Function at 0x4d30d0
Capabilities:
Enumerate pe sections

Disassembly:
push 0xffffffffffffffff
push 0x5f0490
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x40
mov eax, dword [esp + 0x64]
mov dword [esp], ecx
test eax, eax
je 0x4d30fa
mov dword [eax], 0
push ebx
push ebp
push esi
lea eax, [esp + 0x14]
push edi
lea edx, [esp + 0x14]
push eax
push edx
push 0
lea eax, [esp + 0x28]
push 0
push eax
lea edx, [esp + 0x74]
lea eax, [esp + 0x38]
push edx
mov edx, dword [esp + 0x78]
push eax
push 0
push edx
call fcn.0049cec0
mov ebx, eax
mov eax, dword [esp + 0x24]
test eax, eax
mov dword [esp + 0x20], ebx
jne 0x4d31ef
mov eax, dword [esp + 0x64]
push eax
push ebx
call fcn.004b6e10
mov ebp, eax
push ebp
call fcn.004ca860
mov edi, dword [esp + 0x74]
mov esi, eax
add esp, 0xc
cmp esi, 1
je 0x4d315f
cmp esi, 8
jne 0x4d316d
mov ecx, edi
call fcn.005b8ca8
mov ecx, edi
call fcn.005b8c5c
mov ecx, dword [esp + 0x68]
mov edi, dword [ecx]
lea ecx, [esp + 0x28]
mov dword [esp + 0x64], edi
call fcn.004918b0
cmp esi, 8
mov dword [esp + 0x58], 0
jne 0x4d319a
mov edx, dword [esp + 0x60]
mov eax, dword [edx + 0x44]
test eax, eax
jne 0x4d31fa
jmp 0x4d31d6
cmp esi, 1
jne 0x4d31b9
cmp byte [edi], 0
je 0x4d31f6
push 0
push 0
push 0
push 0
push 0
push edi
call fcn.00503860
add esp, 0x18
jmp 0x4d31d2
cmp esi, 6
jne 0x4d31f6
mov eax, dword [esp + 0x68]
lea edx, [esp + 0x28]
push 1
push edx
push eax
call fcn.004ea910
add esp, 0xc
test eax, eax
jne 0x4d31f6
lea ecx, [esp + 0x28]
mov dword [esp + 0x58], 0xffffffff
mov dword [esp + 0x28], 0x5f7940
call fcn.00491ab0
xor eax, eax
jmp 0x4d391a
mov edx, dword [esp + 0x60]
mov esi, dword [esp + 0x6c]
test esi, esi
je 0x4d339f
mov eax, dword [esi + 0xc]
test eax, eax
je 0x4d339f
mov ecx, 0x676258
call fcn.0050c100
mov edi, eax
test edi, edi
je 0x4d3358
mov ecx, dword [edi + 2]
cmp word [edi + ecx + 6], 0xd2
lea eax, [edi + ecx + 6]
jne 0x4d3358
mov edx, dword [esi]
mov ecx, dword [eax + 6]
add eax, 2
cmp edx, ecx
jne 0x4d3358
mov ecx, dword [esi + 4]
mov edx, dword [eax + 8]
cmp ecx, edx
jne 0x4d3358
mov edx, dword [esi + 8]
mov ecx, dword [eax + 0xc]
cmp edx, ecx
jne 0x4d3358
mov ecx, dword [esi + 0xc]
mov edx, dword [eax + 0x10]
cmp ecx, edx
jne 0x4d3358
dec ecx
je 0x4d32b0
dec ecx
je 0x4d32a3
dec ecx
jne 0x4d3358
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x18]
add ecx, edx
xor ebx, ebx
cmp dword [esi + 0x10], ecx
sete bl
mov ecx, ebx
test ecx, ecx
je 0x4d3354
mov ebx, dword [esp + 0x20]
mov dword [esi + 0x10], edx
jmp 0x4d32c2
mov edx, dword [esi + 0x10]
xor ecx, ecx
cmp edx, dword [eax + 0x14]
sete cl
jmp 0x4d32c2
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0x10]
add ecx, edx
xor edx, edx
cmp ecx, dword [eax + 0x14]
sete dl
mov ecx, edx
test ecx, ecx
je 0x4d3358
mov eax, dword [eax + 0x18]
mov ecx, dword [esi + 0x14]
add ecx, eax
mov dword [esi + 0x14], ecx
lea ecx, [esp + 0x3c]
call fcn.004918b0
mov ecx, dword [edi + 2]
add edi, 6
push ecx
push edi
lea ecx, [esp + 0x44]
mov byte [esp + 0x60], 1
call fcn.00492170
mov ecx, 0x676258
call fcn.0050bf00
push 1
push 1
mov ecx, 0x6756e0
call fcn.004ae040
lea edx, [esp + 0x3c]
mov ecx, 0x676258
push edx
call fcn.0050be60
cmp ebx, 0xd
jne 0x4d333c
mov eax, dword [esp + 0x60]
mov ecx, dword [eax + 0x68]
test ecx, ecx
jne 0x4d332f
xor eax, eax
jmp 0x4d3332
mov eax, dword [eax + 0x60]
mov ecx, dword [esp + 0x1c]
mov eax, dword [eax + ecx*4]
mov dword [esi + 4], eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0x58], 0
mov dword [esp + 0x3c], 0x5f7940
call fcn.00491ab0
jmp 0x4d3358
mov ebx, dword [esp + 0x20]
lea edx, [esp + 0x6c]
push 2
push edx
mov ecx, 0x676278
mov dword [esp + 0x74], 0xd2
call fcn.00492170
lea eax, [esp + 0x6c]
push 4
push eax
mov ecx, 0x676278
mov dword [esp + 0x74], 0x18
call fcn.00492170
push 0x18
push esi
mov ecx, 0x676278
call fcn.00492170
mov edx, dword [esp + 0x60]
mov edi, dword [esp + 0x64]
cmp ebx, 0xd
jne 0x4d3415
mov esi, dword [edx + 0x68]
mov eax, dword [edx + 0x68]
lea edi, [edx + 0x68]
shr esi, 2
test eax, eax
jne 0x4d33b8
xor eax, eax
jmp 0x4d33bb
mov eax, dword [edx + 0x60]
mov ecx, dword [esp + 0x1c]
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp + 0x70]
test ecx, ecx
je 0x4d33ec
mov ecx, dword [esp + 0x64]
push 0
push 0
push 0
push 0
push 0
push 1
push ecx
push eax
push edx
mov edx, dword [esp + 0x38]
push edx
call fcn.004d0a40
add esp, 0x28
jmp 0x4d33fb
mov ecx, dword [esp + 0x64]
push ecx
push eax
push edx
call fcn.004cea20
add esp, 0xc
mov eax, dword [esp + 0x74]
test eax, eax
je 0x4d38fc
mov edx, dword [edi]
shr edx, 2
sub edx, esi
mov dword [eax], edx
jmp 0x4d38fc
cmp ebp, 0x1a6
jne 0x4d342f
mov eax, dword [esp + 0x14]
push 1
push edi
push eax
call fcn.00511a80
jmp 0x4d38ce
cmp ebp, 0x1da
jg 0x4d3520
je 0x4d355e
cmp ebp, 0x105
jg 0x4d3499
je 0x4d3550
mov eax, ebp
sub eax, 0x33
je 0x4d3550
sub eax, 0x35
je 0x4d355e
sub eax, 0x66
jne 0x4d34b0
lea eax, [edx + 0x10]
test eax, eax
je 0x4d38d5
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x4d38d5
mov edx, dword [esp + 0x68]
push edx
push ecx
mov ecx, dword [esp + 0x1c]
push ecx
push eax
push ebp
call fcn.0050ce90
add esp, 0x14
jmp 0x4d38d1
mov eax, ebp
sub eax, 0x139
je 0x4d3518
sub eax, 0x36
je 0x4d34f9
sub eax, 0x36
je 0x4d355e
cmp ebp, 0x1dc
jg 0x4d35fd
je 0x4d3626
cmp ebp, 0x106
jg 0x4d359e
je 0x4d3626
mov eax, ebp
sub eax, 0x35
je 0x4d3626
sub eax, 0x66
je 0x4d3626
sub eax, 0x37
jne 0x4d35b1
lea eax, [edx + 0x10]
jmp 0x4d3659
mov ecx, 0x6756e0
call fcn.00469ad0
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x60]
mov eax, dword [ecx + 0xc]
add eax, 0x244
jmp 0x4d346b
lea eax, [edx + 0xc]
jmp 0x4d346b
cmp ebp, 0x2ae
jg 0x4d3577
je 0x4d3550
mov eax, ebp
sub eax, 0x20f
je 0x4d355e
sub eax, 0x35
je 0x4d3550
sub eax, 0x34
jne 0x4d34b0
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 4]
add eax, 0xc
jmp 0x4d346b
mov ecx, 0x6756e0
call fcn.00469ad0
mov edx, dword [esp + 0x60]
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x14]
push ecx
push eax
push edx
push ebp
call fcn.0050ca50
add esp, 0x10
jmp 0x4d38d1
mov eax, ebp
sub eax, 0x2b0
je 0x4d355e
sub eax, 0x34
je 0x4d3596
sub eax, 0x38
jne 0x4d34b0
lea eax, [edx + 0x18]
jmp 0x4d346b
lea eax, [edx + 0x38]
jmp 0x4d346b
mov eax, ebp
sub eax, 0x13c
je 0x4d35f8
sub eax, 0x36
je 0x4d35ea
sub eax, 0x35
je 0x4d3626
cmp ebp, 0x27a
jg 0x4d3698
je 0x4d368c
mov eax, ebp
sub eax, 0x13b
je 0x4d3687
sub eax, 0x36
jne 0x4d36c4
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0xc]
add eax, 0x244
jmp 0x4d36a3
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0xc]
add eax, 0x244
jmp 0x4d3659
lea eax, [edx + 0xc]
jmp 0x4d3659
cmp ebp, 0x2b1
jg 0x4d363f
je 0x4d3626
mov eax, ebp
sub eax, 0x211
je 0x4d3626
sub eax, 0x34
je 0x4d3626
sub eax, 0x36
jne 0x4d35b1
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + 4]
add eax, 0xc
jmp 0x4d3659
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x14]
push eax
push ecx
push edx
push ebp
call fcn.0050ca50
add esp, 0x10
jmp 0x4d38d1
mov eax, ebp
sub eax, 0x2e9
je 0x4d3656
sub eax, 0x37
jne 0x4d35b1
lea eax, [edx + 0x18]
jmp 0x4d3659
lea eax, [edx + 0x38]
test eax, eax
je 0x4d38d5
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x4d38d5
mov edx, dword [esp + 0x68]
push edx
push ecx
mov ecx, dword [esp + 0x1c]
push ecx
push eax
push ebp
call fcn.0050d030
add esp, 0x14
jmp 0x4d38d1
lea eax, [edx + 0xc]
jmp 0x4d36a3
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + 4]
add eax, 0xc
jmp 0x4d36a3
cmp ebp, 0x31f
jne 0x4d36c4
lea eax, [edx + 0x18]
test eax, eax
je 0x4d36c4
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x28]
push edx
mov edx, dword [esp + 0x18]
push ecx
push edx
push eax
call fcn.0050d1d0
add esp, 0x10
jmp 0x4d38d1
xor edi, edi
cmp ebp, 0x279
jg 0x4d3766
je 0x4d375a
cmp ebp, 0x13a
jg 0x4d373f
je 0x4d373a
cmp ebp, 0x34
je 0x4d3792
cmp ebp, 0xcf
jne 0x4d3842
lea edi, [edx + 0x10]
mov edx, dword [esp + 0x18]
push 0
push 0
push edx
mov ecx, edi
call fcn.004f4200
test eax, eax
je 0x4d37b7
test byte [eax + 4], 0x80
je 0x4d37b7
mov eax, dword [eax]
test eax, eax
je 0x4d37b7
mov ecx, dword [esp + 0x64]
push ecx
mov ecx, dword [esp + 0x14]
push eax
call fcn.0050d8a0
jmp 0x4d38d1
lea edi, [edx + 0xc]
jmp 0x4d36fa
cmp ebp, 0x170
jne 0x4d3842
mov eax, dword [esp + 0x10]
mov edi, dword [eax + 0xc]
add edi, 0x244
jmp 0x4d36fa
mov ecx, dword [esp + 0x10]
mov edi, dword [ecx + 4]
add edi, 0xc
jmp 0x4d36fa
mov eax, ebp
sub eax, 0x2af
je 0x4d378d
sub eax, 0x36
je 0x4d3785
sub eax, 0x38
jne 0x4d3842
lea edi, [edx + 0x18]
jmp 0x4d36fa
lea edi, [edx + 0x38]
jmp 0x4d36fa
cmp ebp, 0x34
jne 0x4d379d
test byte [edx + 8], 1
je 0x4d37b7
mov eax, dword [edx + 0xc]
jmp 0x4d371e
cmp ebp, 0x2af
jne 0x4d36fa
test byte [edx + 0x10], 0x40
je 0x4d37b7
mov eax, dword [edx + 0x14]
jmp 0x4d371e
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + 0xc]
cmp dword [eax + 0x1f0], 0xffffff
jne 0x4d37d4
mov dword [eax + 0x1f0], 0xffff
mov esi, dword [eax + 0x1f0]
mov edx, dword [esp + 0x64]
inc esi
push edx
mov dword [eax + 0x1f0], esi
mov ecx, dword [ecx + 0xc]
mov eax, esi
add ecx, 0x2f4
or eax, 0x41000000
mov esi, eax
push esi
call fcn.004f1080
cmp ebp, 0x34
je 0x4d3827
cmp ebp, 0x2af
je 0x4d3827
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push 1
push esi
push eax
push ecx
push edi
push ebp
call fcn.0050d510
add esp, 0x18
jmp 0x4d38d1
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x60]
push 1
push esi
push edx
push eax
push ebp
call fcn.0050d2e0
add esp, 0x14
jmp 0x4d38d1
cmp ebp, 0x246
jne 0x4d38d5
mov esi, dword [edx + 0x44]
cmp esi, 0xffffffff
je 0x4d3877
push esi
call fcn.004f4040
add esp, 4
cmp eax, 0x40000000
je 0x4d3877
mov ecx, dword [esp + 0x64]
push ecx
mov ecx, dword [esp + 0x14]
push esi
call fcn.0050d8a0
jmp 0x4d38d1
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + 0xc]
cmp dword [eax + 0x1f0], 0xffffff
jne 0x4d3894
mov dword [eax + 0x1f0], 0xffff
mov edx, dword [eax + 0x1f0]
inc edx
mov dword [eax + 0x1f0], edx
mov ecx, dword [ecx + 0xc]
mov eax, edx
mov edx, dword [esp + 0x64]
or eax, 0x9000000
push edx
mov esi, eax
add ecx, 0x2f4
push esi
call fcn.004f1080
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x60]
push esi
push eax
push ecx
call fcn.0050d710
add esp, 0xc
mov edx, dword [esp + 0x60]
mov eax, dword [esp + 0x70]
test eax, eax
je 0x4d38fc
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x1c]
push 1
push eax
mov eax, dword [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x1c]
push eax
push edx
push ebp
mov ecx, dword [ecx + 0xc]
call fcn.004d0610
lea ecx, [esp + 0x28]
mov dword [esp + 0x58], 0xffffffff
mov dword [esp + 0x28], 0x5f7940
call fcn.00491ab0
mov eax, 1
mov ecx, dword [esp + 0x50]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x4c
ret 0x18