Function at 0x4e8940
Capabilities:
Enumerate pe sections

Disassembly:
push ecx
push ebx
push esi
mov esi, dword [esp + 0x18]
push edi
mov edi, dword [esp + 0x18]
lea eax, [esp + 0xf]
push 1
push eax
push esi
mov byte [esp + 0x1b], 0x50
call edi
lea ecx, [esp + 0x1b]
push 1
push ecx
push esi
mov byte [esp + 0x27], 0x4b
call edi
lea edx, [esp + 0x34]
push 1
push edx
push esi
mov byte [esp + 0x40], 3
call edi
lea eax, [esp + 0x40]
push 1
push eax
push esi
mov byte [esp + 0x4c], 4
call edi
mov ebx, dword [esp + 0x44]
lea edx, [esp + 0x4c]
push 1
push edx
mov cl, byte [ebx + 2]
push esi
mov byte [esp + 0x58], cl
call edi
xor eax, eax
lea ecx, [esp + 0x58]
mov al, byte [ebx + 3]
push 1
push ecx
push esi
mov byte [esp + 0x64], al
call edi
mov dl, byte [ebx + 0x2c]
add esp, 0x48
lea eax, [esp + 0x1c]
mov byte [esp + 0x1c], dl
push 1
push eax
push esi
call edi
xor ecx, ecx
lea edx, [esp + 0x28]
mov cl, byte [ebx + 0x2d]
push 1
push edx
push esi
mov byte [esp + 0x34], cl
call edi
mov al, byte [ebx + 6]
lea ecx, [esp + 0x34]
push 1
push ecx
push esi
mov byte [esp + 0x40], al
call edi
xor edx, edx
lea eax, [esp + 0x40]
mov dl, byte [ebx + 7]
push 1
push eax
push esi
mov byte [esp + 0x4c], dl
call edi
mov cl, byte [ebx + 8]
lea edx, [esp + 0x4c]
push 1
mov byte [esp + 0x50], cl
push edx
push esi
call edi
mov eax, dword [ebx + 8]
lea ecx, [esp + 0x58]
push 1
push ecx
shr eax, 8
push esi
mov byte [esp + 0x64], al
call edi
mov edx, dword [ebx + 8]
add esp, 0x48
lea eax, [esp + 0x1c]
push 1
push eax
shr edx, 0x10
push esi
mov byte [esp + 0x28], dl
call edi
mov ecx, dword [ebx + 8]
lea edx, [esp + 0x28]
push 1
push edx
shr ecx, 0x18
push esi
mov byte [esp + 0x34], cl
call edi
mov al, byte [ebx + 0xc]
lea ecx, [esp + 0x34]
push 1
push ecx
push esi
mov byte [esp + 0x40], al
call edi
mov edx, dword [ebx + 0xc]
lea eax, [esp + 0x40]
push 1
push eax
shr edx, 8
push esi
mov byte [esp + 0x4c], dl
call edi
mov ecx, dword [ebx + 0xc]
lea edx, [esp + 0x4c]
push 1
push edx
shr ecx, 0x10
push esi
mov byte [esp + 0x58], cl
call edi
mov eax, dword [ebx + 0xc]
lea ecx, [esp + 0x58]
push 1
push ecx
shr eax, 0x18
push esi
mov byte [esp + 0x64], al
call edi
mov dl, byte [ebx + 0x10]
add esp, 0x48
lea eax, [esp + 0x1c]
mov byte [esp + 0x1c], dl
push 1
push eax
push esi
call edi
mov ecx, dword [ebx + 0x10]
lea edx, [esp + 0x28]
push 1
push edx
shr ecx, 8
push esi
mov byte [esp + 0x34], cl
call edi
mov eax, dword [ebx + 0x10]
lea ecx, [esp + 0x34]
shr eax, 0x10
push 1
push ecx
mov byte [esp + 0x3c], al
push esi
call edi
mov edx, dword [ebx + 0x10]
lea eax, [esp + 0x40]
push 1
push eax
shr edx, 0x18
push esi
mov byte [esp + 0x4c], dl
call edi
mov cl, byte [ebx + 0x14]
lea edx, [esp + 0x4c]
push 1
push edx
push esi
mov byte [esp + 0x58], cl
call edi
mov eax, dword [ebx + 0x14]
lea ecx, [esp + 0x58]
push 1
push ecx
shr eax, 8
push esi
mov byte [esp + 0x64], al
call edi
mov edx, dword [ebx + 0x14]
add esp, 0x48
lea eax, [esp + 0x1c]
push 1
push eax
shr edx, 0x10
push esi
mov byte [esp + 0x28], dl
call edi
mov ecx, dword [ebx + 0x14]
lea edx, [esp + 0x28]
push 1
push edx
shr ecx, 0x18
push esi
mov byte [esp + 0x34], cl
call edi
mov al, byte [ebx + 0x18]
lea ecx, [esp + 0x34]
push 1
push ecx
push esi
mov byte [esp + 0x40], al
call edi
mov edx, dword [ebx + 0x18]
lea eax, [esp + 0x40]
push 1
push eax
shr edx, 8
push esi
mov byte [esp + 0x4c], dl
call edi
mov cl, byte [ebx + 0x1c]
lea edx, [esp + 0x4c]
push 1
push edx
push esi
mov byte [esp + 0x58], cl
call edi
mov eax, dword [ebx + 0x1c]
lea ecx, [esp + 0x58]
push 1
push ecx
shr eax, 8
push esi
mov byte [esp + 0x64], al
call edi
mov edx, dword [ebx + 0x18]
add esp, 0x48
lea eax, [ebx + 0x148]
push edx
push eax
push esi
call edi
mov ecx, dword [ebx + 0x18]
add esp, 0xc
cmp eax, ecx
je 0x4e8ba7
pop edi
pop esi
mov eax, 0xa
pop ebx
pop ecx
ret
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x4e8bcd
mov ecx, dword [ebx + 0x13c]
push eax
push ecx
push esi
call edi
mov ecx, dword [ebx + 0x1c]
add esp, 0xc
cmp eax, ecx
je 0x4e8bcd
pop edi
pop esi
mov eax, 0xa
pop ebx
pop ecx
ret
pop edi
pop esi
xor eax, eax
pop ebx
pop ecx
ret