Function at 0x4dec60
Capabilities:
Enumerate pe sections

Disassembly:
push 0xffffffffffffffff
push 0x4faa78
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push ebp
push esi
push edi
mov eax, dword [0x528c24]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [esi + 0x14]
test ecx, ecx
je 0x4def7a
push 0x10015
push 0x52a338
call fcn.004e2660
mov edi, eax
mov ebp, edx
cmp edi, dword [0x50ea98]
jne 0x4decc3
cmp ebp, dword [0x50ea9c]
jne 0x4decc3
push 0xdc
mov ecx, esi
call fcn.004dd4a0
mov eax, dword [esi + 0x14]
mov ecx, dword [eax + 0x3c]
and ecx, 0x70
cmp cl, 0x70
sete bl
test bl, bl
jne 0x4decf5
mov edx, dword [esi + 0x24]
mov dword [edx], edi
mov eax, dword [esi + 0x24]
mov ecx, dword [eax]
mov edx, dword [esi + 0x14]
push 1
add ecx, 4
push 0
push ecx
mov ecx, dword [edx + 4]
call fcn.004c25e0
jmp 0x4ded25
mov ecx, dword [eax + 4]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
mov ecx, dword [esi + 0x14]
sub edi, eax
sbb ebp, edx
add edi, 4
push 0
adc ebp, 0
push ebp
push edi
call fcn.004e1a90
mov ecx, dword [esi + 0x14]
call fcn.004d8310
mov ecx, dword [esi + 0x24]
sub eax, 4
mov dword [ecx], eax
push 0
push 0x12
lea ecx, [esp + 0x20]
call fcn.004d3530
mov edx, dword [esp + 0x1c]
mov ecx, dword [esi + 0x14]
push 1
push 0x12
push edx
mov dword [esp + 0x38], 0
call fcn.004e1ee0
mov eax, dword [esi + 0x24]
mov ecx, dword [esp + 0x1c]
add eax, 4
xor edx, edx
mov word [eax], dx
movzx ecx, word [ecx]
mov word [eax], cx
mov eax, dword [esi + 0x24]
mov ecx, dword [esp + 0x1c]
mov word [eax + 6], dx
movzx ecx, word [ecx + 2]
mov word [eax + 6], cx
mov ecx, dword [esp + 0x1c]
add eax, 6
mov eax, dword [esi + 0x24]
mov word [eax + 8], dx
movzx ecx, word [ecx + 4]
mov word [eax + 8], cx
mov ecx, dword [esp + 0x1c]
add eax, 8
mov eax, dword [esi + 0x24]
mov word [eax + 0xa], dx
movzx ecx, word [ecx + 6]
mov word [eax + 0xa], cx
mov ecx, dword [esp + 0x1c]
add eax, 0xa
mov eax, dword [esi + 0x24]
mov dword [eax + 0xc], edx
mov edx, dword [ecx + 8]
add eax, 0xc
mov dword [eax], edx
mov eax, dword [esi + 0x24]
mov ecx, dword [esp + 0x1c]
add eax, 0x10
mov dword [eax], 0
mov ecx, dword [ecx + 0xc]
mov dword [eax], ecx
mov edx, dword [esp + 0x1c]
mov di, word [edx + 0x10]
lea ecx, [esp + 0x18]
call fcn.004d33a0
test di, di
je 0x4dee02
mov ecx, dword [esi + 0x24]
movzx ebp, di
push 0
push ebp
add ecx, 0x18
call fcn.004d33d0
mov eax, dword [esi + 0x24]
mov eax, dword [eax + 0x1c]
mov ecx, dword [esi + 0x14]
push 1
push ebp
push eax
call fcn.004e1ee0
mov eax, dword [esi + 0x24]
mov ecx, 0xffff
or ebp, 0xffffffff
cmp word [eax + 4], cx
jae 0x4dee31
mov edx, ecx
cmp word [eax + 6], dx
jae 0x4dee31
cmp word [eax + 8], cx
jae 0x4dee31
cmp word [eax + 0xa], dx
jae 0x4dee31
cmp dword [eax + 0xc], ebp
jae 0x4dee31
cmp dword [eax + 0x10], ebp
jb 0x4dee94
test bl, bl
jne 0x4dee7b
cmp dword [eax], 0x14
jb 0x4dee94
mov edx, dword [eax]
mov ecx, dword [esi + 0x14]
mov ecx, dword [ecx + 4]
xor eax, eax
add edx, 0xffffffec
push 1
adc eax, ebp
push eax
push edx
call fcn.004c25e0
mov ecx, dword [esi + 0x14]
push 1
push 4
lea edx, [esp + 0x1c]
push edx
call fcn.004e1ee0
mov eax, dword [esp + 0x14]
cmp eax, dword [0x52a33c]
jne 0x4dee94
push 0xdd
mov ecx, esi
call fcn.004dd4a0
movzx ecx, di
mov eax, 0xffffffd6
sub eax, ecx
mov ecx, dword [esi + 0x14]
cdq
push 0
push edx
push eax
call fcn.004e1a90
jmp 0x4dee52
mov ecx, dword [esi + 8]
shr ecx, 9
not cl
test cl, 1
je 0x4deed0
mov eax, dword [esi + 0x24]
movzx ecx, word [eax + 4]
test cx, cx
jne 0x4deed0
mov edx, eax
mov di, word [edx + 0xa]
cmp di, word [edx + 8]
jne 0x4deebf
cmp word [eax + 6], cx
je 0x4deed0
test cx, cx
jne 0x4deed0
push 0xc9
mov ecx, esi
call fcn.004dd4a0
mov edx, dword [esi + 0x24]
movzx eax, word [edx + 4]
mov ecx, dword [esi + 0x14]
push eax
call fcn.004e0cb0
mov ecx, dword [esi + 0x14]
mov edx, dword [ecx + 0x3c]
shr edx, 4
test dl, 1
jne 0x4def07
mov eax, dword [esi + 0x24]
mov edx, dword [eax + 0x10]
add edx, dword [eax + 0xc]
cmp dword [eax], edx
jae 0x4def07
push 0xc9
mov ecx, esi
call fcn.004dd4a0
cmp dword [ecx + 0x28], 0
jne 0x4def22
mov eax, dword [esi + 0x24]
cmp word [eax + 4], 0
jne 0x4def22
mov edx, dword [eax]
sub edx, dword [eax + 0x10]
sub edx, dword [eax + 0xc]
mov dword [ecx + 0x28], edx
mov eax, dword [esi + 0x24]
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x4def32
cmp word [eax + 0xa], cx
jne 0x4def3d
cmp word [eax + 0xa], 0
jne 0x4def49
test ecx, ecx
je 0x4def49
push 0xc9
mov ecx, esi
call fcn.004dd4a0
mov byte [eax + 0x14], 1
mov ecx, dword [esi + 0x24]
movzx edx, word [ecx + 6]
mov ecx, dword [esi + 0x14]
push edx
call fcn.004e1540
mov eax, dword [esi + 0x24]
cmp dword [eax + 0xc], 0
je 0x4def6d
mov ecx, esi
call fcn.004de650
lea ecx, [esp + 0x18]
mov dword [esp + 0x2c], ebp
call fcn.004d3560
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret