Function at 0x494f2b
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x30
mov al, byte [edx + 8]
push ebx
push ebp
mov ebp, dword [edx]
mov ebx, ecx
push esi
xor esi, esi
mov dword [esp + 0x20], edx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x24], ebp
mov dword [esp + 0x10], esi
test al, 2
je 0x4955d6
movzx ecx, word [ebx + 0x212]
mov dword [esp + 0x1c], ecx
movzx ecx, word [ebx + 0x214]
mov dword [esp + 0x18], ecx
movzx ecx, word [ebx + 0x216]
mov dword [esp + 0x14], ecx
push edi
mov edi, dword [esp + 0x44]
cmp al, 2
jne 0x495290
cmp byte [edx + 9], 8
jne 0x495099
cmp dword [ebx + 0x168], esi
je 0x495031
cmp dword [ebx + 0x16c], esi
je 0x495031
test ebp, ebp
je 0x495290
mov dword [esp + 0x14], ebp
mov edx, edi
mov ebp, edi
mov ecx, dword [ebx + 0x16c]
movzx eax, byte [edx]
lea edx, [edx + 3]
mov al, byte [eax + ecx]
mov byte [esp + 0x11], al
movzx eax, byte [edx - 2]
mov al, byte [eax + ecx]
mov byte [esp + 0x12], al
mov al, byte [edx - 1]
mov byte [esp + 0x13], al
movzx eax, al
mov cl, byte [eax + ecx]
mov al, byte [esp + 0x11]
mov ah, byte [esp + 0x12]
cmp al, ah
jne 0x494ff3
cmp al, cl
jne 0x494ff3
mov cl, byte [esp + 0x13]
jmp 0x495020
movzx ecx, cl
or esi, 1
imul ecx, dword [esp + 0x18]
movzx eax, ah
imul eax, dword [esp + 0x1c]
add ecx, eax
movzx eax, byte [esp + 0x11]
imul eax, dword [esp + 0x20]
add ecx, eax
mov eax, dword [ebx + 0x168]
shr ecx, 0xf
mov cl, byte [ecx + eax]
sub dword [esp + 0x14], 1
lea eax, [ebp + 1]
mov byte [ebp], cl
mov ebp, eax
jne 0x494fb2
jmp 0x495088
test ebp, ebp
je 0x495290
mov edx, edi
mov ebx, edi
mov al, byte [edx]
lea edx, [edx + 3]
mov ah, byte [edx - 2]
mov cl, byte [edx - 1]
mov byte [esp + 0x13], al
cmp al, ah
jne 0x495054
cmp al, cl
je 0x495078
movzx ecx, cl
or esi, 1
imul ecx, dword [esp + 0x18]
movzx eax, ah
imul eax, dword [esp + 0x1c]
add ecx, eax
movzx eax, byte [esp + 0x13]
imul eax, dword [esp + 0x20]
add ecx, eax
shr ecx, 0xf
mov byte [ebx], cl
lea eax, [ebx + 1]
mov ebx, eax
sub ebp, 1
jne 0x49503d
mov ebx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
mov dword [esp + 0x14], esi
jmp 0x495290
cmp dword [ebx + 0x178], esi
je 0x4951d0
cmp dword [ebx + 0x174], esi
je 0x4951d0
mov esi, edi
test ebp, ebp
je 0x49528c
mov dword [esp + 0x30], ebp
mov ebp, dword [esp + 0x14]
movzx edx, byte [esi]
movzx eax, byte [esi + 1]
mov cl, byte [esi + 5]
shl dx, 8
or dx, ax
movzx eax, dx
movzx edx, byte [esi + 2]
mov dword [esp + 0x38], eax
movzx eax, byte [esi + 3]
shl dx, 8
or dx, ax
movzx eax, dx
mov dword [esp + 0x14], eax
mov al, byte [esi + 4]
add esi, 6
movzx edx, al
shl dx, 8
movzx eax, cl
or dx, ax
mov dword [esp + 0x3c], esi
movzx eax, dx
mov edx, dword [esp + 0x38]
mov dword [esp + 0x34], eax
cmp dx, word [esp + 0x14]
jne 0x495127
cmp dx, ax
jne 0x495127
movzx ecx, dx
jmp 0x4951af
movzx ecx, word [ebx + 0x158]
mov esi, dword [ebx + 0x178]
mov eax, dword [esp + 0x14]
movzx ebx, ax
movzx edx, dx
movzx eax, dl
shr eax, cl
shr edx, 8
mov eax, dword [esi + eax*4]
movzx edx, word [eax + edx*2]
imul edx, dword [esp + 0x20]
movzx eax, bl
shr eax, cl
shr ebx, 8
mov eax, dword [esi + eax*4]
movzx eax, word [eax + ebx*2]
imul eax, dword [esp + 0x1c]
add edx, eax
mov eax, dword [esp + 0x34]
movzx ebx, ax
movzx eax, bl
shr eax, cl
shr ebx, 8
mov eax, dword [esi + eax*4]
mov esi, dword [esp + 0x3c]
movzx eax, word [eax + ebx*2]
imul eax, dword [esp + 0x18]
add edx, eax
mov eax, dword [esp + 0x2c]
shr edx, 0xf
movzx ebx, dx
movzx edx, bl
mov eax, dword [eax + 0x174]
shr edx, cl
shr ebx, 8
or ebp, 1
mov eax, dword [eax + edx*4]
movzx ecx, word [eax + ebx*2]
mov ebx, dword [esp + 0x2c]
mov eax, ecx
shr eax, 8
mov byte [edi], al
mov byte [edi + 1], cl
add edi, 2
sub dword [esp + 0x30], 1
jne 0x4950c3
mov dword [esp + 0x14], ebp
jmp 0x495280
mov esi, edi
test ebp, ebp
je 0x49528c
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x34], ebp
mov ebp, dword [esp + 0x20]
movzx edx, byte [esi]
lea esi, [esi + 6]
movzx eax, byte [esi - 5]
mov cl, byte [esi - 1]
shl dx, 8
or dx, ax
movzx eax, dx
movzx edx, byte [esi - 4]
mov dword [esp + 0x3c], eax
movzx eax, byte [esi - 3]
shl dx, 8
or dx, ax
movzx eax, dx
mov dword [esp + 0x30], eax
mov al, byte [esi - 2]
movzx edx, al
shl dx, 8
movzx eax, cl
or dx, ax
movzx eax, dx
mov edx, dword [esp + 0x3c]
cmp dx, word [esp + 0x30]
jne 0x49523a
cmp dx, ax
je 0x49523d
or ebx, 1
mov ecx, eax
mov eax, dword [esp + 0x30]
imul ecx, dword [esp + 0x18]
movzx eax, ax
imul eax, dword [esp + 0x1c]
add ecx, eax
movzx eax, dx
imul eax, ebp
add ecx, eax
shr ecx, 0xf
movzx ecx, cx
mov eax, ecx
shr eax, 8
mov byte [edi], al
mov byte [edi + 1], cl
add edi, 2
sub dword [esp + 0x34], 1
jne 0x4951e6
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x2c]
mov edx, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
mov edi, dword [esp + 0x44]
mov esi, dword [esp + 0x14]
cmp byte [edx + 8], 6
jne 0x49559f
cmp byte [edx + 9], 8
jne 0x4953ab
cmp dword [ebx + 0x168], 0
je 0x49534b
cmp dword [ebx + 0x16c], 0
je 0x49534b
mov dword [esp + 0x3c], edi
test ebp, ebp
je 0x49559f
mov dword [esp + 0x38], ebp
mov edx, edi
mov ecx, dword [ebx + 0x16c]
movzx eax, byte [edi]
mov al, byte [eax + ecx]
mov byte [esp + 0x11], al
movzx eax, byte [edi + 1]
mov al, byte [eax + ecx]
mov byte [esp + 0x13], al
movzx eax, byte [edi + 2]
mov cl, byte [eax + ecx]
mov al, byte [esp + 0x11]
mov ah, byte [esp + 0x13]
cmp al, ah
jne 0x495302
cmp al, cl
je 0x495305
or esi, 1
movzx ecx, cl
imul ecx, dword [esp + 0x18]
movzx eax, ah
imul eax, dword [esp + 0x1c]
add ecx, eax
movzx eax, byte [esp + 0x11]
imul eax, dword [esp + 0x20]
add ecx, eax
mov eax, dword [ebx + 0x168]
shr ecx, 0xf
mov al, byte [ecx + eax]
mov byte [edx], al
mov al, byte [edi + 3]
add edi, 4
mov byte [edx + 1], al
add edx, 2
sub ebp, 1
jne 0x4952d0
mov dword [esp + 0x14], esi
jmp 0x495597
mov ebx, edi
test ebp, ebp
je 0x49559f
mov edx, ebp
mov al, byte [edi]
mov ah, byte [edi + 1]
mov cl, byte [edi + 2]
mov byte [esp + 0x13], al
cmp al, ah
jne 0x49536b
cmp al, cl
je 0x49536e
or esi, 1
movzx ecx, cl
imul ecx, dword [esp + 0x18]
movzx eax, ah
imul eax, dword [esp + 0x1c]
add ecx, eax
movzx eax, byte [esp + 0x13]
imul eax, dword [esp + 0x20]
add ecx, eax
shr ecx, 0xf
mov byte [ebx], cl
mov al, byte [edi + 3]
add edi, 4
mov byte [ebx + 1], al
add ebx, 2
sub edx, 1
jne 0x495357
mov dword [esp + 0x14], esi
jmp 0x49559b
cmp dword [ebx + 0x178], 0
je 0x4954f0
cmp dword [ebx + 0x174], 0
je 0x4954f0
mov esi, edi
mov dword [esp + 0x30], esi
test ebp, ebp
je 0x49559f
mov dword [esp + 0x38], ebp
mov ebp, dword [esp + 0x14]
movzx edx, byte [edi]
movzx eax, byte [edi + 1]
shl dx, 8
or dx, ax
movzx eax, dx
movzx edx, byte [edi + 2]
mov dword [esp + 0x3c], eax
movzx eax, byte [edi + 3]
shl dx, 8
or dx, ax
movzx eax, dx
movzx edx, byte [edi + 4]
mov dword [esp + 0x34], eax
movzx eax, byte [edi + 5]
shl dx, 8
or dx, ax
movzx eax, dx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x14], eax
cmp dx, word [esp + 0x34]
jne 0x495434
cmp dx, ax
jne 0x495434
movzx ecx, dx
jmp 0x4954bc
movzx ecx, word [ebx + 0x158]
mov esi, dword [ebx + 0x178]
mov eax, dword [esp + 0x34]
movzx ebx, ax
movzx edx, dx
movzx eax, dl
shr eax, cl
shr edx, 8
mov eax, dword [esi + eax*4]
movzx edx, word [eax + edx*2]
imul edx, dword [esp + 0x20]
movzx eax, bl
shr eax, cl
shr ebx, 8
mov eax, dword [esi + eax*4]
movzx eax, word [eax + ebx*2]
imul eax, dword [esp + 0x1c]
add edx, eax
mov eax, dword [esp + 0x14]
movzx ebx, ax
movzx eax, bl
shr eax, cl
shr ebx, 8
mov eax, dword [esi + eax*4]
mov esi, dword [esp + 0x30]
movzx eax, word [eax + ebx*2]
imul eax, dword [esp + 0x18]
add edx, eax
mov eax, dword [esp + 0x2c]
shr edx, 0xf
movzx ebx, dx
movzx edx, bl
mov eax, dword [eax + 0x174]
shr edx, cl
shr ebx, 8
or ebp, 1
mov eax, dword [eax + edx*4]
movzx ecx, word [eax + ebx*2]
mov ebx, dword [esp + 0x2c]
mov eax, ecx
shr eax, 8
mov byte [esi], al
mov byte [esi + 1], cl
mov al, byte [edi + 6]
mov byte [esi + 2], al
mov al, byte [edi + 7]
add edi, 8
mov byte [esi + 3], al
add esi, 4
sub dword [esp + 0x38], 1
mov dword [esp + 0x30], esi
jne 0x4953db
mov dword [esp + 0x14], ebp
jmp 0x495597
mov esi, edi
test ebp, ebp
je 0x49559f
mov edx, dword [esp + 0x14]
mov dword [esp + 0x3c], ebp
movzx ecx, byte [edi]
movzx eax, byte [edi + 1]
shl cx, 8
or cx, ax
movzx eax, byte [edi + 3]
movzx ebx, cx
movzx ecx, byte [edi + 2]
shl cx, 8
or cx, ax
movzx eax, cx
movzx ecx, byte [edi + 4]
mov dword [esp + 0x38], eax
movzx eax, byte [edi + 5]
shl cx, 8
or cx, ax
movzx eax, cx
cmp bx, word [esp + 0x38]
jne 0x495547
cmp bx, ax
je 0x49554a
or edx, 1
mov ecx, eax
mov eax, dword [esp + 0x38]
imul ecx, dword [esp + 0x18]
movzx eax, ax
imul eax, dword [esp + 0x1c]
add ecx, eax
mov eax, ebx
imul eax, dword [esp + 0x20]
add ecx, eax
shr ecx, 0xf
movzx ecx, cx
mov eax, ecx
shr eax, 8
mov byte [esi], al
mov byte [esi + 1], cl
mov al, byte [edi + 6]
mov byte [esi + 2], al
mov al, byte [edi + 7]
add edi, 8
mov byte [esi + 3], al
add esi, 4
sub ebp, 1
jne 0x495502
mov dword [esp + 0x14], edx
mov ebp, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
add byte [edx + 0xa], 0xfe
movzx eax, byte [edx + 0xa]
movzx ecx, byte [edx + 9]
and byte [edx + 8], 0xfd
imul ecx, eax
pop edi
mov byte [edx + 0xb], cl
movzx eax, cl
cmp cl, 8
jb 0x4955c6
shr eax, 3
imul eax, ebp
jmp 0x4955cf
imul eax, ebp
add eax, 7
shr eax, 3
mov esi, dword [esp + 0x10]
mov dword [edx + 4], eax
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x30
ret