Function at 0x4bee80
Capabilities:
Enumerate pe sections

Disassembly:
push 0xffffffffffffffff
push 0x4d4f3b
mov eax, dword fs:[0]
push eax
mov eax, 0x11f0
call fcn.004bfc70
mov eax, dword [0x4ea93c]
xor eax, esp
mov dword [esp + 0x11ec], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4ea93c]
xor eax, esp
push eax
lea eax, [esp + 0x1204]
mov dword fs:[0], eax
mov esi, dword [esp + 0x1214]
mov ecx, dword [esi + 0x4c]
xor ebx, ebx
mov eax, ecx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x18], 0xfffffffd
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
xor ebp, ebp
lea edi, [eax + 1]
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4bef00
sub eax, edi
mov word [esi + 0x20], ax
movzx eax, ax
xor edx, edx
cmp byte [eax + ecx - 1], 0x2f
lea eax, [esp + 0x44]
sete dl
push eax
mov eax, dword [esi + 0x60]
lea ecx, [esp + 0x1c]
push ecx
mov dword [0x5884b8], 0xffffffff
mov dword [0x5884bc], ebx
mov dword [esp + 0x28], edx
lea edx, [esp + 0x30]
push edx
push eax
call fcn.00493e70
mov dword [esp + 0x24], eax
test eax, eax
je 0x4bf152
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
cmp eax, 0xfffffffd
jne 0x4bef68
cmp ecx, 0xffffffff
je 0x4bf152
cmp eax, 0xfffffffe
jne 0x4bf0cf
cmp ecx, 0xffffffff
jne 0x4bf0cf
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x20], 1
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
xor edi, edi
mov dword [esi + 0x18], eax
mov eax, 0xffff
mov dword [esi + 0x1c], ecx
mov word [esi + 0x2c], ax
mov dword [esi + 0x38], edi
cmp dword [0x4e8f2c], 2
jne 0x4bf023
movzx eax, word [esi + 0x22]
cmp ax, di
je 0x4befe7
movzx ecx, ax
push ecx
call fcn.004c0bc4
mov ebx, eax
add esp, 4
mov dword [esp + 0x30], ebx
cmp ebx, edi
jne 0x4befd1
push 4
call fcn.004b6c10
movzx edx, word [esi + 0x22]
mov eax, dword [esi + 0x40]
push edx
push eax
push ebx
call fcn.004c0c90
movzx ebx, word [esi + 0x22]
add esp, 0xc
movzx eax, word [esi + 0x24]
cmp ax, di
je 0x4bf023
movzx ecx, ax
push ecx
call fcn.004c0bc4
mov ebp, eax
add esp, 4
cmp ebp, edi
jne 0x4bf009
push 4
call fcn.004b6c10
movzx edx, word [esi + 0x24]
mov eax, dword [esi + 0x44]
push edx
push eax
push ebp
call fcn.004c0c90
movzx ecx, word [esi + 0x24]
add esp, 0xc
mov dword [esp + 0x2c], ecx
cmp word [esi + 0x22], di
je 0x4bf035
mov edx, dword [esi + 0x40]
push edx
call fcn.004bff04
add esp, 4
cmp word [esi + 0x24], di
je 0x4bf04c
mov eax, dword [esi + 0x44]
cmp dword [esi + 0x40], eax
je 0x4bf04c
push eax
call fcn.004bff04
add esp, 4
mov edx, dword [esi + 0x60]
xor ecx, ecx
xor eax, eax
mov word [esi + 0x22], cx
push edx
mov ecx, 0x5448f8
mov dword [esi + 0x44], edi
mov dword [esi + 0x40], edi
mov word [esi + 0x24], ax
call fcn.004205f0
movzx eax, al
neg eax
sbb eax, eax
not eax
and eax, dword [0x4e8f20]
cmp dword [0x54bc9c], 4
mov dword [esp + 0x14], eax
jne 0x4bf093
lea ecx, [esp + 0x44]
push ecx
push esi
call fcn.00493fc0
mov edx, dword [esp + 0x28]
push edx
call fcn.00491ee0
mov edi, eax
lea ecx, [esp + 0x5c]
mov dword [esp + 0x38], edi
call fcn.0043acd0
mov dword [esp + 0x120c], 0
lea eax, [esp + 0x5c]
mov dword [0x58809c], eax
test edi, edi
je 0x4bf103
xor eax, eax
mov dword [esp + 0x14], eax
jmp 0x4bf185
mov edx, dword [esp + 0x28]
shr edx, 4
and edx, 1
cmp dword [esp + 0x20], edx
je 0x4bf0e4
or eax, 0xffffffff
jmp 0x4bf157
cmp ecx, 0xffffffff
jb 0x4bef8e
ja 0x4bf0f8
cmp eax, 0xfffffffd
jbe 0x4bef8e
xor edi, edi
xor eax, eax
xor ecx, ecx
jmp 0x4bef90
cmp dword [esp + 0x20], 0
je 0x4bf11e
xor eax, eax
xor edi, edi
xor edx, edx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], edx
jmp 0x4bf18d
movzx ecx, byte [0x54aa8d]
mov edx, dword [esi + 0x60]
neg ecx
sbb ecx, ecx
and ecx, 4
push ecx
push edx
lea ecx, [esp + 0x64]
call fcn.0043ad10
test al, al
jne 0x4bf181
mov dword [esp + 0x120c], 0xffffffff
lea ecx, [esp + 0x5c]
call fcn.0043b3e0
mov eax, 0x12
mov ecx, dword [esp + 0x1204]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x11ec]
xor ecx, esp
call fcn.004bfc52
add esp, 0x11fc
ret 4
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x24]
mov dword [esi + 8], ecx
cmp dword [0x4e8f2c], 2
jne 0x4bf23a
movzx eax, word [esi + 0x22]
mov ecx, dword [esi + 0x40]
lea edx, [esp + 0x24]
push edx
push eax
mov eax, dword [esp + 0x38]
movzx edx, bx
push ecx
push edx
push eax
call fcn.004b9230
mov ecx, dword [esi + 0x40]
push ecx
mov edi, eax
call fcn.004bff04
movzx edx, word [esp + 0x28]
movzx ecx, word [esi + 0x24]
add esp, 4
lea eax, [esp + 0x24]
push eax
movzx eax, word [esp + 0x30]
push ecx
mov word [esi + 0x22], dx
mov edx, dword [esi + 0x44]
push edx
push eax
push ebp
mov dword [esi + 0x40], edi
call fcn.004b9230
mov ecx, dword [esi + 0x44]
push ecx
mov edi, eax
call fcn.004bff04
movzx edx, word [esp + 0x28]
add esp, 4
mov word [esi + 0x24], dx
mov dword [esi + 0x44], edi
test bx, bx
je 0x4bf21d
mov eax, dword [esp + 0x30]
push eax
call fcn.004bff04
add esp, 4
cmp word [esp + 0x2c], 0
je 0x4bf22e
push ebp
call fcn.004bff04
add esp, 4
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ecx, edi
xor ebp, ebp
or ecx, edx
jne 0x4bf246
xor eax, eax
jmp 0x4bf250
cmp eax, 0xffffffff
jne 0x4bf254
mov eax, 8
mov dword [esp + 0x14], eax
mov ecx, 0x1f
mov word [esi], cx
mov ecx, eax
neg ecx
sbb ecx, ecx
and ecx, 0xa
add ecx, 0xa
mov word [esi + 2], cx
mov dword [esi + 0xc], ebp
cmp dword [esp + 0x20], ebp
je 0x4bf27d
xor ecx, ecx
mov word [esi + 4], cx
jmp 0x4bf2a1
mov ecx, 8
mov word [esi + 4], cx
cmp byte [0x549a18], 0
je 0x4bf2a1
mov ecx, 9
mov word [esi + 4], cx
mov ecx, dword [esi + 8]
shl ecx, 0x10
mov dword [esi + 0xc], ecx
mov cx, word [esi + 4]
mov word [esi + 0x2e], cx
mov word [esi + 6], ax
cmp eax, ebp
jne 0x4bf2c1
cmp edx, ebp
jl 0x4bf2c1
jg 0x4bf2bb
cmp edi, ebp
jb 0x4bf2c1
mov eax, edi
mov ecx, edx
jmp 0x4bf2c5
xor eax, eax
xor ecx, ecx
mov dword [esi + 0x10], eax
mov eax, edi
and eax, edx
mov dword [esi + 0x14], ecx
cmp eax, 0xffffffff
je 0x4bf2da
mov eax, edi
mov ecx, edx
jmp 0x4bf2de
xor eax, eax
xor ecx, ecx
mov dword [esi + 0x1c], ecx
mov edx, dword [esi + 0x1c]
mov ecx, eax
mov dword [esi + 0x18], eax
mov eax, 0xffff
mov dword [0x5884b0], ebp
mov dword [0x5884b4], ebp
mov dword [0x5884a8], ecx
mov dword [0x5884ac], edx
cmp word [esi + 0x2c], ax
jne 0x4bf317
xor ecx, ecx
mov word [esi + 0x2c], cx
lea ebx, [ecx + 1]
jmp 0x4bf31b
mov ebx, dword [esp + 0x34]
mov edx, dword [esi + 0x38]
and edx, 0xff00
or edx, dword [esp + 0x28]
push ebp
push esi
mov dword [esi + 0x38], edx
call fcn.004bbab0
mov edi, eax
cmp edi, ebp
je 0x4bf353
mov dword [esp + 0x120c], 0xffffffff
lea ecx, [esp + 0x5c]
call fcn.0043b3e0
mov eax, edi
jmp 0x4bf157
mov eax, dword [0x51fcf0]
mov dword [esi + 0x30], eax
mov ecx, dword [0x51fcf4]
movzx eax, word [esi + 0x20]
mov dword [esi + 0x34], ecx
movzx ecx, word [esi + 0x22]
mov edx, dword [0x51fcb8]
mov dword [esi + 0x28], edx
lea eax, [eax + ecx + 0x1e]
cdq
add dword [0x51e808], eax
mov edi, 0xc
adc dword [0x51e80c], edx
cmp dword [esp + 0x20], ebp
jne 0x4bf416
cmp byte [0x549a18], 0
je 0x4bf416
push 0x80
lea edx, [esp + 0x1104]
push edx
mov ecx, 0x549918
call fcn.004778c0
push 0x80
lea eax, [esp + 0x1084]
push eax
lea ecx, [esp + 0x1108]
push ecx
call fcn.004859b0
mov edx, dword [esi + 0xc]
push edx
lea eax, [esp + 0x1084]
push eax
call fcn.004b6420
push 0x100
lea ecx, [esp + 0x1104]
push ecx
call fcn.004778a0
push 0x80
lea edx, [esp + 0x1084]
push edx
call fcn.004778a0
add dword [esi + 0x10], edi
adc dword [esi + 0x14], ebp
add dword [0x51e808], edi
adc dword [0x51e80c], ebp
mov eax, dword [0x51fc8c]
push eax
call fcn.004c2cf2
add esp, 4
test eax, eax
je 0x4bf441
mov ecx, dword [0x51e804]
push ecx
push ebp
mov ecx, 0x51e7a8
call fcn.00433810
push 0xe
call fcn.004b6c10
mov edx, dword [0x51fc8c]
push edx
call fcn.004c341a
mov ebp, eax
mov eax, dword [0x51fc8c]
push eax
mov edi, edx
call fcn.004c2cf2
add esp, 8
test eax, eax
je 0x4bf472
mov ecx, dword [0x51fc8c]
push ecx
call fcn.004c46af
add esp, 4
mov edx, ebp
and edx, edi
xor ecx, ecx
cmp edx, 0xffffffff
je 0x4bf490
cmp edi, ecx
jg 0x4bf490
jl 0x4bf487
cmp ebp, ecx
jae 0x4bf490
push 6
call fcn.004b6c10
xor ecx, ecx
or eax, 0xffffffff
mov dword [0x588088], ecx
mov dword [0x58808c], ecx
mov dword [0x5884a0], eax
cmp dword [esp + 0x20], ecx
jne 0x4bf5dc
cmp dword [esp + 0x14], ecx
je 0x4bf4dc
cmp ebx, ecx
je 0x4bf4c1
mov eax, 0xffff
mov word [esi + 0x2c], ax
lea ecx, [esp + 0x14]
push ecx
push esi
call fcn.004bee40
mov edi, eax
mov eax, dword [0x5884a0]
mov ebp, edx
xor ecx, ecx
jmp 0x4bf5e4
push 0x4000
call fcn.004c0bc4
mov ebp, eax
xor ebx, ebx
add esp, 4
cmp ebp, ebx
jne 0x4bf50d
mov dword [esp + 0x120c], 0xffffffff
lea ecx, [esp + 0x5c]
call fcn.0043b3e0
lea eax, [ebx + 4]
jmp 0x4bf157
cmp dword [esp + 0x38], ebx
je 0x4bf57f
push ebx
push ebp
push 0xffffffffffffffff
call fcn.004279c0
push ebx
push 1
push ebp
mov dword [0x5884a0], eax
call fcn.004b6960
test eax, eax
je 0x4bf555
push ebp
call fcn.004bff04
add esp, 4
mov dword [esp + 0x120c], 0xffffffff
lea ecx, [esp + 0x5c]
call fcn.0043b3e0
mov eax, 0xa
jmp 0x4bf157
mov dword [0x588088], ebx
mov dword [0x58808c], ebx
push ebp
call fcn.004bff04
mov edi, dword [0x588088]
mov ebp, dword [0x58808c]
mov eax, dword [0x5884a0]
add esp, 4
xor ecx, ecx
jmp 0x4bf5e4
push 0x4000
push ebp
call fcn.004bece0
mov edi, eax
cmp edi, ebx
jbe 0x4bf561
cmp edi, 0xffffffff
je 0x4bf561
push ebx
push edi
call fcn.00409f60
push edi
push 1
push ebp
call fcn.004b6960
cmp eax, edi
jne 0x4bf5bc
push 0x4000
push ebp
call fcn.004bece0
mov edi, eax
cmp edi, ebx
ja 0x4bf590
jmp 0x4bf561
push ebp
call fcn.004bff04
mov edx, dword [0x51e804]
add esp, 4
push edx
push ebx
mov ecx, 0x51e7a8
call fcn.00433810
jmp 0x4bf537
mov ebp, dword [esp + 0x40]
mov edi, dword [esp + 0x3c]
add dword [0x51e808], edi
adc dword [0x51e80c], ebp
cmp dword [esp + 0x20], ecx
je 0x4bf625
xor eax, eax
mov edx, 0xfff7
and word [esi + 4], dx
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], ecx
mov dword [esi + 0x18], ecx
mov dword [esi + 0x1c], ecx
mov word [esi + 6], ax
mov ecx, 0xa
mov eax, edx
and word [esi + 0x2e], ax
mov word [esi + 2], cx
jmp 0x4bf83d
not eax
mov dword [esi + 0xc], eax
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], ebp
cmp byte [0x549a18], 0
je 0x4bf648
mov edx, edi
add edx, 0xc
mov eax, ebp
adc eax, ecx
mov dword [esi + 0x10], edx
mov dword [esi + 0x14], eax
mov edx, dword [0x588088]
mov eax, dword [0x58808c]
mov dword [esi + 0x18], edx
mov dword [esi + 0x1c], eax
cmp dword [0x51fc68], ecx
jne 0x4bf7c5
mov ecx, dword [0x51fc8c]
push ecx
call fcn.004bf9f0
test eax, eax
je 0x4bf7c5
mov edx, dword [esi + 0x34]
mov eax, dword [esi + 0x30]
mov ecx, dword [0x51fc8c]
push 0
push edx
push eax
push ecx
call fcn.004c307f
add esp, 0x10
test eax, eax
jne 0x4bf7c5
cmp byte [0x549a18], al
je 0x4bf6a7
add edi, 0xc
adc ebp, eax
mov edx, dword [0x51fd18]
mov eax, edi
mov ecx, ebp
cmp edx, eax
jne 0x4bf6be
mov eax, dword [0x51fd1c]
cmp eax, ecx
je 0x4bf6c5
push 5
call fcn.004b6c10
mov eax, dword [esp + 0x14]
xor ebx, ebx
mov word [esi + 6], ax
cmp eax, ebx
je 0x4bf6e3
cmp eax, 8
jne 0x4bf6ec
mov ecx, 0x14
mov word [esi + 2], cx
jmp 0x4bf6ec
mov edx, 0xa
mov word [esi + 2], dx
movzx eax, word [esi + 4]
test al, 1
jne 0x4bf6fd
and eax, 0xfff7
mov word [esi + 4], ax
mov ax, word [esi + 4]
mov word [esi + 0x2e], ax
cmp dword [0x51fd00], 1
jne 0x4bf74f
mov eax, dword [0x51fce8]
cmp eax, dword [0x51fc8c]
je 0x4bf74f
mov ecx, dword [esi + 0x34]
mov edx, dword [esi + 0x30]
push ebx
push ecx
push edx
push eax
call fcn.004c307f
add esp, 0x10
test eax, eax
je 0x4bf74f
mov dword [esp + 0x120c], 0xffffffff
lea ecx, [esp + 0x5c]
call fcn.0043b3e0
mov eax, 0xb
jmp 0x4bf157
push 1
push esi
call fcn.004bbab0
mov edi, eax
cmp edi, ebx
jne 0x4bf338
mov eax, dword [0x51fcfc]
mov ecx, dword [0x51fcf8]
mov edx, dword [0x51fc8c]
push ebx
push eax
push ecx
push edx
call fcn.004c307f
add esp, 0x10
test eax, eax
jne 0x4bf731
test byte [esi + 4], 1
je 0x4bf83d
push esi
call fcn.004bc0b0
mov edi, eax
cmp edi, ebx
jne 0x4bf338
cmp dword [0x51fc74], ebx
je 0x4bf7b6
add dword [0x51e808], 0x18
adc dword [0x51e80c], ebx
jmp 0x4bf83d
add dword [0x51e808], 0x10
adc dword [0x51e80c], ebx
jmp 0x4bf83d
mov ax, word [esi + 6]
cmp ax, word [esp + 0x14]
je 0x4bf7ea
mov ecx, dword [0x51e804]
push ecx
push 0
mov ecx, 0x51e7a8
call fcn.00433810
push 5
call fcn.004b6c10
cmp dword [esp + 0x14], 0
jne 0x4bf808
cmp dword [esp + 0x1c], 0
jg 0x4bf808
jl 0x4bf801
cmp dword [esp + 0x18], 0
jae 0x4bf808
push 0x10
call fcn.004b6c10
push esi
call fcn.004bc0b0
mov edi, eax
test edi, edi
jne 0x4bf338
cmp dword [0x51fc74], eax
setne al
lea eax, [eax*8 + 0x10]
cdq
add dword [0x51e808], eax
adc dword [0x51e80c], edx
mov dx, word [esi + 0x2e]
mov word [esi + 4], dx
cmp word [esi + 0x22], 0
je 0x4bf862
mov eax, dword [esi + 0x40]
cmp eax, dword [esi + 0x44]
je 0x4bf85c
push eax
call fcn.004bff04
add esp, 4
mov dword [esi + 0x40], 0
xor eax, eax
mov word [esi + 0x22], ax
mov dword [esp + 0x120c], 0xffffffff
lea ecx, [esp + 0x5c]
call fcn.0043b3e0
xor eax, eax
jmp 0x4bf157