Function at 0x49dc50
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xdc
push ebx
mov ebx, ecx
cmp dword [ebx], 0
push esi
push edi
je 0x49df40
mov al, byte [ebx + 8]
cmp al, 0x64
jne 0x49dc81
xor eax, eax
mov ax, word [ebx + 6]
push 1
mov ecx, 0x856ff4
push eax
jmp 0x49dc8e
xor ecx, ecx
mov cx, word [ebx + 6]
push eax
push ecx
mov ecx, 0x856fcc
call fcn.00460190
mov edi, eax
test edi, edi
je 0x49df40
mov edx, dword [0x84f030]
mov esi, dword [0x6f44e0]
push edx
push edi
mov ecx, ebx
call fcn.0049d3b0
mov ecx, dword [0x706454]
mov edx, dword [0x706458]
add eax, 0x20
sub ecx, esi
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], edx
jns 0x49dcde
mov ecx, dword [0x706454]
add ecx, 0x10
mov dword [esp + 0x10], ecx
lea edx, [ecx + esi]
mov ecx, dword [0x6f355c]
cmp edx, ecx
jle 0x49dcf1
sub ecx, esi
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0xc]
test ecx, ecx
jge 0x49dd01
mov dword [esp + 0xc], 0
mov ecx, dword [esp + 0xc]
lea edx, [ecx + eax]
mov ecx, dword [0x6f3560]
cmp edx, ecx
jle 0x49dd18
sub ecx, eax
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xc]
push eax
mov eax, dword [esp + 0x14]
add ecx, 0xa
push esi
push ecx
push eax
mov dword [esp + 0x1c], ecx
push edi
mov ecx, ebx
call fcn.0049daa0
mov bl, byte [ebp + 8]
xor eax, eax
test bl, bl
mov ecx, 0x19
lea edi, [esp + 0x80]
rep stosd dword es:[edi], eax
mov ecx, 0x19
lea edi, [esp + 0x18]
rep stosd dword es:[edi], eax
je 0x49ddb8
movzx ecx, bl
push ecx
lea edx, [esp + 0x84]
push str._d__
push edx
call fcn.005b8b8d
add esp, 0xc
cmp bl, 0xa
jae 0x49dd89
lea edi, [esp + 0x18]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x49dd78
mov ax, word [0x6ab574]
mov word [edi], ax
lea eax, [esp + 0x80]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x49dd92
lea edi, [esp + 0x18]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x49dda0
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov bl, byte [ebp + 0xc]
movzx ecx, bl
push ecx
lea edx, [esp + 0x84]
push 0x6ad498
push edx
call fcn.005b8b8d
add esp, 0xc
cmp bl, 0xa
jae 0x49ddf1
lea edi, [esp + 0x18]
dec edi
mov edi, edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x49dde0
mov ax, word [0x6ab574]
mov word [edi], ax
lea eax, [esp + 0x80]
mov esi, eax
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x49de00
lea edi, [esp + 0x18]
sub eax, esi
dec edi
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x49de10
mov bl, byte [ebp + 0x10]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
movzx ecx, bl
push ecx
lea edx, [esp + 0x84]
push 0x6ad498
push edx
call fcn.005b8b8d
add esp, 0xc
cmp bl, 0xa
jae 0x49de61
lea edi, [esp + 0x18]
dec edi
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x49de50
mov ax, word [0x6ab574]
mov word [edi], ax
lea eax, [esp + 0x80]
mov edx, eax
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x49de70
lea edi, [esp + 0x18]
sub eax, edx
dec edi
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x49de80
mov bl, byte [ebp + 0x14]
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
movzx ecx, bl
push ecx
lea edx, [esp + 0x84]
push 0x6a8770
push edx
call fcn.005b8b8d
add esp, 0xc
cmp bl, 0xa
jae 0x49ded1
lea edi, [esp + 0x18]
dec edi
mov edi, edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x49dec0
mov ax, word [0x6ab574]
mov word [edi], ax
lea eax, [esp + 0x80]
mov esi, eax
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x49dee0
lea edi, [esp + 0x18]
sub eax, esi
dec edi
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x49def0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x21f1c78
call fcn.005312a0
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push ecx
lea ecx, [edx + eax - 0xf]
mov edx, dword [esp + 0x14]
push 0xffffffffffffffff
push ecx
add edx, 0xa
push edx
mov ecx, 0x21f1c78
call fcn.00531500
mov ecx, 0x21f1c78
call fcn.005312b0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10