Function at 0x4b7fe0
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4b848f
sub esp, 0x50
mov edx, dword [esp + 0x60]
test edx, edx
je 0x4b8449
mov eax, dword [esp + 0x64]
mov ebx, dword [esp + 0x54]
movzx ebp, byte [ebx + 5]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4b8442
mov ebp, dword [ebx + 0x14]
cmp ebp, eax
jge 0x4b8442
mov esi, ebp
shl ebp, 1
test ebp, ebp
jle 0x4b8425
mov eax, edx
movzx edx, byte [ebx + 9]
test dl, dl
je 0x4b840d
movzx edx, byte [ebx + 8]
test dl, dl
je 0x4b8404
mov edx, esi
shl esi, 2
lea ebp, [esi + edx - 1]
mov dword [esp + 0x40], edx
mov dword [esp + 0x24], ebp
movzx esi, byte [ebx + 4]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4b83fd
mov esi, dword [ebx + 0x10]
cmp esi, ebp
jle 0x4b83f6
mov ecx, ebp
movzx ebp, byte [ebx + 6]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4b83d3
mov ebp, dword [ebx]
mov esi, dword [ebp + 8]
mov edi, edx
mov edx, dword [ebp + 4]
mov ebp, dword [ebp]
movzx ebx, byte [ebx + 8]
test bl, bl
je 0x4b80d4
mov ebx, dword [esp + 0x70]
cmp ebx, 0x10
jbe 0x4b8482
mov dword [esp + 0x2c], edx
lea ebx, [edx + 2]
mov edx, dword [esp + 0x6c]
movzx edx, byte [edx + 0x10]
cmp ebx, esi
ja 0x4b8388
mov dword [esp + 0x3c], ebx
mov ebx, dword [esp + 0x2c]
mov byte [ebp + ebx], 0x30
mov byte [ebp + ebx + 1], dl
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0x44], eax
xor eax, eax
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x44]
jmp 0x4b8119
movzx ecx, byte [esp + 0x23]
mov eax, dword [esp + 0x4c]
mov byte [eax + edx], cl
mov byte [eax + edx + 1], bl
mov ecx, dword [esp + 0x28]
inc ecx
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0x58]
mov eax, dword [esp + 0x60]
mov ebx, edx
mov dword [esp + 0x28], ecx
mov edx, ebp
mov ebp, dword [esp + 0x4c]
mov ecx, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
cmp ebx, edi
jge 0x4b833c
mov dword [esp + 0x4c], ebp
mov ebp, dword [esp + 0x54]
movzx ebp, byte [ebp + 9]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4b8338
test ebx, ebx
jle 0x4b832d
lea ebp, [edx + 1]
cmp ebp, esi
ja 0x4b82db
mov ebx, dword [esp + 0x4c]
mov byte [ebx + edx], 0x20
mov edx, dword [esp + 0x54]
movzx edx, byte [edx + 8]
test dl, dl
je 0x4b82d2
mov edx, dword [esp + 0x70]
cmp edx, 0x10
jbe 0x4b8476
mov dword [esp + 0x38], ebp
lea edx, [ebp + 2]
mov ebp, dword [esp + 0x6c]
movzx ebp, byte [ebp + 0x10]
cmp edx, esi
ja 0x4b8283
test eax, eax
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x38]
mov byte [ebx + edx], 0x30
xchg ebp, eax
mov byte [ebx + edx + 1], al
xchg ebp, eax
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x4c], ebx
je 0x4b8260
mov ebp, dword [esp + 0x28]
mov ebx, dword [esp + 0x64]
cmp ebp, ebx
jae 0x4b846d
movzx ebx, byte [eax + ebp]
mov byte [esp + 0x21], bl
shr bl, 4
movzx ebx, bl
mov ebp, dword [esp + 0x70]
cmp ebx, ebp
jae 0x4b845b
mov dword [esp + 0x30], esi
mov esi, dword [esp + 0x6c]
movzx ebx, byte [esi + ebx]
mov byte [esp + 0x23], bl
movzx ebx, byte [esp + 0x21]
and ebx, 0xf
cmp ebx, ebp
jae 0x4b8452
lea ebp, [edx + 2]
movzx ebx, byte [esi + ebx]
mov esi, dword [esp + 0x30]
cmp ebp, esi
jbe 0x4b80e8
mov byte [esp + 0x22], bl
mov dword [esp + 0x2c], edx
lea eax, [0x659d80]
mov dword [esp], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0043c410
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebp, [ecx + 2]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
movzx ebx, byte [esp + 0x22]
mov edi, dword [esp + 0x40]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x60]
jmp 0x4b80e8
mov ebp, dword [esp + 0x28]
mov ebx, dword [esp + 0x5c]
cmp ebp, ebx
jae 0x4b8464
mov ecx, dword [esp + 0x58]
movzx ecx, byte [ecx + ebp]
mov ebx, ecx
mov ecx, dword [esp + 0x24]
jmp 0x4b81c0
xchg ebp, eax
mov byte [esp + 0x23], al
xchg ebp, eax
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], ebx
mov ecx, dword [esp + 0x38]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
call fcn.0043c410
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea edx, [eax + 2]
mov eax, dword [esp + 0x60]
test eax, eax
mov ecx, dword [esp + 0x24]
movzx ebp, byte [esp + 0x23]
mov edi, dword [esp + 0x40]
jmp 0x4b818c
test eax, eax
mov edx, ebp
jmp 0x4b81a2
mov dword [esp + 0x34], edx
lea eax, [0x659d80]
mov dword [esp], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebp
call fcn.0043c410
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebp, [ecx + 1]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x34]
mov ebx, dword [esp + 0x28]
mov edi, dword [esp + 0x40]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x60]
jmp 0x4b814e
test eax, eax
mov ebx, dword [esp + 0x4c]
jmp 0x4b81a2
test eax, eax
jmp 0x4b832f
mov ebx, dword [esp + 0x54]
mov edi, dword [ebx]
mov dword [edi + 4], edx
mov dword [edi + 8], esi
mov edx, dword [0x8c1190]
test edx, edx
jne 0x4b837f
mov dword [edi], ebp
movzx eax, byte [ebx + 4]
test al, al
je 0x4b836b
mov eax, dword [ebx + 0x10]
cmp eax, ecx
jle 0x4b836b
movzx edx, byte [ebx + 6]
test dl, dl
jne 0x4b836f
add esp, 0x50
ret
mov dword [esp], ebx
sub eax, ecx
mov dword [esp + 4], eax
call fcn.004b6c20
jmp 0x4b836b
mov eax, ebp
call fcn.00450d20
jmp 0x4b8354
mov byte [esp + 0x23], dl
lea eax, [0x659d80]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov ecx, dword [esp + 0x2c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.0043c410
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
lea ebx, [eax + 2]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x24]
movzx edx, byte [esp + 0x23]
mov edi, dword [esp + 0x40]
jmp 0x4b80bf
mov dword [esp], ebx
sub esi, ecx
mov dword [esp + 4], esi
call fcn.004b6c20
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x40]
mov ebx, dword [esp + 0x54]
jmp 0x4b8086
mov ecx, ebp
jmp 0x4b8086
mov ecx, ebp
jmp 0x4b8086
mov edx, esi
mov esi, ebp
jmp 0x4b8051
movzx edx, byte [ebx + 8]
test dl, dl
je 0x4b8421
lea edx, [ebp + 2]
mov ebp, edx
mov edx, esi
jmp 0x4b8055
mov edx, ebp
jmp 0x4b8418
movzx eax, byte [ebx + 4]
test al, al
jne 0x4b8431
add esp, 0x50
ret
mov eax, dword [ebx + 0x10]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.004b6c20
jmp 0x4b842d
mov ebp, eax
jmp 0x4b8026
mov eax, dword [esp + 0x5c]
jmp 0x4b8009
mov eax, ebx
mov ecx, ebp
call fcn.00450da0
mov eax, ebx
mov ecx, ebp
call fcn.00450da0
mov eax, ebp
mov ecx, ebx
call fcn.00450da0
mov eax, ebp
mov ecx, ebx
call fcn.00450da0
mov eax, 0x10
mov ecx, edx
call fcn.00450da0
mov eax, 0x10
mov ecx, ebx
call fcn.00450da0
nop
call fcn.0044f4e0
jmp fcn.004b7fe0