Function at 0x4f4350
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword [0x7a1414]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4f4c3c
sub esp, 0x20
mov eax, dword [esp + 0x28]
movzx ebx, byte [eax + 6]
cmp bl, 5
ja 0x4f4591
cmp bl, 2
jbe 0x4f4564
cmp bl, 3
je 0x4f439b
cmp bl, 4
je 0x4f45ac
mov dword [esp + 0x2c], 0x1e
add esp, 0x20
ret
movzx ecx, word [eax]
lea edx, [ecx - 0x2020]
cmp dx, 0x3f
jbe 0x4f4931
movzx edx, byte [eax + 7]
cmp dl, 2
jg 0x4f44ab
test dl, dl
jne 0x4f4443
movzx ecx, word [eax + 2]
test cx, cx
je 0x4f4418
mov edx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
test eax, eax
setne al
test edx, edx
setne dl
or eax, edx
test al, al
je 0x4f440c
lea eax, [ecx - 0x2000]
test ax, 0x2800
jne 0x4f43f4
test ax, 0x2200
je 0x4f4400
mov dword [esp + 0x2c], 0x72
add esp, 0x20
ret
mov dword [esp + 0x2c], 0x73
add esp, 0x20
ret
mov dword [esp + 0x2c], 0x72
add esp, 0x20
ret
mov ecx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
mov edx, dword [esp + 0x24]
mov dword [edx + 0x1c], ecx
mov dword [edx + 0x20], eax
mov dword [esp], ecx
mov dword [esp + 4], eax
call sym.cmd_internal_obj_arm64.autoclass
mov eax, dword [esp + 8]
add eax, 0x27
mov dword [esp + 0x2c], eax
add esp, 0x20
ret
jle 0x4f454c
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x4f454c
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 0x10]
mov ebx, dword [esp + 0x24]
mov dword [ebx + 0x1c], ecx
mov dword [ebx + 0x20], edx
mov eax, dword [eax + 0x14]
test eax, eax
je 0x4f449f
cmp byte [eax + 8], 7
jne 0x4f4493
mov eax, dword [ebx]
movzx eax, byte [eax + 0x18]
test al, al
je 0x4f4487
mov dword [esp + 0x2c], 0x71
add esp, 0x20
ret
mov dword [esp + 0x2c], 0x70
add esp, 0x20
ret
mov dword [esp + 0x2c], 0x6e
add esp, 0x20
ret
mov dword [esp + 0x2c], 0x4c
add esp, 0x20
ret
cmp dl, 3
jne 0x4f44fc
cmp cx, 0x207f
jne 0x4f44bc
mov word [eax], 0
mov ecx, dword [esp + 0x24]
mov edx, dword [ecx + 0x14]
mov ebx, edx
sar edx, 0x1f
mov ebp, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
mov esi, dword [ecx + 0x18]
mov edi, esi
sar esi, 0x1f
add ebp, ebx
adc eax, edx
sub ebp, edi
mov dword [ecx + 0x1c], ebp
sbb eax, esi
mov dword [ecx + 0x20], eax
mov dword [esp], ebp
mov dword [esp + 4], eax
call sym.cmd_internal_obj_arm64.autoclass
mov eax, dword [esp + 8]
mov dword [esp + 0x2c], eax
add esp, 0x20
ret
cmp dl, 4
jne 0x4f4547
cmp cx, 0x207f
jne 0x4f450d
mov word [eax], 0
mov ecx, dword [esp + 0x24]
mov edx, dword [ecx + 0x14]
mov ebx, edx
sar edx, 0x1f
mov ebp, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
add ebp, ebx
adc eax, edx
add ebp, 8
mov dword [ecx + 0x1c], ebp
adc eax, 0
mov dword [ecx + 0x20], eax
mov dword [esp], ebp
mov dword [esp + 4], eax
call sym.cmd_internal_obj_arm64.autoclass
mov eax, dword [esp + 8]
mov dword [esp + 0x2c], eax
add esp, 0x20
ret
cmp dl, 5
je 0x4f4558
mov dword [esp + 0x2c], 0x73
add esp, 0x20
ret
mov dword [esp + 0x2c], 0x6f
add esp, 0x20
ret
test bl, bl
je 0x4f4585
cmp bl, 1
jne 0x4f4579
mov dword [esp + 0x2c], 0x24
add esp, 0x20
ret
mov dword [esp + 0x2c], 0x74
add esp, 0x20
ret
mov dword [esp + 0x2c], 1
add esp, 0x20
ret
cmp bl, 9
ja 0x4f48ff
cmp bl, 7
je 0x4f48e7
cmp bl, 8
jne 0x4f48d6
movzx ebx, byte [eax + 7]
cmp bl, 2
jg 0x4f476e
test bl, bl
jne 0x4f46f0
mov edx, dword [eax + 0xc]
mov ebx, dword [eax + 0x10]
mov ebp, dword [esp + 0x24]
mov dword [ebp + 0x1c], edx
mov dword [ebp + 0x20], ebx
movzx eax, word [eax]
test ax, ax
je 0x4f45e6
cmp ax, 0x201f
je 0x4f45e6
mov ecx, ebp
jmp 0x4f47e0
test ebx, ebx
sete al
test edx, edx
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebp, eax
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4f46e4
mov dword [esp + 0x1c], edx
mov dword [esp + 0x18], ebx
test ebx, ebx
jl 0x4f4660
test edx, 0xfff
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebp, 1
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4f4635
mov ebp, edx
shr ebp, 0xc
mov esi, ebx
shl esi, 0x14
or esi, ebp
mov ebp, ebx
sar ebp, 0xc
jmp 0x4f4639
mov ebp, ebx
mov esi, edx
test ebp, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
xchg edi, ebx
setl bl
xchg edi, ebx
cmp esi, 0xfff
xchg esi, ebx
setbe bl
xchg esi, ebx
and esi, ebp
or edi, esi
xchg edi, eax
test al, al
xchg edi, eax
jne 0x4f466b
mov byte [esp + 0x17], al
xor ecx, ecx
jmp 0x4f4a6d
test ebx, ebx
setl cl
cmp edx, 0xfff
xchg ebp, ebx
setbe bl
xchg ebp, ebx
and ebp, eax
or ebp, ecx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4f46b4
mov dword [esp], edx
mov dword [esp + 4], ebx
call sym.cmd_internal_obj_arm64.isbitcon
movzx eax, byte [esp + 8]
test al, al
je 0x4f46a8
mov dword [esp + 0x2c], 0x11
add esp, 0x20
ret
mov dword [esp + 0x2c], 0x12
add esp, 0x20
ret
mov dword [esp], edx
mov dword [esp + 4], ebx
call sym.cmd_internal_obj_arm64.isbitcon
movzx eax, byte [esp + 8]
test al, al
jne 0x4f46d8
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
xor ecx, ecx
jmp 0x4f495a
mov dword [esp + 0x2c], 0x13
add esp, 0x20
ret
mov dword [esp + 0x2c], 0x10
add esp, 0x20
ret
jle 0x4f48ca
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x4f4762
cmp byte [ecx + 8], 7
jne 0x4f4746
mov eax, dword [esp + 0x24]
mov ecx, dword [eax]
inc dword [ecx + 0x90]
mov edx, dword [ecx + 0x80]
mov ecx, dword [edx]
lea ebx, [0x5fda9b]
mov dword [esp], ebx
mov dword [esp + 4], 0x2f
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call ecx
mov eax, dword [esp + 0x28]
mov ecx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
mov edx, dword [esp + 0x24]
mov dword [edx + 0x1c], ecx
mov dword [edx + 0x20], eax
mov dword [esp + 0x2c], 0x1f
add esp, 0x20
ret
mov dword [esp + 0x2c], 0x73
add esp, 0x20
ret
cmp bl, 3
jne 0x4f47a9
cmp word [eax], 0x207f
jne 0x4f477f
mov word [eax], 0
mov ecx, dword [esp + 0x24]
mov edx, dword [ecx + 0x14]
mov ebx, edx
sar edx, 0x1f
mov ebp, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
mov esi, dword [ecx + 0x18]
mov edi, esi
sar esi, 0x1f
add ebp, ebx
adc eax, edx
sub ebp, edi
mov dword [ecx + 0x1c], ebp
sbb eax, esi
mov dword [ecx + 0x20], eax
jmp 0x4f47e0
cmp bl, 4
jne 0x4f48ca
cmp word [eax], 0x207f
jne 0x4f47be
mov word [eax], 0
mov ecx, dword [esp + 0x24]
mov edx, dword [ecx + 0x14]
mov ebx, edx
sar edx, 0x1f
mov ebp, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
add ebp, ebx
adc eax, edx
add ebp, 8
mov dword [ecx + 0x1c], ebp
adc eax, 0
mov dword [ecx + 0x20], eax
mov eax, dword [ecx + 0x20]
mov ecx, dword [ecx + 0x1c]
test eax, eax
jl 0x4f482e
test ecx, 0xfff
sete dl
and edx, 1
test dl, dl
je 0x4f480d
mov edx, ecx
shr edx, 0xc
mov ebx, eax
shl ebx, 0x14
or ebx, edx
mov edx, eax
sar edx, 0xc
jmp 0x4f4811
mov edx, eax
mov ebx, ecx
test edx, edx
setl dl
xchg ebp, ebx
sete bl
xchg ebp, ebx
cmp ebx, 0xfff
setbe bl
and ebx, ebp
or ebx, edx
test bl, bl
jne 0x4f4881
xor edx, edx
sub edx, ecx
mov ebx, 0
sbb ebx, eax
test ebx, ebx
jge 0x4f4841
test eax, eax
jmp 0x4f488f
test edx, 0xfff
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebp, 1
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4f4864
shr edx, 0xc
mov ebp, ebx
shl ebp, 0x14
or edx, ebp
sar ebx, 0xc
test ebx, ebx
setl bl
xchg ebp, ebx
sete bl
xchg ebp, ebx
cmp edx, 0xfff
setbe dl
and edx, ebp
or edx, ebx
test dl, dl
je 0x4f488d
mov dword [esp + 0x2c], 0x20
add esp, 0x20
ret
test eax, eax
sete al
setg dl
setl bl
mov ebp, eax
and eax, 1
or eax, edx
cmp ecx, 0xffffff
setbe cl
and ecx, ebp
or ecx, ebx
and ecx, eax
test cl, cl
je 0x4f48be
mov dword [esp + 0x2c], 0x21
add esp, 0x20
ret
mov dword [esp + 0x2c], 0x22
add esp, 0x20
ret
mov dword [esp + 0x2c], 0x73
add esp, 0x20
ret
cmp bl, 9
jne 0x4f4931
mov dword [esp + 0x2c], 8
add esp, 0x20
ret
movzx eax, word [eax]
mov word [esp], ax
call sym.cmd_internal_obj_arm64.rclass
mov eax, dword [esp + 4]
mov dword [esp + 0x2c], eax
add esp, 0x20
ret
cmp bl, 0xa
je 0x4f4949
cmp bl, 0xd
je 0x4f493d
cmp bl, 0xe
jne 0x4f4931
mov eax, dword [eax + 0xc]
add eax, 0xffffff82
cmp eax, 0xf
ja 0x4f4925
mov dword [esp + 0x2c], 0xb
add esp, 0x20
ret
mov dword [esp + 0x2c], 0xc
add esp, 0x20
ret
mov dword [esp + 0x2c], 0x73
add esp, 0x20
ret
mov dword [esp + 0x2c], 0xf
add esp, 0x20
ret
mov dword [esp + 0x2c], 7
add esp, 0x20
ret
lea ecx, [esi + 0x10]
mov eax, ebx
cmp ecx, 0x40
jge 0x4f49b9
mov ebx, 0xffff
shl ebx, cl
lea ebp, [ecx - 0x20]
mov esi, ecx
mov ecx, ebp
mov edi, 0xffff
shl edi, cl
neg ecx
mov eax, 0xffff
shr eax, cl
cmp ecx, 0x20
sbb ecx, ecx
and eax, ecx
cmp esi, 0x20
sbb ecx, ecx
and ebx, ecx
not ebx
cmp ebp, 0x20
sbb ebp, ebp
and ebp, edi
or ebp, eax
xchg ebp, ebx
not ebx
xchg ebp, ebx
test edx, ebx
sete al
mov ebx, dword [esp + 0x18]
test ebx, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
and eax, ebp
test al, al
je 0x4f4955
sar esi, 4
jmp 0x4f49c0
mov ebx, eax
mov esi, 0xffffffff
test esi, esi
jge 0x4f49c8
xor eax, eax
jmp 0x4f49d7
mov dword [esp + 0x2c], 0x14
add esp, 0x20
ret
add eax, 0x10
cmp eax, 0x40
jge 0x4f4a44
mov ecx, eax
mov ebp, 0xffff
shl ebp, cl
lea esi, [eax - 0x20]
mov ecx, esi
mov edi, 0xffff
shl edi, cl
neg ecx
mov edx, 0xffff
shr edx, cl
cmp esi, 0x20
sbb esi, esi
and edi, esi
cmp ecx, 0x20
sbb esi, esi
and edx, esi
or edi, edx
or edi, ebx
xchg edi, ebx
not ebx
xchg edi, ebx
cmp eax, 0x20
sbb edx, edx
and ebp, edx
mov edx, dword [esp + 0x1c]
or ebp, edx
xchg ebp, ebx
not ebx
xchg ebp, ebx
test edi, edi
xchg esi, ebx
sete bl
xchg esi, ebx
test ebp, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebp, esi
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4f49d4
sar eax, 4
jmp 0x4f4a49
mov eax, 0xffffffff
test eax, eax
jl 0x4f4a59
mov dword [esp + 0x2c], 0x14
add esp, 0x20
ret
mov dword [esp + 0x2c], 0x15
add esp, 0x20
ret
lea ecx, [edi + 0x10]
movzx eax, byte [esp + 0x17]
cmp ecx, 0x40
jge 0x4f4ad3
mov ebp, 0xffff
shl ebp, cl
lea esi, [ecx - 0x20]
mov edi, ecx
mov ecx, esi
mov eax, 0xffff
shl eax, cl
neg ecx
mov edx, 0xffff
shr edx, cl
cmp esi, 0x20
sbb esi, esi
and eax, esi
cmp edi, 0x20
sbb esi, esi
and esi, ebp
xchg esi, ebx
not ebx
xchg esi, ebx
cmp ecx, 0x20
sbb ebp, ebp
and edx, ebp
or eax, edx
not eax
test ebx, eax
sete al
mov edx, dword [esp + 0x1c]
test edx, esi
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebp, eax
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4f4a65
sar edi, 4
movzx eax, byte [esp + 0x17]
jmp 0x4f4ad8
mov edi, 0xffffffff
test edi, edi
jge 0x4f4ae0
xor ecx, ecx
jmp 0x4f4b17
mov dword [esp], edx
mov dword [esp + 4], ebx
call sym.cmd_internal_obj_arm64.isbitcon
movzx eax, byte [esp + 8]
test al, al
je 0x4f4b01
mov dword [esp + 0x2c], 0x16
add esp, 0x20
ret
mov dword [esp + 0x2c], 0x17
add esp, 0x20
ret
lea ecx, [edi + 0x10]
movzx eax, byte [esp + 0x17]
mov edx, ebp
cmp ecx, 0x40
jge 0x4f4b79
mov ebp, 0xffff
shl ebp, cl
lea esi, [ecx - 0x20]
mov edi, ecx
mov ecx, esi
mov eax, 0xffff
shl eax, cl
neg ecx
mov edx, 0xffff
shr edx, cl
cmp ecx, 0x20
sbb ecx, ecx
and ecx, edx
cmp esi, 0x20
sbb edx, edx
and edx, eax
or edx, ecx
or edx, ebx
not edx
cmp edi, 0x20
sbb eax, eax
and eax, ebp
mov ebp, dword [esp + 0x1c]
or eax, ebp
not eax
test edx, edx
sete dl
test eax, eax
sete al
and eax, edx
test al, al
je 0x4f4b0d
sar edi, 4
movzx eax, byte [esp + 0x17]
mov edx, ebp
jmp 0x4f4b7e
mov edi, 0xffffffff
test edi, edi
jl 0x4f4baf
mov dword [esp], edx
mov dword [esp + 4], ebx
call sym.cmd_internal_obj_arm64.isbitcon
movzx eax, byte [esp + 8]
test al, al
je 0x4f4ba3
mov dword [esp + 0x2c], 0x16
add esp, 0x20
ret
mov dword [esp + 0x2c], 0x17
add esp, 0x20
ret
mov dword [esp], edx
mov dword [esp + 4], ebx
call sym.cmd_internal_obj_arm64.isbitcon
movzx eax, byte [esp + 8]
test al, al
jne 0x4f4c30
mov eax, dword [esp + 0x18]
test eax, eax
setg cl
setl dl
movzx ebx, byte [esp + 0x17]
mov ebp, ebx
and ebx, 1
or ecx, ebx
mov esi, dword [esp + 0x1c]
cmp esi, 0xffffff
xchg edi, ebx
setbe bl
xchg edi, ebx
and edi, ebp
or edi, edx
and edi, ecx
xchg edi, eax
test al, al
xchg edi, eax
jne 0x4f4c24
test bl, bl
jne 0x4f4c0c
sar esi, 0x1f
cmp eax, esi
sete al
and eax, 1
test al, al
je 0x4f4c18
mov dword [esp + 0x2c], 0x1a
add esp, 0x20
ret
mov dword [esp + 0x2c], 0x1d
add esp, 0x20
ret
mov dword [esp + 0x2c], 0x19
add esp, 0x20
ret
mov dword [esp + 0x2c], 0x18
add esp, 0x20
ret
call sym.runtime.morestack_noctxt
jmp sym.cmd_internal_obj_arm64._ctxt7_.aclass