Function at 0x447bb0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0xac
mov eax, dword [0x4b850c]
mov dword [esp + 0x9c], eax
xor eax, eax
mov edi, dword [esp + 0xc4]
xor eax, eax
lea esi, [esp + 0x4c]
mov ebp, dword [esp + 0xc0]
cmp byte [edi + 4], 8
mov dword [esp + 0x1c], edi
setne al
lea ecx, [eax*4 + 6]
mov eax, edi
mov edi, dword [edi + 0xc]
mov dword [esp + 8], esi
mov eax, dword [eax]
mov dword [esp], ebp
imul edi, ecx
mov dword [esp + 0x2c], ecx
mov dword [esp + 4], eax
call fcn.00442340
test eax, eax
je 0x447e5d
mov ebx, eax
lea ecx, [edi + eax + 2]
test ebp, ebp
je 0x447e10
mov eax, ebp
mov edx, 0x73504c54
call fcn.00446cd0
mov eax, dword [esp + 0x1c]
lea edi, [eax + 4]
add ebx, 1
jne 0x447e38
mov dword [esp + 4], edi
mov dword [esp + 8], 1
mov dword [esp], ebp
call fcn.0044ae00
mov dword [esp + 4], edi
mov dword [esp + 8], 1
mov dword [esp], ebp
call fcn.00427190
mov eax, dword [esp + 0x1c]
mov ebx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x24], eax
lea eax, [eax + eax*4]
mov edi, ebx
lea eax, [ebx + eax*2]
mov dword [esp + 0x20], ebx
cmp ebx, eax
jae 0x447dc0
mov dword [esp + 0x28], ebp
jmp 0x447d4f
mov edx, ebp
mov ecx, ebp
movzx eax, al
movzx ebx, bh
movzx edx, dl
movzx ebp, ch
mov ecx, esi
shl eax, 8
shl edx, 8
or edx, ebp
movzx ebp, cl
mov ecx, esi
shl edx, 8
movzx esi, ch
movzx ecx, word [esp + 0x16]
or edx, ebp
shl edx, 8
or edx, esi
mov esi, dword [esp + 0x18]
mov dword [esp + 0x40], edx
movzx edx, cl
movzx ecx, ch
or eax, esi
shl eax, 8
or eax, edx
shl eax, 8
or eax, ecx
mov dword [esp + 0x46], eax
movzx eax, byte [esp + 0x15]
mov esi, dword [esp + 0x28]
mov byte [esp + 0x44], bl
mov byte [esp + 0x45], al
test esi, esi
je 0x447d3a
mov ebx, dword [esp + 0x2c]
lea eax, [esp + 0x40]
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0044ae00
lea eax, [esp + 0x40]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.00427190
mov eax, dword [esp + 0x1c]
mov ebx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
add edi, 0xa
lea eax, [eax + eax*4]
lea eax, [ebx + eax*2]
cmp edi, eax
jae 0x447db8
movzx eax, word [edi + 6]
mov edx, dword [esp + 0x1c]
movzx ebx, word [edi + 4]
movzx esi, word [edi]
cmp byte [edx + 4], 8
movzx ebp, word [edi + 2]
mov word [esp + 0x16], ax
movzx eax, word [edi + 8]
mov byte [esp + 0x15], bl
movzx ecx, ah
mov dword [esp + 0x18], ecx
jne 0x447c98
movzx ecx, byte [esp + 0x16]
movzx ebx, bl
mov byte [esp + 0x15], al
shl ecx, 8
or ecx, ebx
mov ebx, ebp
movzx ebp, bl
shl ecx, 8
mov ebx, esi
or ecx, ebp
movzx esi, bl
movzx ebx, byte [esp + 0x18]
shl ecx, 8
or ecx, esi
mov dword [esp + 0x40], ecx
jmp 0x447ce7
mov ebp, dword [esp + 0x28]
test ebp, ebp
je 0x447dee
mov dword [ebp + 0x2d4], 0x82
mov eax, dword [ebp + 0x138]
mov dword [esp + 8], 4
bswap eax
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x3c]
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.0044ae00
mov eax, dword [esp + 0x9c]
sub eax, dword [0x4b850c]
jne 0x447e6d
add esp, 0xac
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [esp + 0x1c]
mov esi, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x24], eax
lea eax, [eax + eax*4]
mov edi, esi
lea eax, [esi + eax*2]
mov dword [esp + 0x20], esi
cmp esi, eax
jb 0x447c88
jmp 0x447dee
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], ebp
call fcn.0044ae00
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], ebp
call fcn.00427190
jmp 0x447c3e
mov dword [esp + 4], str.sPLT:_invalid_keyword
mov dword [esp], ebp
call fcn.0042b7c0
call fcn.00464ba0
lea esi, cs:[esi]
lea esi, [esi]