Function at 0x4b96b0
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0xfc8
mov eax, dword [0x5b7b5c]
xor eax, esp
mov dword [esp + 0xfc4], eax
xor eax, eax
push ebx
mov word [esp + 0x1ac], ax
mov word [esp + 0x274], ax
mov eax, 1
push ebp
mov ebp, dword [esp + 0xfdc]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xfe0]
xor ebx, ebx
push esi
xor ecx, ecx
xor edx, edx
push edi
mov edi, dword [esp + 0xfdc]
mov dword [esp + 0x20], ebp
mov word [esp + 0xf0], cx
mov word [esp + 0x410], dx
mov dword [esp + 0x10], 0x76c
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x24], ebx
cmp eax, 2
jne 0x4b980c
cmp word [edi + 0x10], 0x20
jne 0x4b9bc0
push 0x64
lea ecx, [esp + 0x284]
push ecx
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x2c]
push eax
push str._d__d__d___d:_d_2s
push edi
call fcn.00540b9b
mov eax, dword [esp + 0x34]
add esp, 0x24
cmp eax, 0x64
jge 0x4b9789
cmp eax, 0x32
jg 0x4b9780
add eax, 0x7d0
jmp 0x4b9785
add eax, 0x76c
mov dword [esp + 0x10], eax
push 2
push edi
call fcn.004b94c0
push 5
mov esi, eax
push str._DIR_
push esi
call fcn.005412e5
add esp, 0x14
test eax, eax
jne 0x4b97b3
or dword [ebp + 0x410], 0x4000
jmp 0x4b97c8
add ebp, 0x414
push ebp
push 0x5833ec
push esi
call fcn.00540b9b
add esp, 0xc
push 1
push esi
call fcn.004b94c0
push eax
lea ecx, [esp + 0x41c]
push 0x1f5
push ecx
call fcn.0053fe1c
add esp, 0x14
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x10]
cmp eax, 0x3e8
jge 0x4ba25e
cmp eax, 0x32
jg 0x4ba255
add eax, 0x7d0
jmp 0x4ba25a
cmp eax, 3
jne 0x4b9a18
mov ebp, edi
cmp word [0x5ed8a0], bx
je 0x4b985d
movzx eax, word [edi]
mov edx, 0x20
cmp dx, ax
je 0x4b9837
mov ecx, 9
cmp cx, ax
jne 0x4b985d
push edi
push 0x1f5
push 0x5ed8a0
call fcn.0053fd9f
mov edx, dword [esp + 0xfec]
push 0x5ed8a0
push edx
push edi
call fcn.0053fe1c
add esp, 0x18
movzx eax, word [edi]
xor ecx, ecx
cmp ax, bx
je 0x4b98f6
jmp 0x4b9870
cmp ax, 0x3b
je 0x4b9891
add edi, 2
mov word [esp + ecx*2 + 0x410], ax
movzx eax, word [edi]
inc ecx
cmp ax, bx
jne 0x4b9870
xor eax, eax
jmp 0x4ba2ee
cmp word [edi], bx
je 0x4b98f6
xor eax, eax
cmp ecx, 4
mov word [esp + ecx*2 + 0x410], ax
jle 0x4b98d1
lea esi, [esp + ecx*2 + 0x408]
push str..DIR
push esi
call fcn.0054022e
add esp, 8
test eax, eax
jne 0x4b98d1
mov eax, dword [esp + 0x20]
or dword [eax + 0x410], 0x4000
xor ecx, ecx
mov word [esi], cx
push 1
push edi
call fcn.004b94c0
mov esi, eax
add esp, 8
cmp word [esi], bx
jne 0x4b98fd
push ebp
push 0x1f5
push 0x5ed8a0
call fcn.0053fe1c
add esp, 0xc
xor eax, eax
jmp 0x4ba2ee
xor edx, edx
mov word [0x5ed8a0], dx
xor eax, eax
jmp 0x4b9910
movzx ecx, word [esi]
cmp cx, 0x30
jb 0x4b99ae
cmp cx, 0x39
ja 0x4b99ae
mov cl, byte [esi]
add esi, 2
mov byte [esp + eax + 0x28], cl
movzx ecx, word [esi]
cmp cx, 0x30
jb 0x4b999e
cmp cx, 0x39
ja 0x4b999e
mov dl, byte [esi]
add esi, 2
mov byte [esp + eax + 0x29], dl
movzx ecx, word [esi]
cmp cx, 0x30
jb 0x4b99a1
cmp cx, 0x39
ja 0x4b99a1
mov cl, byte [esi]
add esi, 2
mov byte [esp + eax + 0x2a], cl
movzx ecx, word [esi]
cmp cx, 0x30
jb 0x4b99a6
cmp cx, 0x39
ja 0x4b99a6
mov dl, byte [esi]
add esi, 2
mov byte [esp + eax + 0x2b], dl
movzx ecx, word [esi]
cmp cx, 0x30
jb 0x4b99ab
cmp cx, 0x39
ja 0x4b99ab
mov cl, byte [esi]
mov byte [esp + eax + 0x2c], cl
add eax, 5
add esi, 2
cmp eax, 0x14
jl 0x4b9910
jmp 0x4b99ae
inc eax
jmp 0x4b99ae
add eax, 2
jmp 0x4b99ae
add eax, 3
jmp 0x4b99ae
add eax, 4
lea edx, [esp + 0x28]
push edx
mov byte [esp + eax + 0x2c], bl
call fcn.005407d9
mov ecx, dword [esp + 0x24]
add esp, 4
shl eax, 9
mov dword [ecx + 0x414], eax
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x18]
push ecx
push 0x64
lea edx, [esp + 0x100]
push edx
lea eax, [esp + 0x2c]
push eax
push str._d__3s__d__2d:_2d
push 1
push esi
call fcn.004b94c0
add esp, 8
push eax
call fcn.00540b9b
add esp, 0x20
lea esi, [esp + 0xf0]
call fcn.004b9530
mov dword [esp + 0x14], eax
jmp 0x4b97e6
cmp eax, 4
jne 0x4b9bc0
movzx eax, word [edi]
cmp ax, bx
je 0x4b98f6
mov ecx, 0x20
cmp cx, ax
je 0x4b98f6
mov edx, 9
cmp dx, ax
je 0x4b98f6
push 0x1f5
lea eax, [esp + 0x414]
push eax
push str._500s
push edi
call fcn.00540b9b
push 1
push edi
call fcn.004b94c0
push 0x1f5
lea ecx, [esp + 0x818]
push ecx
mov esi, eax
push str._500s
push esi
call fcn.00540b9b
lea edx, [edi + 0x12]
add esp, 0x28
cmp edx, esi
jne 0x4b9aec
push 0x57713c
lea eax, [esp + 0x414]
push 0x1f5
push eax
call fcn.0053fd9f
lea ecx, [esp + 0x808]
push ecx
lea edx, [esp + 0x420]
push 0x1f5
push edx
call fcn.0053fd9f
push 1
push esi
call fcn.004b94c0
mov ecx, dword [esp + 0x1000]
mov esi, eax
sub eax, edi
sar eax, 1
sub ecx, eax
push ecx
lea edx, [esp + 0x820]
push edx
push str._500s
push esi
call fcn.00540b9b
add esp, 0x30
lea eax, [esp + 0x7fc]
push str._DIR_
push eax
call fcn.0054022e
add esp, 8
test eax, eax
jne 0x4b9b11
or dword [ebp + 0x410], 0x4000
jmp 0x4b9b63
mov ax, word [esp + 0x7fc]
lea ecx, [esp + 0x7fc]
lea edx, [esp + 0xbe8]
cmp ax, bx
je 0x4b9b48
movzx eax, ax
nop
cmp ax, 0x2c
je 0x4b9b3c
mov word [edx], ax
add edx, 2
movzx eax, word [ecx + 2]
add ecx, 2
cmp ax, bx
jne 0x4b9b30
xor ecx, ecx
mov word [edx], cx
lea edx, [esp + 0xbe8]
push edx
call fcn.00540753
add esp, 4
mov dword [ebp + 0x414], eax
push 1
push esi
call fcn.004b94c0
mov esi, eax
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x24]
push edx
push str._d__d__d
push esi
call fcn.00540b9b
add esp, 0x1c
push 0x64
lea eax, [esp + 0x284]
push eax
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x28]
push edx
push str._2d:_2d_2s
push 1
push esi
call fcn.004b94c0
add esp, 8
push eax
call fcn.00540b9b
add esp, 0x18
mov esi, ebp
jmp 0x4b97ea
movzx eax, word [edi]
mov ecx, 0x20
cmp cx, ax
je 0x4b9bd7
mov edx, 9
cmp dx, ax
jne 0x4b9bdc
add edi, 2
jmp 0x4b9bc0
push 0x64
lea eax, [esp + 0x1bc]
push eax
push str._11s
push edi
call fcn.00540b9b
lea eax, [esp + 0x1c8]
add esp, 0x10
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4b9c00
sub eax, edx
sar eax, 1
mov ebx, eax
mov ebp, 4
cmp ebx, 0xa
je 0x4b9c97
cmp ebx, 0xb
je 0x4b9c97
cmp ebx, 3
jne 0x4b9c52
mov ax, word [esp + 0x1b8]
mov ecx, 0x2d
cmp cx, ax
je 0x4b9c4b
mov edx, 0x64
cmp dx, ax
je 0x4b9c4b
mov ecx, 0x6c
cmp cx, ax
jne 0x4b9c52
mov ebp, 1
jmp 0x4b9c97
movzx eax, word [edi]
xor ebx, ebx
mov ecx, edi
test ax, ax
je 0x4b98f6
movzx eax, ax
cmp ax, 0x20
je 0x4b9c84
cmp ax, 0x30
jb 0x4b9c77
cmp ax, 0x39
jbe 0x4b9c84
movzx eax, word [ecx + 2]
add ecx, 2
inc ebx
test ax, ax
jne 0x4b9c65
cmp ebx, 0xa
je 0x4b9c92
cmp ebx, 0xb
jne 0x4b98f6
mov ebp, 3
push 3
push edi
call fcn.004b94c0
mov edx, 0x20
add esp, 8
cmp dx, word [eax + 6]
jne 0x4b9cc2
push 3
push eax
lea eax, [esp + 0xf8]
push 0x64
push eax
call fcn.0044c530
add esp, 0x10
lea esi, [esp + 0xf0]
call fcn.004b9530
test eax, eax
je 0x4b9ce3
xor ecx, ecx
mov ebp, 2
mov word [esp + 0xf0], cx
jmp 0x4b9d11
lea edx, [ebp + 1]
push edx
push edi
call fcn.004b94c0
add esp, 8
mov ecx, eax
call fcn.004b9680
test eax, eax
je 0x4b9d11
push ebp
push edi
call fcn.004b94c0
add esp, 8
mov ecx, eax
call fcn.004b9680
test eax, eax
jne 0x4b9d11
dec ebp
push ebp
push edi
call fcn.004b94c0
mov esi, eax
mov eax, dword [esp + 0x28]
add eax, 0x414
push eax
push 0x574b1c
push esi
call fcn.00540b9b
push 1
push esi
call fcn.004b94c0
add esp, 0x1c
mov edi, eax
xor ecx, ecx
mov edi, edi
movzx eax, word [edi + ecx*2]
cmp ax, 0x30
jb 0x4b9d50
cmp ax, 0x39
jbe 0x4b9d56
cmp ax, 0x2e
jne 0x4b9d7e
inc ecx
cmp ecx, 0xa
jl 0x4b9d40
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x18]
push eax
push str._4d._2d._2d
push edi
call fcn.00540b9b
add esp, 0x14
jmp 0x4ba0b8
xor ecx, ecx
movzx eax, word [edi + ecx*2]
cmp ax, 0x30
jb 0x4b9d90
cmp ax, 0x39
jbe 0x4b9d96
cmp ax, 0x2d
jne 0x4b9dfb
inc ecx
cmp ecx, 0xa
jl 0x4b9d80
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x18]
push eax
push str._4d__2d__2d
push edi
call fcn.00540b9b
push 1
push edi
call fcn.004b94c0
mov esi, eax
push 0x3a
push esi
call fcn.0053fffa
add esp, 0x24
test eax, eax
je 0x4ba0b8
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x20]
push edx
push 0x573208
push esi
call fcn.00540b9b
add esp, 0x10
cmp eax, 2
jne 0x4ba0b8
mov edi, esi
jmp 0x4ba0b8
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x20]
push edx
push str._02d__02d__04d
push edi
call fcn.00540b9b
add esp, 0x14
cmp eax, 3
jne 0x4b9e2f
push 1
push edi
call fcn.004b94c0
add esp, 8
mov edi, eax
jmp 0x4ba0b8
lea eax, [esp + 0x18]
push eax
push 0x64
lea ecx, [esp + 0xf8]
push ecx
push str._3s__2d
push edi
mov ebp, 1
call fcn.00540b9b
add esp, 0x14
lea esi, [esp + 0xf0]
call fcn.004b9530
mov dword [esp + 0x14], eax
test eax, eax
jne 0x4b9f7a
xor ebp, ebp
mov esi, edi
test edi, edi
je 0x4b9e90
movzx ecx, word [esi]
cmp cx, 0x30
jb 0x4b9e90
cmp cx, 0x39
ja 0x4b9e90
cmp eax, 0x63
je 0x4b9e90
mov word [esp + eax*2 + 0x28], cx
inc eax
add esi, 2
jne 0x4b9e71
xor edx, edx
mov word [esp + eax*2 + 0x28], dx
lea eax, [esp + 0x28]
push eax
call fcn.00540753
add esp, 4
cmp eax, 1
jge 0x4b9eb3
mov dword [esp + 0x14], 1
jmp 0x4b9ec4
lea ecx, [esp + 0x28]
push ecx
call fcn.00540753
add esp, 4
mov dword [esp + 0x14], eax
test esi, esi
je 0x4b9ef1
jmp 0x4b9ed0
movzx eax, word [esi]
cmp ax, 0x30
jb 0x4b9edf
cmp ax, 0x39
jbe 0x4b9ef1
mov edx, 0x20
cmp dx, ax
jne 0x4b9eec
lea ebp, [edx - 0x1f]
add esi, 2
jne 0x4b9ed0
xor ecx, ecx
test esi, esi
je 0x4b9f16
movzx eax, word [esi]
cmp ax, 0x30
jb 0x4b9f16
cmp ax, 0x39
ja 0x4b9f16
cmp ecx, 0x63
je 0x4b9f16
mov word [esp + ecx*2 + 0x28], ax
inc ecx
add esi, 2
jne 0x4b9ef7
lea eax, [esp + 0x28]
push eax
call fcn.00540753
mov esi, 1
add esp, 4
cmp eax, esi
jge 0x4b9f32
mov dword [esp + 0x18], esi
jmp 0x4b9f43
lea ecx, [esp + 0x28]
push ecx
call fcn.00540753
add esp, 4
mov dword [esp + 0x18], eax
cmp dword [esp + 0x14], 0
jne 0x4b9f7c
lea edx, [esp + 0xf0]
push edx
call fcn.00540753
add esp, 4
cmp eax, esi
jge 0x4b9f64
mov dword [esp + 0x14], esi
jmp 0x4b9f7c
lea eax, [esp + 0xf0]
push eax
call fcn.00540753
add esp, 4
mov dword [esp + 0x14], eax
jmp 0x4b9f7c
mov esi, ebp
xor ecx, ecx
test ebp, ebp
setne cl
inc ecx
push ecx
push edi
call fcn.004b94c0
push 0x64
lea edx, [esp + 0x354]
push edx
mov edi, eax
push 0x583310
push edi
call fcn.00540b9b
lea eax, [esp + 0x360]
push 0x3a
push eax
call fcn.0053fffa
add esp, 0x20
test eax, eax
lea eax, [esp + 0x348]
je 0x4ba0ab
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x20]
push edx
push 0x573208
push eax
call fcn.00540b9b
mov edx, dword [esp + 0xffc]
movzx ecx, word [edx]
mov dword [esp + 0x20], ecx
movzx ecx, word [edx + 2]
add esp, 0x10
cmp cx, 6
jbe 0x4ba058
mov esi, dword [esp + 0x14]
cmp esi, 6
jg 0x4ba0b8
movzx eax, cx
sub eax, esi
cmp eax, 6
jle 0x4ba013
inc dword [esp + 0x10]
jmp 0x4ba0b8
jne 0x4ba0b8
movzx eax, word [edx + 6]
mov ecx, dword [esp + 0x18]
cmp eax, ecx
jle 0x4ba02e
inc dword [esp + 0x10]
jmp 0x4ba0b8
jne 0x4ba0b8
movzx eax, word [edx + 8]
mov ecx, dword [esp + 0x1c]
cmp eax, ecx
jle 0x4ba046
inc dword [esp + 0x10]
jmp 0x4ba0b8
jne 0x4ba0b8
movzx edx, word [edx + 0xa]
cmp edx, dword [esp + 0x24]
jle 0x4ba0b8
inc dword [esp + 0x10]
jmp 0x4ba0b8
mov eax, dword [esp + 0x14]
cmp eax, 6
jle 0x4ba0b8
movzx ecx, cx
sub eax, ecx
cmp eax, 6
jle 0x4ba071
sub dword [esp + 0x10], esi
jmp 0x4ba0b8
jne 0x4ba0b8
movzx eax, word [edx + 6]
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jle 0x4ba085
sub dword [esp + 0x10], esi
jmp 0x4ba0b8
jne 0x4ba0b8
movzx eax, word [edx + 8]
mov ecx, dword [esp + 0x1c]
cmp ecx, eax
jle 0x4ba099
sub dword [esp + 0x10], esi
jmp 0x4ba0b8
jne 0x4ba0b8
movzx edx, word [edx + 0xa]
cmp dword [esp + 0x24], edx
jle 0x4ba0b8
sub dword [esp + 0x10], esi
jmp 0x4ba0b8
push eax
call fcn.00540753
add esp, 4
mov dword [esp + 0x10], eax
push 1
push edi
call fcn.004b94c0
push eax
lea ecx, [esp + 0x41c]
push 0x1f5
push ecx
call fcn.0053fe1c
add esp, 0x14
cmp dword [esp + 0xff0], 0
jne 0x4ba163
mov ecx, 0x57713c
lea eax, [esp + 0x410]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4ba116
test dx, dx
je 0x4ba112
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4ba116
add eax, 4
add ecx, 4
test dx, dx
jne 0x4ba0f0
xor eax, eax
jmp 0x4ba11b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4b98f6
mov ecx, 0x5780fc
lea eax, [esp + 0x410]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4ba156
test dx, dx
je 0x4ba152
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4ba156
add eax, 4
add ecx, 4
test dx, dx
jne 0x4ba130
xor eax, eax
jmp 0x4ba15b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4b98f6
mov ax, word [esp + 0x1b8]
mov edx, 0x64
cmp dx, ax
jne 0x4ba1c1
cmp ebx, 3
jne 0x4ba1ae
lea eax, [esp + 0x410]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4ba184
sub eax, edx
sar eax, 1
cmp eax, 1
jle 0x4ba1ae
lea eax, [esp + eax*2 + 0x40e]
mov ecx, 0x2f
cmp cx, word [eax]
jne 0x4ba1ae
xor edx, edx
mov word [eax], dx
mov esi, dword [esp + 0x20]
or dword [esi + 0x410], 0x4000
jmp 0x4ba23e
mov esi, dword [esp + 0x20]
mov ecx, 0x6c
cmp cx, ax
jne 0x4ba23e
or dword [esi + 0x410], 0xa000
lea eax, [esp + 0x410]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4ba1e3
sub eax, edx
sar eax, 1
xor ecx, ecx
test eax, eax
jle 0x4ba23e
jmp 0x4ba200
mov edx, 0x20
cmp dx, word [esp + ecx*2 + 0x410]
jne 0x4ba22d
mov edx, 0x2d
cmp dx, word [esp + ecx*2 + 0x412]
jne 0x4ba22d
mov edx, 0x3e
cmp dx, word [esp + ecx*2 + 0x414]
je 0x4ba234
inc ecx
cmp ecx, eax
jl 0x4ba200
jmp 0x4ba23e
xor eax, eax
mov word [esp + ecx*2 + 0x410], ax
xor ecx, ecx
cmp cx, word [esp + 0x410]
jne 0x4b97ea
xor eax, eax
jmp 0x4ba2ee
add eax, 0x76c
mov dword [esp + 0x10], eax
mov cx, word [esp + 0x280]
mov edx, 0x70
lea edi, [edx - 0x64]
cmp dx, cx
je 0x4ba27d
mov edx, 0x50
cmp dx, cx
jne 0x4ba287
cmp dword [esp + 0x1c], edi
jge 0x4ba287
add dword [esp + 0x1c], edi
mov cx, word [esp + 0x18]
mov dx, word [esp + 0x1c]
mov word [esi + 0x418], ax
movzx eax, word [esp + 0x14]
mov word [esi + 0x41e], cx
lea ecx, [esp + 0x410]
push ecx
mov word [esi + 0x41a], ax
movzx eax, word [esp + 0x28]
push 0x208
push esi
mov word [esi + 0x420], dx
mov word [esi + 0x422], ax
call fcn.0053fe1c
lea edx, [esp + 0x1c4]
push edx
push edi
add esi, 0x428
push esi
call fcn.0053fe1c
add esp, 0x18
mov eax, 1
mov ecx, dword [esp + 0xfd4]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0053f73f
add esp, 0xfc8
ret