Function at 0x64d130
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x3c
lea eax, [esp + 0x40]
push ebx
push ebp
mov ebp, dword [esp + 0x48]
push esi
push edi
xor edi, edi
push eax
push edi
push 1
push ebp
call fcn.0064fb10
add esp, 0x10
test eax, eax
je 0x64d7fe
mov eax, dword [esp + 0x50]
cmp eax, 0x31000
jb 0x64d7db
cmp eax, 0x34003
ja 0x64d7db
cmp eax, 0x34001
push 0x10
jae 0x64d1c5
lea ecx, [esp + 0x28]
push ecx
push ebp
call fcn.00645500
add esp, 0xc
cmp eax, 0x10
jne 0x64d7fe
lea edx, [esp + 0x18]
push 0xc
push edx
push ebp
call fcn.00645500
add esp, 0xc
cmp eax, 0xc
jne 0x64d7fe
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.0064fc20
lea ecx, [esp + 0x20]
push 0xc
push ecx
call fcn.0064fc30
add esp, 0x10
jmp 0x64d1dc
lea edx, [esp + 0x28]
push edx
push ebp
call fcn.00645500
add esp, 0xc
cmp eax, 0x10
jne 0x64d7fe
lea eax, [esp + 0x24]
push 0x10
push eax
call fcn.0064fc20
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x34]
push ecx
push edx
push eax
call fcn.0064ce00
mov esi, eax
add esp, 0x14
cmp esi, edi
je 0x64d7fe
mov eax, dword [esp + 0x30]
cmp eax, 1
jle 0x64d28d
dec eax
push eax
push esi
call fcn.0064ca80
add esp, 8
test eax, eax
jge 0x64d28d
dec word [esi + 0xe]
cmp word [esi + 0xe], di
jg 0x64d7fe
mov eax, dword [esi + 0x58]
cmp eax, edi
je 0x64d23f
push eax
call fcn.00669290
add esp, 4
mov eax, dword [esi + 0x54]
inc word [esi + 0xe]
or word [esi + 0xc], 0xfff
cmp eax, edi
je 0x64d25c
push eax
call fcn.0066e150
add esp, 4
mov dword [esi + 0x54], edi
push esi
push 0x6ddb40
call fcn.00669a70
mov eax, dword [esi + 0x5c]
add esp, 8
cmp eax, edi
je 0x64d284
mov ecx, dword [0x7870c8]
push eax
call dword [ecx + 0x134]
add esp, 4
mov dword [esi + 0x5c], edi
lea edx, [esi + 0x20]
push edx
jmp 0x64d729
test dword [esi + 8], 0x1000000
jne 0x64d4af
mov eax, dword [esi + 0x14]
test eax, eax
je 0x64d4af
test byte [esp + 0x24], 8
je 0x64d328
mov ecx, dword [esi + 0x30]
lea edi, [eax*4]
push edi
push ecx
push ebp
call fcn.00645500
add esp, 0xc
cmp eax, edi
je 0x64d328
dec word [esi + 0xe]
cmp word [esi + 0xe], 0
jg 0x64d7fe
mov eax, dword [esi + 0x58]
test eax, eax
je 0x64d2e4
push eax
call fcn.00669290
add esp, 4
inc word [esi + 0xe]
push 0xfff
push esi
call fcn.0064cd20
push esi
push 0x6ddb40
call fcn.00669a70
mov eax, dword [esi + 0x5c]
add esp, 0x10
test eax, eax
je 0x64d31f
mov edx, dword [0x7870c8]
push eax
call dword [edx + 0x134]
add esp, 4
mov dword [esi + 0x5c], 0
lea eax, [esi + 0x20]
push eax
jmp 0x64d64c
mov ecx, dword [esi + 0x1c]
test ecx, ecx
jle 0x64d368
mov eax, dword [esi + 0x14]
xor edi, edi
shl eax, 3
test ecx, ecx
mov dword [esp + 0x10], eax
jle 0x64d368
lea ebx, [esi + 0x34]
jmp 0x64d348
mov eax, dword [esp + 0x10]
mov edx, dword [ebx]
push eax
push edx
push ebp
call fcn.0064fd30
add esp, 0xc
test eax, eax
je 0x64d3f7
mov eax, dword [esi + 0x1c]
inc edi
add ebx, 4
cmp edi, eax
jl 0x64d344
mov eax, dword [esi + 0x10]
test eax, eax
mov dword [esp + 0x10], eax
je 0x64d4af
mov edi, dword [esi + 0x2c]
lea ebx, [eax*8]
push ebx
push edi
push ebp
call fcn.00645500
add esp, 0xc
cmp eax, ebx
je 0x64d477
dec word [esi + 0xe]
cmp word [esi + 0xe], 0
jg 0x64d7fe
mov eax, dword [esi + 0x58]
test eax, eax
je 0x64d3b3
push eax
call fcn.00669290
add esp, 4
inc word [esi + 0xe]
push 0xfff
push esi
call fcn.0064cd20
push esi
push 0x6ddb40
call fcn.00669a70
mov eax, dword [esi + 0x5c]
add esp, 0x10
test eax, eax
je 0x64d3ee
mov ecx, dword [0x7870c8]
push eax
call dword [ecx + 0x134]
add esp, 4
mov dword [esi + 0x5c], 0
lea edx, [esi + 0x20]
push edx
jmp 0x64d729
dec word [esi + 0xe]
cmp word [esi + 0xe], 0
jg 0x64d7fe
mov eax, dword [esi + 0x58]
test eax, eax
je 0x64d416
push eax
call fcn.00669290
add esp, 4
inc word [esi + 0xe]
push 0xfff
push esi
call fcn.0064cd20
push esi
push 0x6ddb40
call fcn.00669a70
mov eax, dword [esi + 0x5c]
add esp, 0x10
test eax, eax
je 0x64d450
push eax
mov eax, dword [0x7870c8]
call dword [eax + 0x134]
add esp, 4
mov dword [esi + 0x5c], 0
lea ecx, [esi + 0x20]
push ecx
call fcn.0066da00
dec word [esi + 0xe]
mov edx, dword [0x7870c8]
push esi
call dword [edx + 0x134]
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret
push ebx
push edi
call fcn.0064fc20
mov eax, dword [esp + 0x18]
add esp, 8
test eax, eax
je 0x64d4af
mov ecx, eax
mov ax, word [edi]
mov dx, word [edi + 2]
mov word [edi], dx
mov dx, word [edi + 6]
mov word [edi + 2], ax
mov ax, word [edi + 4]
mov word [edi + 4], dx
mov word [edi + 6], ax
add edi, 8
dec ecx
jne 0x64d48b
mov eax, dword [esi + 0x18]
xor ebx, ebx
cmp eax, ebx
mov dword [esp + 0x10], ebx
jle 0x64d59f
mov edi, dword [esi + 0x5c]
lea eax, [esp + 0x34]
push 0x18
push eax
push ebp
add edi, ebx
call fcn.00645500
add esp, 0xc
cmp eax, 0x18
jne 0x64d394
lea ecx, [esp + 0x34]
push 0xc
push ecx
call fcn.0064fc50
lea edx, [esp + 0x48]
push 4
push edx
call fcn.0064fc50
lea eax, [esp + 0x44]
push 0x18
push eax
call fcn.0064fc20
mov edx, dword [esp + 0x4c]
lea ecx, [edi + 4]
add esp, 0x18
mov dword [ecx], edx
mov eax, dword [esp + 0x38]
mov dword [ecx + 4], eax
mov edx, dword [esp + 0x3c]
mov dword [ecx + 8], edx
mov eax, dword [esp + 0x40]
mov dword [ecx + 0xc], eax
mov eax, dword [esp + 0x44]
test eax, eax
je 0x64d55f
mov eax, dword [esp + 0x48]
test eax, eax
mov eax, dword [esi + 0x14]
je 0x64d543
mov edx, dword [edi + 0x14]
lea ecx, [eax + eax*2]
shl ecx, 3
push ecx
push edx
jmp 0x64d575
mov ecx, dword [edi + 0x14]
lea eax, [eax + eax*2]
shl eax, 2
push eax
push ecx
push ebp
call fcn.0064fd30
add esp, 0xc
test eax, eax
je 0x64d394
mov eax, dword [esp + 0x48]
test eax, eax
je 0x64d586
mov eax, dword [esi + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [edi + 0x18]
shl edx, 2
push edx
push eax
push ebp
call fcn.0064fd30
add esp, 0xc
test eax, eax
je 0x64d394
mov eax, dword [esp + 0x10]
mov ecx, dword [esi + 0x18]
inc eax
add ebx, 0x1c
cmp eax, ecx
mov dword [esp + 0x10], eax
jl 0x64d4c0
xor ebx, ebx
lea ecx, [esp + 0x50]
push ecx
push ebx
push 8
push ebp
call fcn.0064fb10
add esp, 0x10
test eax, eax
je 0x64d7fe
mov eax, dword [esp + 0x50]
cmp eax, 0x31000
jb 0x64d755
cmp eax, 0x34003
ja 0x64d755
cmp eax, 0x34001
jae 0x64d5e6
lea edx, [esp + 0x18]
push edx
call fcn.00655710
add esp, 4
lea edi, [esi + 0x20]
push edi
push ebp
call fcn.0066db70
add esp, 8
test eax, eax
jne 0x64d66f
dec word [esi + 0xe]
cmp word [esi + 0xe], bx
jg 0x64d7fe
mov eax, dword [esi + 0x58]
cmp eax, ebx
je 0x64d615
push eax
call fcn.00669290
add esp, 4
inc word [esi + 0xe]
push 0xfff
push esi
call fcn.0064cd20
push esi
push 0x6ddb40
call fcn.00669a70
mov eax, dword [esi + 0x5c]
add esp, 0x10
cmp eax, ebx
je 0x64d64b
push eax
mov eax, dword [0x7870c8]
call dword [eax + 0x134]
add esp, 4
mov dword [esi + 0x5c], ebx
push edi
call fcn.0066da00
dec word [esi + 0xe]
mov ecx, dword [0x7870c8]
push esi
call dword [ecx + 0x134]
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret
cmp dword [esp + 0x50], 0x34001
jae 0x64d682
push ebx
call fcn.00655710
add esp, 4
push esi
push ebp
push 0x6ddb40
call fcn.00669c90
add esp, 0xc
test eax, eax
jne 0x64d6c6
dec word [esi + 0xe]
cmp word [esi + 0xe], bx
jg 0x64d7fe
mov eax, dword [esi + 0x58]
cmp eax, ebx
je 0x64d6b3
push eax
call fcn.00669290
add esp, 4
push esi
call fcn.0064d810
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret
push esi
call fcn.0064cd50
add esp, 4
test eax, eax
jne 0x64d74b
dec word [esi + 0xe]
cmp word [esi + 0xe], bx
jg 0x64d7fe
mov eax, dword [esi + 0x58]
cmp eax, ebx
je 0x64d6f1
push eax
call fcn.00669290
add esp, 4
inc word [esi + 0xe]
push 0xfff
push esi
call fcn.0064cd20
push esi
push 0x6ddb40
call fcn.00669a70
mov eax, dword [esi + 0x5c]
add esp, 0x10
cmp eax, ebx
je 0x64d728
mov edx, dword [0x7870c8]
push eax
call dword [edx + 0x134]
add esp, 4
mov dword [esi + 0x5c], ebx
push edi
call fcn.0066da00
dec word [esi + 0xe]
mov eax, dword [0x7870c8]
push esi
call dword [eax + 0x134]
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret
dec word [esi + 0xe]
cmp word [esi + 0xe], bx
jg 0x64d7c2
mov eax, dword [esi + 0x58]
cmp eax, ebx
je 0x64d76f
push eax
call fcn.00669290
add esp, 4
inc word [esi + 0xe]
push 0xfff
push esi
call fcn.0064cd20
push esi
push 0x6ddb40
call fcn.00669a70
mov eax, dword [esi + 0x5c]
add esp, 0x10
cmp eax, ebx
je 0x64d7a6
mov ecx, dword [0x7870c8]
push eax
call dword [ecx + 0x134]
add esp, 4
mov dword [esi + 0x5c], ebx
lea edx, [esi + 0x20]
push edx
call fcn.0066da00
dec word [esi + 0xe]
mov eax, dword [0x7870c8]
push esi
call dword [eax + 0x134]
add esp, 8
push 0x80000004
mov dword [esp + 0x14], 2
call fcn.00669be0
lea ecx, [esp + 0x14]
push ecx
jmp 0x64d7f2
push 0x80000004
mov dword [esp + 0x14], 2
call fcn.00669be0
lea edx, [esp + 0x14]
push edx
mov dword [esp + 0x1c], eax
call fcn.00669b30
add esp, 8
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x3c
ret