcbcd
cmp eax, 0xffffffff
jne 0x4db9cb
push 0x10
push 0x40411a
push 0x40410c
push dword [0x4046a0]
call fcn.004dcc81
push 0
push 0x40411f
call fcn.004dcb6e
leave
ret 4
mov dword [ebp - 4], eax
push 0
push 0
push 0
push 2
push 0
push dword [ebp - 4]
call fcn.004dcbd3
or eax, eax
jne 0x4dba13
push dword [ebp - 4]
call fcn.004dcbc7
push 0x10
push 0x404143
push 0x404131
push dword [0x4046a0]
call fcn.004dcc81
push 0
push 0x404148
call fcn.004dcb6e
leave
ret 4
mov dword [ebp - 8], eax
push 0
push 0
push 0
push 4
push dword [ebp - 8]
call fcn.004dcc09
or eax, eax
jne 0x4dba4d
push 0x30
push 0x404166
push 0x40415a
push dword [0x4046a0]
call fcn.004dcc81
push dword [ebp - 8]
call fcn.004dcbc7
leave
ret 4
mov dword [ebp - 0xc], eax
mov edi, eax
cmp word [edi], 0x5a4d
jne 0x4dba65
add edi, dword [edi + 0x3c]
cmp word [edi], 0x4550
jne 0x4dba65
jmp 0x4dbaa9
push 0x10
push 0x404181
push 0x40416b
push dword [0x4046a0]
call fcn.004dcc81
push 0
push 0x404186
call fcn.004dcb6e
push dword [ebp - 0xc]
call fcn.004dcc39
push dword [ebp - 8]
call fcn.004dcbc7
push dword [ebp - 4]
call fcn.004dcbc7
mov eax, 0xffffffff
leave
ret 4
push 0
push 0x40419c
call fcn.004dcb6e
lea eax, [edi + 0x28]
sub eax, dword [ebp - 0xc]
push eax
pop dword [0x404058]
push dword [0x404058]
push 0x4041bb
push 0x4041ae
lea eax, [ebp - 0x10c]
push eax
call fcn.004dcc63
add esp, 0x10
push 0
lea eax, [ebp - 0x10c]
push eax
call fcn.004dcb6e
push dword [edi + 0x28]
pop dword [0x404068]
push dword [0x404068]
push 0x4041d9
push 0x4041cc
lea eax, [ebp - 0x10c]
push eax
call fcn.004dcc63
add esp, 0x10
push 0
lea eax, [ebp - 0x10c]
push eax
call fcn.004dcb6e
push dword [edi + 0x34]
pop dword [0x404064]
push dword [0x404064]
push 0x4041ef
push 0x4041e2
lea eax, [ebp - 0x10c]
push eax
call fcn.004dcc63
add esp, 0x10
push 0
lea eax, [ebp - 0x10c]
push eax
call fcn.004dcb6e
lea eax, [edi + 0x50]
sub eax, dword [ebp - 0xc]
mov dword [0x404078], eax
mov eax, dword [edi + 0x50]
mov dword [0x404074], eax
push dword [0x404078]
push 0x404209
push 0x4041fc
lea eax, [ebp - 0x10c]
push eax
call fcn.004dcc63
add esp, 0x10
push 0
lea eax, [ebp - 0x10c]
push eax
call fcn.004dcb6e
mov eax, edi
add eax, 0x80
sub eax, dword [ebp - 0xc]
mov dword [0x404080], eax
add eax, 4
mov dword [0x40407c], eax
push dword [0x404080]
push 0x404225
push 0x404218
lea eax, [ebp - 0x10c]
push eax
call fcn.004dcc63
add esp, 0x10
push 0
lea eax, [ebp - 0x10c]
push eax
call fcn.004dcb6e
push dword [0x40407c]
push 0x404241
push 0x404234
lea eax, [ebp - 0x10c]
push eax
call fcn.004dcc63
add esp, 0x10
push 0
lea eax, [ebp - 0x10c]
push eax
call fcn.004dcb6e
mov eax, dword [edi + 0x38]
mov dword [0x404084], eax
push dword [0x404084]
push 0x40425d
push 0x404250
lea eax, [ebp - 0x10c]
push eax
call fcn.004dcc63
add esp, 0x10
push 0
lea eax, [ebp - 0x10c]
push eax
call fcn.004dcb6e
movzx ecx, word [edi + 6]
lea eax, [edi + 6]
mov dword [0x404090], eax
mov dword [0x404060], ecx
mov esi, edi
add esi, 0xf8
mov eax, esi
sub eax, dword [ebp - 0xc]
mov dword [0x40405c], eax
xor eax, eax
add eax, dword [esi + 8]
add esi, 0x28
loop 0x4dbc67
add eax, 0x1000
mov dword [0x40406c], eax
push dword [0x40406c]
push 0x404279
push 0x40426c
lea eax, [ebp - 0x10c]
push eax
call fcn.004dcc63
add esp, 0x10
push 0
lea eax, [ebp - 0x10c]
push eax
call fcn.004dcb6e
sub esi, 0x28
lea eax, [esi + 8]
sub eax, dword [ebp - 0xc]
mov dword [0x40408c], eax
lea eax, [esi + 0x10]
sub eax, dword [ebp - 0xc]
mov dword [0x404088], eax
mov eax, dword [esi + 0xc]
mov dword [0x404094], eax
push dword [0x40408c]
push 0x4042a9
push 0x40429c
lea eax, [ebp - 0x10c]
push eax
call fcn.004dcc63
add esp, 0x10
push 0
lea eax, [ebp - 0x10c]
push eax
call fcn.004dcb6e
push dword [0x404088]
push 0x4042ce
push 0x4042c1
lea eax, [ebp - 0x10c]
push eax
call fcn.004dcc63
add esp, 0x10
push 0
lea eax, [ebp - 0x10c]
push eax
call fcn.004dcb6e
push dword [ebp - 0xc]
call fcn.004dcc39
push dword [ebp - 8]
call fcn.004dcbc7
push dword [ebp - 4]
call fcn.004dcbc7
push 0
push 0x4042e8
call fcn.004dcb6e
mov eax, 0
leave
ret 4