Function at 0x4b16b0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x24
movzx eax, byte [ecx]
push ebx
dec eax
mov dword [esp + 0xc], ecx
mov ebx, edx
mov dword [esp + 0x10], ebx
push esi
push edi
cmp eax, 6
ja case.default.0x4b16d3
jmp dword [eax*4 + 0x4b1ca0]
mov eax, dword [ebx]
mov ecx, 0x9000
test word [eax + 0x10], cx
je 0x4b16fc
push 0
push 1
mov ecx, eax
call fcn.0043ecf0
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [eax], 1
mov ecx, 4
mov dword [eax + 4], 0
mov word [eax + 0x10], cx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebx]
mov ecx, 0x9000
test word [eax + 0x10], cx
je 0x4b173b
push 0
push 0
mov ecx, eax
call fcn.0043ecf0
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [eax], 0
mov ecx, 4
mov dword [eax + 4], 0
mov word [eax + 0x10], cx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ecx + 8]
xorps xmm0, xmm0
movlpd qword [esp + 0x28], xmm0
mov dword [esp + 0x20], ecx
mov dl, byte [ecx]
mov al, dl
cmp dl, 0x2d
jne 0x4b1774
mov al, byte [ecx + 1]
mov esi, dword [esp + 0x2c]
lea ebx, [ecx + 1]
cmp dl, 0x2d
mov edx, dword [esp + 0x28]
cmovne ebx, ecx
cmp al, 0x30
jl 0x4b180b
nop dword [eax]
cmp al, 0x39
jg 0x4b1807
movsx edi, al
inc ebx
sub edi, 0x30
cmp esi, 0xccccccc
jl 0x4b17e7
jg 0x4b189f
cmp edx, 0xcccccccc
jb 0x4b17e7
cmp esi, 0xccccccc
jg 0x4b189f
jl 0x4b17cb
cmp edx, 0xcccccccc
ja 0x4b189f
mov al, byte [ebx]
cmp al, 0x30
jl 0x4b17d9
cmp al, 0x39
jle 0x4b189f
cmp edi, 9
je 0x4b189f
cmp edi, 8
je 0x4b183b
mov eax, edx
mov ecx, esi
shld ecx, eax, 2
shl eax, 2
add edx, eax
mov al, byte [ebx]
adc esi, ecx
shld esi, edx, 1
add edx, edx
add edx, edi
adc esi, 0
cmp al, 0x30
jge 0x4b1790
mov ecx, dword [esp + 0x20]
cmp byte [ecx], 0x2d
jne 0x4b1817
neg edx
adc esi, 0
neg esi
mov eax, dword [esp + 0x18]
mov ecx, 0x9000
mov eax, dword [eax]
test word [eax + 0x10], cx
je 0x4b188a
push esi
push edx
mov ecx, eax
call fcn.0043ecf0
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x20]
cmp byte [eax], 0x2d
jne 0x4b189f
mov eax, dword [esp + 0x18]
mov ecx, 0x9000
mov eax, dword [eax]
test word [eax + 0x10], cx
je 0x4b186d
push bind
push 0
mov ecx, eax
call fcn.0043ecf0
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [eax], 0
mov ecx, 4
mov dword [eax + 4], getpeername
mov word [eax + 0x10], cx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [eax], edx
mov ecx, 4
mov dword [eax + 4], esi
mov word [eax + 0x10], cx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov esi, dword [ecx + 8]
test esi, esi
jne 0x4b18b2
xor ecx, ecx
jmp 0x4b18c6
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b18b7
sub ecx, edx
and ecx, 0x3fffffff
push 1
push ecx
lea edx, [esp + 0x30]
mov ecx, esi
call fcn.00421920
mov esi, dword [ebx]
mov eax, 0x9000
add esp, 8
test word [esi + 0x10], ax
je 0x4b18ed
mov ecx, esi
call fcn.0043e690
jmp 0x4b18f6
mov eax, 1
mov word [esi + 0x10], ax
movsd xmm0, qword [esp + 0x28]
movsd qword [esp + 0x28], xmm0
mov ecx, dword [esp + 0x2c]
mov eax, ecx
and eax, 0x7ff00000
cmp eax, 0x7ff00000
jne 0x4b1926
mov eax, dword [esp + 0x28]
and ecx, 0xfffff
or eax, ecx
jne 0x4b1c96
mov eax, 8
movsd qword [esi], xmm0
mov word [esi + 0x10], ax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test byte [ecx + 1], 2
jne 0x4b1962
mov esi, dword [ecx + 4]
or eax, 0xffffffff
mov edx, dword [ecx + 8]
sub esi, 2
push eax
push 1
inc edx
mov ecx, ebx
push esi
call fcn.00445060
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ecx + 4]
mov eax, dword [ecx + 8]
mov dword [esp + 0x10], eax
mov dword [esp + 0x24], edx
lea eax, [edx + 1]
push eax
call fcn.0041dd70
mov edx, eax
add esp, 4
mov dword [esp + 0x20], edx
test edx, edx
jne 0x4b1996
push ebx
call fcn.004456a0
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x24]
mov edi, 1
dec eax
xor esi, esi
mov dword [esp + 0x28], eax
cmp eax, edi
jbe 0x4b1c43
mov ecx, dword [esp + 0x10]
lea ebx, [edi + 8]
mov al, byte [edi + ecx]
cmp al, 0x5c
je 0x4b19c4
mov byte [esi + edx], al
jmp 0x4b1c2f
mov al, byte [edi + ecx + 1]
inc edi
cmp al, 0x75
jne 0x4b1c00
mov bl, byte [ecx + edi + 2]
mov dl, byte [ecx + edi + 1]
mov ch, byte [ecx + edi + 3]
mov cl, dl
mov eax, dword [esp + 0x10]
sar cl, 6
and cl, 1
mov byte [esp + 0x14], dl
mov dh, byte [eax + edi + 4]
mov al, cl
shl al, 3
add edi, 4
sub al, cl
sub byte [esp + 0x14], al
mov eax, dword [esp + 0x14]
and eax, 0xf
shl eax, 4
mov dword [esp + 0x14], eax
mov al, bl
sar al, 6
and al, 1
mov cl, al
shl cl, 3
sub cl, al
mov al, bl
mov ebx, dword [esp + 0x14]
sub al, cl
and eax, 0xf
add ebx, eax
mov al, ch
sar al, 6
and al, 1
shl ebx, 4
mov cl, al
shl cl, 3
sub cl, al
mov al, ch
sub al, cl
and eax, 0xf
add ebx, eax
mov al, dh
sar al, 6
and al, 1
shl ebx, 4
mov cl, al
shl cl, 3
sub cl, al
mov al, dh
sub al, cl
and eax, 0xf
add ebx, eax
mov dword [esp + 0x14], ebx
test ebx, ebx
je 0x4b1c3b
cmp ebx, 0x7f
ja 0x4b1a7e
mov edx, dword [esp + 0x20]
mov byte [esi + edx], bl
mov ebx, 9
jmp 0x4b1c2b
mov eax, ebx
cmp ebx, 0x7ff
ja 0x4b1aa8
mov edx, dword [esp + 0x20]
and bl, 0x3f
shr eax, 6
or al, 0xc0
mov byte [esi + edx], al
inc esi
or bl, 0x80
mov byte [esi + edx], bl
mov ebx, 9
jmp 0x4b1c2b
mov ecx, dword [esp + 0x10]
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4b1bd2
mov eax, dword [esp + 0x24]
add eax, 0xfffffffa
cmp edi, eax
jae 0x4b1bd2
cmp byte [ecx + edi + 1], 0x5c
jne 0x4b1bd2
cmp byte [edi + ecx + 2], 0x75
jne 0x4b1bd2
mov bl, byte [edi + ecx + 4]
mov dl, byte [edi + ecx + 3]
mov ch, byte [edi + ecx + 5]
mov cl, dl
mov eax, dword [esp + 0x10]
sar cl, 6
and cl, 1
mov byte [esp + 0x1c], dl
mov dh, byte [edi + eax + 6]
mov al, cl
shl al, 3
sub al, cl
sub byte [esp + 0x1c], al
mov eax, dword [esp + 0x1c]
and eax, 0xf
shl eax, 4
mov dword [esp + 0x1c], eax
mov al, bl
sar al, 6
and al, 1
mov cl, al
shl cl, 3
sub cl, al
mov al, bl
mov ebx, dword [esp + 0x1c]
sub al, cl
and eax, 0xf
add ebx, eax
mov al, ch
sar al, 6
and al, 1
shl ebx, 4
mov cl, al
shl cl, 3
sub cl, al
mov al, ch
sub al, cl
and eax, 0xf
add ebx, eax
mov al, dh
sar al, 6
and al, 1
shl ebx, 4
mov cl, al
shl cl, 3
sub cl, al
mov al, dh
sub al, cl
and eax, 0xf
add ebx, eax
mov eax, ebx
and eax, 0xfc00
cmp eax, 0xdc00
jne 0x4b1bca
mov ecx, dword [esp + 0x14]
and ebx, 0x3ff
mov edx, dword [esp + 0x20]
and ecx, 0x3ff
add ecx, 0x40
add edi, 6
shl ecx, 0xa
add ecx, ebx
mov ebx, 9
mov eax, ecx
shr eax, 0x12
or al, 0xf0
mov byte [esi + edx], al
mov eax, ecx
shr eax, 0xc
and al, 0x3f
or al, 0x80
mov byte [esi + edx + 1], al
mov eax, ecx
shr eax, 6
and cl, 0x3f
and al, 0x3f
or al, 0x80
mov byte [esi + edx + 2], al
add esi, 3
or cl, 0x80
jmp 0x4b1c28
mov ebx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x20]
mov eax, ebx
shr eax, 0xc
or al, 0xe0
mov byte [esi + edx], al
mov eax, ebx
shr eax, 6
and bl, 0x3f
and al, 0x3f
or al, 0x80
mov byte [esi + edx + 1], al
add esi, 2
or bl, 0x80
mov byte [esi + edx], bl
mov ebx, 9
jmp 0x4b1c2f
cmp al, 0x62
jne 0x4b1c08
mov cl, 8
jmp 0x4b1c28
cmp al, 0x66
jne 0x4b1c10
mov cl, 0xc
jmp 0x4b1c28
cmp al, 0x6e
jne 0x4b1c18
mov cl, 0xa
jmp 0x4b1c28
cmp al, 0x72
jne 0x4b1c20
mov cl, 0xd
jmp 0x4b1c28
cmp al, 0x74
movzx ecx, al
cmove ecx, ebx
mov byte [esi + edx], cl
mov ecx, dword [esp + 0x10]
inc edi
inc esi
cmp edi, dword [esp + 0x28]
jb 0x4b19b5
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x18]
mov eax, fcn.0041de30
mov byte [esi + edx], 0
push eax
push 1
push esi
mov ecx, ebx
call fcn.00445060
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0
call fcn.004b1630
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebx]
mov ecx, 0x9000
test word [eax + 0x10], cx
je 0x4b1c8d
mov ecx, eax
call fcn.0043e690
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, 1
mov word [eax + 0x10], cx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret