Function at 0x4648d0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
mov ecx, dword [ebp + 8]
lea eax, [ecx + 0x1000]
sub esp, 8
cmp eax, 0x2000
jb 0x464d0d
mov eax, dword [ebp + 0xc]
lea edx, [eax + 0x1000]
cmp edx, 0x2000
jb 0x464d0d
cmp byte [eax], 0x7b
push ebx
sete dl
push esi
movzx esi, dl
add eax, esi
mov byte [ebp + 0xb], dl
movzx edx, byte [eax]
mov bl, byte [edx + 0x4a2108]
mov dl, 0xff
mov byte [ebp - 1], bl
cmp bl, dl
jne 0x46492c
pop esi
mov eax, 0xffffffcf
pop ebx
mov esp, ebp
pop ebp
ret
push edi
movzx edi, byte [eax + 1]
mov bl, byte [edi + 0x4a2108]
mov byte [ebp - 2], bl
cmp bl, dl
je 0x464b51
movzx edi, byte [eax + 2]
mov bl, byte [edi + 0x4a2108]
mov byte [ebp - 3], bl
cmp bl, dl
je 0x464b51
movzx edi, byte [eax + 3]
mov bl, byte [edi + 0x4a2108]
mov byte [ebp - 4], bl
cmp bl, dl
je 0x464b51
movzx edi, byte [eax + 4]
mov bl, byte [edi + 0x4a2108]
mov byte [ebp - 5], bl
cmp bl, dl
je 0x464b51
movzx edi, byte [eax + 5]
mov bl, byte [edi + 0x4a2108]
mov byte [ebp - 6], bl
cmp bl, dl
je 0x464b51
movzx edi, byte [eax + 6]
mov bl, byte [edi + 0x4a2108]
mov byte [ebp - 7], bl
cmp bl, dl
je 0x464b51
movzx edi, byte [eax + 7]
mov bl, byte [edi + 0x4a2108]
mov byte [ebp - 8], bl
cmp bl, dl
je 0x464b51
mov bl, 0x2d
cmp byte [eax + 8], bl
jne 0x464b51
movzx edi, byte [eax + 9]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
movzx edi, byte [eax + 0xa]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
movzx edi, byte [eax + 0xb]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
movzx edi, byte [eax + 0xc]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
cmp byte [eax + 0xd], bl
jne 0x464b51
movzx edi, byte [eax + 0xe]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
movzx edi, byte [eax + 0xf]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
movzx edi, byte [eax + 0x10]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
movzx edi, byte [eax + 0x11]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
cmp byte [eax + 0x12], bl
jne 0x464b51
movzx edi, byte [eax + 0x13]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
movzx edi, byte [eax + 0x14]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
movzx edi, byte [eax + 0x15]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
movzx edi, byte [eax + 0x16]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
cmp byte [eax + 0x17], bl
jne 0x464b51
movzx edi, byte [eax + 0x18]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
movzx edi, byte [eax + 0x19]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
movzx edi, byte [eax + 0x1a]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
movzx edi, byte [eax + 0x1b]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
movzx edi, byte [eax + 0x1c]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
movzx edi, byte [eax + 0x1d]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
movzx edi, byte [eax + 0x1e]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
movzx edi, byte [eax + 0x1f]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
movzx edi, byte [eax + 0x20]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
movzx edi, byte [eax + 0x21]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
movzx edi, byte [eax + 0x22]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
movzx edi, byte [eax + 0x23]
cmp byte [edi + 0x4a2108], dl
je 0x464b51
cmp byte [ebp + 0xb], 0
je 0x464b4a
cmp byte [eax + 0x24], 0x7d
jne 0x464b51
cmp byte [esi + eax + 0x24], 0
je 0x464b5d
pop edi
pop esi
mov eax, 0xffffffcf
pop ebx
mov esp, ebp
pop ebp
ret
movzx edx, byte [ebp - 1]
shl edx, 4
movzx esi, byte [ebp - 2]
or edx, esi
shl edx, 4
movzx esi, byte [ebp - 3]
or edx, esi
shl edx, 4
movzx esi, byte [ebp - 4]
or edx, esi
shl edx, 4
movzx esi, byte [ebp - 5]
or edx, esi
shl edx, 4
movzx esi, byte [ebp - 6]
or edx, esi
shl edx, 4
movzx esi, byte [ebp - 7]
or edx, esi
shl edx, 4
movzx esi, byte [ebp - 8]
or edx, esi
mov dword [ecx], edx
movzx edx, byte [eax + 9]
movzx edx, byte [edx + 0x4a2108]
movzx esi, byte [eax + 0xa]
movzx esi, byte [esi + 0x4a2108]
shl dx, 4
or dx, si
movzx esi, byte [eax + 0xb]
movzx esi, byte [esi + 0x4a2108]
shl dx, 4
or dx, si
movzx esi, byte [eax + 0xc]
movzx esi, byte [esi + 0x4a2108]
shl dx, 4
or dx, si
mov word [ecx + 4], dx
movzx edx, byte [eax + 0xe]
movzx edx, byte [edx + 0x4a2108]
movzx esi, byte [eax + 0xf]
movzx esi, byte [esi + 0x4a2108]
shl dx, 4
or dx, si
movzx esi, byte [eax + 0x10]
movzx esi, byte [esi + 0x4a2108]
shl dx, 4
or dx, si
movzx esi, byte [eax + 0x11]
movzx esi, byte [esi + 0x4a2108]
shl dx, 4
or dx, si
mov word [ecx + 6], dx
movzx edx, byte [eax + 0x13]
movzx edx, byte [edx + 0x4a2108]
movzx esi, byte [eax + 0x14]
shl dl, 4
or dl, byte [esi + 0x4a2108]
mov byte [ecx + 8], dl
movzx edx, byte [eax + 0x15]
movzx edx, byte [edx + 0x4a2108]
movzx esi, byte [eax + 0x16]
shl dl, 4
or dl, byte [esi + 0x4a2108]
mov byte [ecx + 9], dl
movzx edx, byte [eax + 0x18]
movzx edx, byte [edx + 0x4a2108]
movzx esi, byte [eax + 0x19]
shl dl, 4
or dl, byte [esi + 0x4a2108]
mov byte [ecx + 0xa], dl
movzx edx, byte [eax + 0x1a]
movzx edx, byte [edx + 0x4a2108]
movzx esi, byte [eax + 0x1b]
shl dl, 4
or dl, byte [esi + 0x4a2108]
mov byte [ecx + 0xb], dl
movzx edx, byte [eax + 0x1c]
movzx edx, byte [edx + 0x4a2108]
movzx esi, byte [eax + 0x1d]
shl dl, 4
or dl, byte [esi + 0x4a2108]
pop edi
mov byte [ecx + 0xc], dl
movzx edx, byte [eax + 0x1e]
movzx edx, byte [edx + 0x4a2108]
movzx esi, byte [eax + 0x1f]
shl dl, 4
or dl, byte [esi + 0x4a2108]
mov byte [ecx + 0xd], dl
movzx edx, byte [eax + 0x20]
movzx edx, byte [edx + 0x4a2108]
movzx esi, byte [eax + 0x21]
shl dl, 4
or dl, byte [esi + 0x4a2108]
pop esi
mov byte [ecx + 0xe], dl
movzx edx, byte [eax + 0x22]
movzx edx, byte [edx + 0x4a2108]
movzx eax, byte [eax + 0x23]
shl dl, 4
or dl, byte [eax + 0x4a2108]
xor eax, eax
mov byte [ecx + 0xf], dl
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xfffffffe
mov esp, ebp
pop ebp
ret