Function at 0x481740
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x424
mov eax, dword [esp + 0x428]
push ebx
push ebp
mov ebp, ecx
push 0x4fd120
push eax
mov dword [esp + 0x2c], ebp
call fcn.004ab3f4
mov ebx, eax
add esp, 8
test ebx, ebx
jne 0x481776
pop ebp
xor al, al
pop ebx
add esp, 0x424
ret 4
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
push esi
push edi
mov di, word [ebp + 0x16]
mov dword [esp + 0x1c], ecx
cmp di, 0x18
mov dword [esp + 0x28], edx
mov dword [esp + 0x24], edi
je 0x4817a2
cmp di, 0x20
mov dword [esp + 0x14], 1
jne 0x4817aa
mov dword [esp + 0x14], 3
mov ecx, ebp
call fcn.0047e160
and edi, 0xffff
mov ecx, eax
mov dword [esp + 0x20], edi
dec edi
cmp edi, 0x17
mov dword [esp + 0x18], edi
ja case.0x4817d3.4
xor eax, eax
mov al, byte [edi + 0x481c58]
jmp dword [eax*4 + 0x481c48]
xor eax, eax
mov al, byte [ecx + 5]
lea edx, [eax*8]
sub edx, eax
lea edx, [eax + edx*4]
lea esi, [eax + edx*2]
xor eax, eax
mov al, byte [ecx + 6]
imul eax, eax, 0x1e
add esi, eax
xor eax, eax
mov al, byte [ecx + 4]
lea edx, [eax + eax*4]
lea eax, [eax + edx*2]
add esi, eax
mov eax, 0x51eb851f
imul esi
mov esi, edx
xor eax, eax
mov al, byte [ecx + 1]
sar esi, 5
mov edx, esi
shr edx, 0x1f
add esi, edx
lea edx, [eax*8]
sub edx, eax
lea edx, [eax + edx*4]
lea edi, [eax + edx*2]
xor eax, eax
mov al, byte [ecx + 2]
imul eax, eax, 0x1e
add edi, eax
xor eax, eax
mov al, byte [ecx]
lea ecx, [eax + eax*4]
lea edx, [eax + ecx*2]
mov eax, 0x51eb851f
add edi, edx
xor ecx, ecx
imul edi
sar edx, 5
mov eax, edx
mov edi, dword [esp + 0x18]
shr eax, 0x1f
add edx, eax
cmp edx, esi
setl cl
mov dword [esp + 0x10], ecx
jmp case.0x4817d3.4
mov edx, dword [ebp + 0x28]
xor esi, esi
test edx, edx
mov dword [esp + 0x10], 1
jbe case.0x4817d3.4
mov al, byte [ecx + 2]
mov edi, eax
and edi, 0xff
cmp edi, esi
jne 0x48189b
cmp al, byte [ecx + 1]
jne 0x48189b
cmp al, byte [ecx]
jne 0x48189b
add ecx, 4
inc esi
cmp esi, edx
jb 0x481875
mov edi, dword [esp + 0x18]
jmp case.0x4817d3.4
mov edi, dword [esp + 0x18]
mov dword [esp + 0x10], 3
jmp case.0x4817d3.4
mov dword [esp + 0x10], 2
mov ecx, ebp
call fcn.0047e160
test eax, eax
je 0x481916
mov ecx, ebp
call fcn.0047dff0
mov ecx, ebp
mov edi, eax
call fcn.0047e160
mov edx, edi
mov esi, eax
lea edi, [esp + 0x34]
mov ecx, edx
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [ebp + 0x28]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor edi, edi
test eax, eax
jbe 0x481912
xor eax, eax
mov dl, byte [esp + eax*4 + 0x36]
mov cl, byte [esp + eax*4 + 0x34]
lea esi, [esp + eax*4 + 0x34]
lea eax, [esp + eax*4 + 0x36]
inc edi
mov byte [esi], dl
mov byte [eax], cl
mov ecx, dword [ebp + 0x28]
mov eax, edi
and eax, 0xffff
cmp eax, ecx
jb 0x4818ef
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x28]
push eax
push 0x100
push ebx
call fcn.004b06f8
mov ecx, dword [esp + 0x28]
add esp, 0xc
push ecx
push 0x101
push ebx
call fcn.004b06f8
mov esi, dword [esp + 0x20]
add esp, 0xc
and esi, 0xffff
push esi
push 0x115
push ebx
call fcn.004b06f8
add esp, 0xc
cmp word [esp + 0x24], 0x20
mov eax, 0x18
je 0x481966
mov eax, dword [esp + 0x20]
cdq
idiv esi
push eax
push 0x102
push ebx
call fcn.004b06f8
mov esi, dword [esp + 0x1c]
add esp, 0xc
mov edx, esi
and edx, 0xffff
push edx
push 0x106
push ebx
call fcn.004b06f8
add esp, 0xc
push 1
push 0x11c
push ebx
call fcn.004b06f8
add esp, 0xc
push 1
push 0x112
push ebx
call fcn.004b06f8
add esp, 0xc
push 1
push 0x116
push ebx
call fcn.004b06f8
add esp, 0xc
push 2
push 0x128
push ebx
call fcn.004b06f8
add esp, 0xc
push 0x40520000
push 0
push 0x11a
push ebx
call fcn.004b06f8
add esp, 0x10
push 0x40520000
push 0
push 0x11b
push ebx
call fcn.004b06f8
add esp, 0x10
push 0
push 0xfe
push ebx
call fcn.004b06f8
add esp, 0xc
cmp si, 3
jne 0x481b05
push 0x600
call fcn.004ab40a
lea ecx, [eax + 0x200]
add esp, 4
mov dword [esp + 0x10], eax
lea esi, [esp + 0x431]
lea ebp, [ecx + 0x200]
lea edi, [ecx + 0x1fe]
mov dword [esp + 0x24], ebp
sub ebp, ecx
sub eax, ecx
mov dword [esp + 0x14], 0x100
mov dword [esp + 0x20], eax
xor eax, eax
sub edi, 2
mov al, byte [esi + 1]
sub esi, 4
mov ecx, eax
shl ecx, 0x10
sub ecx, eax
mov eax, 0x80808081
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
xor eax, eax
mov al, byte [esi + 4]
mov word [edi + ebp + 2], dx
mov ecx, eax
shl ecx, 0x10
sub ecx, eax
mov eax, 0x80808081
imul ecx
add edx, ecx
xor eax, eax
mov al, byte [esi + 3]
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov ecx, eax
shl ecx, 0x10
sub ecx, eax
mov eax, 0x80808081
mov word [edi + 2], dx
imul ecx
add edx, ecx
mov ecx, dword [esp + 0x20]
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, dword [esp + 0x14]
mov word [ecx + edi + 2], dx
dec eax
mov dword [esp + 0x14], eax
jne 0x481a55
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x24]
mov esi, dword [esp + 0x10]
add eax, 0x200
push edx
push eax
push esi
push 0x140
push ebx
call fcn.004b06f8
push esi
call fcn.004ab416
mov ebp, dword [esp + 0x44]
mov edi, dword [esp + 0x30]
add esp, 0x18
cmp edi, 0x1f
ja case.0x481b12.2
xor ecx, ecx
mov cl, byte [edi + 0x481c7c]
jmp dword [ecx*4 + 0x481c70]
mov eax, 3
jmp 0x481b2c
mov eax, 0x8005
jmp 0x481b2c
mov eax, 1
and eax, 0xffff
push eax
push 0x103
push ebx
call fcn.004b06f8
add esp, 0xc
cmp edi, 0x1f
ja case.0x481b51.2
xor edx, edx
mov dl, byte [edi + 0x481ca8]
jmp dword [edx*4 + 0x481c9c]
mov edi, dword [esp + 0x1c]
xor esi, esi
test edi, edi
jbe case.0x481b51.2
dec edi
mov eax, edi
mov ecx, dword [ebp + 0x34]
imul eax, dword [ebp + 0x30]
push 0
add eax, ecx
push esi
push eax
push ebx
call fcn.004b2097
mov eax, dword [esp + 0x2c]
add esp, 0x10
inc esi
dec edi
cmp esi, eax
jb 0x481b67
jmp case.0x481b51.2
mov ecx, dword [ebp + 0x30]
push ecx
call dword [sym.imp.MSVCRT.dll_malloc]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x20]
add esp, 4
mov dword [esp + 0x10], 0
test eax, eax
jbe 0x481c20
dec eax
mov dword [esp + 0x18], eax
mov ecx, dword [ebp + 0x30]
mov esi, dword [esp + 0x18]
imul esi, ecx
mov edx, dword [ebp + 0x34]
mov edi, dword [esp + 0x14]
add esi, edx
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x28]
mov edi, dword [esp + 0x14]
test ecx, ecx
mov eax, edi
jbe 0x481bf5
mov esi, ecx
mov cl, byte [eax]
mov dl, byte [eax + 2]
mov byte [eax], dl
mov byte [eax + 2], cl
add eax, 3
dec esi
jne 0x481be5
mov eax, dword [esp + 0x10]
push 0
push eax
push edi
push ebx
call fcn.004b2097
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
add esp, 0x10
inc eax
dec edx
cmp eax, ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], edx
jb 0x481bb4
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
push ebx
call fcn.004aa8e0
add esp, 4
mov al, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x424
ret 4
inc esi
add al, 0x56
push esi
push esi
call dword [eax]
mov edi, eax
add esp, 0xc
mov dword [esi + 0x150], edi
mov ebx, 4
mov dword [edi], fcn.00497820
mov eax, dword [esi + 0x28]
dec eax
cmp eax, ebx
ja case.default.0x4a1ebf
jmp dword [eax*4 + 0x4a20a0]
cmp dword [esi + 0x24], 1
je 0x4a1f10
jmp 0x4a1eff
cmp dword [esi + 0x24], 3
je 0x4a1f10
mov eax, dword [esi]
push esi
mov dword [eax + 0x14], 9
mov ecx, dword [esi]
call dword [ecx]
jmp 0x4a1f0d
cmp dword [esi + 0x24], ebx
je 0x4a1f10
mov edx, dword [esi]
push esi
mov dword [edx + 0x14], 9
mov eax, dword [esi]
call dword [eax]
jmp 0x4a1f0d
cmp dword [esi + 0x24], 1
jge 0x4a1f10
mov ecx, dword [esi]
push esi
mov dword [ecx + 0x14], 9
mov edx, dword [esi]
call dword [edx]
add esp, 4
mov eax, dword [esi + 0x40]
lea ecx, [eax - 1]
cmp ecx, ebx
ja case.default.0x4a1f1e
jmp dword [ecx*4 + 0x4a20b4]
cmp dword [esi + 0x3c], 1
je 0x4a1f3c
mov eax, dword [esi]
push esi
mov dword [eax + 0x14], 0xa
mov ecx, dword [esi]
call dword [ecx]
add esp, 4
mov eax, dword [esi + 0x28]
cmp eax, 1
jne 0x4a1f4f
mov dword [edi + 4], 0x4a2500
pop edi
pop esi
pop ebx
ret
cmp eax, 2
jne 0x4a1f65
mov dword [edi], 0x4a20d0
mov dword [edi + 4], 0x4a22e0
pop edi
pop esi
pop ebx
ret
cmp eax, 3
jne 0x4a2018
mov dword [edi + 4], 0x4a2500
pop edi
pop esi
pop ebx
ret
cmp dword [esi + 0x3c], 3
je 0x4a1f90
mov ecx, dword [esi]
push esi
mov dword [ecx + 0x14], 0xa
mov edx, dword [esi]
call dword [edx]
add esp, 4
cmp dword [esi + 0x28], 2
je 0x4a2095
mov eax, dword [esi]
push esi
mov dword [eax + 0x14], 0x1b
mov ecx, dword [esi]
call dword [ecx]
add esp, 4
pop edi
pop esi
pop ebx
ret
cmp dword [esi + 0x3c], 3
je 0x4a1fc6
mov edx, dword [esi]
push esi
mov dword [edx + 0x14], 0xa
mov eax, dword [esi]
call dword [eax]
add esp, 4
mov eax, dword [esi + 0x28]
cmp eax, 2
jne 0x4a1fdf
mov dword [edi], 0x4a20d0
mov dword [edi + 4], 0x4a21b0
pop edi
pop esi
pop ebx
ret
cmp eax, 3
je 0x4a2095
mov ecx, dword [esi]
push esi
mov dword [ecx + 0x14], 0x1b
mov edx, dword [esi]
call dword [edx]
add esp, 4
pop edi
pop esi
pop ebx
ret
cmp dword [esi + 0x3c], ebx
je 0x4a2013
mov eax, dword [esi]
push esi
mov dword [eax + 0x14], 0xa
mov ecx, dword [esi]
call dword [ecx]
add esp, 4
cmp dword [esi + 0x28], ebx
je 0x4a2095
mov edx, dword [esi]
push esi
mov dword [edx + 0x14], 0x1b
mov eax, dword [esi]
call dword [eax]
add esp, 4
pop edi
pop esi
pop ebx
ret
cmp dword [esi + 0x3c], ebx
je 0x4a2043
mov ecx, dword [esi]
push esi
mov dword [ecx + 0x14], 0xa
mov edx, dword [esi]
call dword [edx]
add esp, 4
mov eax, dword [esi + 0x28]
cmp eax, ebx
jne 0x4a205b
mov dword [edi], 0x4a20d0
mov dword [edi + 4], 0x4a2390
pop edi
pop esi
pop ebx
ret
cmp eax, 5
je 0x4a2095
mov eax, dword [esi]
push esi
mov dword [eax + 0x14], 0x1b
mov ecx, dword [esi]
call dword [ecx]
add esp, 4
pop edi
pop esi
pop ebx
ret
cmp eax, dword [esi + 0x28]
jne 0x4a2084
mov edx, dword [esi + 0x3c]
mov eax, dword [esi + 0x24]
cmp edx, eax
je 0x4a2095
mov eax, dword [esi]
push esi
mov dword [eax + 0x14], 0x1b
mov ecx, dword [esi]
call dword [ecx]
add esp, 4
mov dword [edi + 4], 0x4a2570
pop edi
pop esi
pop ebx
ret