Function at 0x4bfe90
Capabilities:
Enumerate pe sections

Disassembly:
push 0xffffffffffffffff
push 0x4d608b
mov eax, dword fs:[0]
push eax
mov eax, 0x11f0
call fcn.004c0c80
mov eax, dword [0x4eb984]
xor eax, esp
mov dword [esp + 0x11ec], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4eb984]
xor eax, esp
push eax
lea eax, [esp + 0x1204]
mov dword fs:[0], eax
mov esi, dword [esp + 0x1214]
mov ecx, dword [esi + 0x4c]
xor ebx, ebx
mov eax, ecx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x18], 0xfffffffd
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
xor ebp, ebp
lea edi, [eax + 1]
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4bff10
sub eax, edi
mov word [esi + 0x20], ax
movzx eax, ax
xor edx, edx
cmp byte [eax + ecx - 1], 0x2f
lea eax, [esp + 0x44]
sete dl
push eax
mov eax, dword [esi + 0x60]
lea ecx, [esp + 0x1c]
push ecx
mov dword [0x5894f0], 0xffffffff
mov dword [0x5894f4], ebx
mov dword [esp + 0x28], edx
lea edx, [esp + 0x30]
push edx
push eax
call fcn.00494ce0
mov dword [esp + 0x24], eax
test eax, eax
je 0x4c0162
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
cmp eax, 0xfffffffd
jne 0x4bff78
cmp ecx, 0xffffffff
je 0x4c0162
cmp eax, 0xfffffffe
jne 0x4c00df
cmp ecx, 0xffffffff
jne 0x4c00df
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x20], 1
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
xor edi, edi
mov dword [esi + 0x18], eax
mov eax, 0xffff
mov dword [esi + 0x1c], ecx
mov word [esi + 0x2c], ax
mov dword [esi + 0x38], edi
cmp dword [0x4e9f54], 2
jne 0x4c0033
movzx eax, word [esi + 0x22]
cmp ax, di
je 0x4bfff7
movzx ecx, ax
push ecx
call fcn.004c1d07
mov ebx, eax
add esp, 4
mov dword [esp + 0x30], ebx
cmp ebx, edi
jne 0x4bffe1
push 4
call fcn.004b7c00
movzx edx, word [esi + 0x22]
mov eax, dword [esi + 0x40]
push edx
push eax
push ebx
call fcn.004c1de0
movzx ebx, word [esi + 0x22]
add esp, 0xc
movzx eax, word [esi + 0x24]
cmp ax, di
je 0x4c0033
movzx ecx, ax
push ecx
call fcn.004c1d07
mov ebp, eax
add esp, 4
cmp ebp, edi
jne 0x4c0019
push 4
call fcn.004b7c00
movzx edx, word [esi + 0x24]
mov eax, dword [esi + 0x44]
push edx
push eax
push ebp
call fcn.004c1de0
movzx ecx, word [esi + 0x24]
add esp, 0xc
mov dword [esp + 0x2c], ecx
cmp word [esi + 0x22], di
je 0x4c0045
mov edx, dword [esi + 0x40]
push edx
call fcn.004c1404
add esp, 4
cmp word [esi + 0x24], di
je 0x4c005c
mov eax, dword [esi + 0x44]
cmp dword [esi + 0x40], eax
je 0x4c005c
push eax
call fcn.004c1404
add esp, 4
mov edx, dword [esi + 0x60]
xor ecx, ecx
xor eax, eax
mov word [esi + 0x22], cx
push edx
mov ecx, 0x545938
mov dword [esi + 0x44], edi
mov dword [esi + 0x40], edi
mov word [esi + 0x24], ax
call fcn.004208f0
movzx eax, al
neg eax
sbb eax, eax
not eax
and eax, dword [0x4e9f48]
cmp dword [0x54ccdc], 4
mov dword [esp + 0x14], eax
jne 0x4c00a3
lea ecx, [esp + 0x44]
push ecx
push esi
call fcn.00494e30
mov edx, dword [esp + 0x28]
push edx
call fcn.0043ddc0
mov edi, eax
lea ecx, [esp + 0x5c]
mov dword [esp + 0x38], edi
call fcn.0043b140
mov dword [esp + 0x120c], 0
lea eax, [esp + 0x5c]
mov dword [0x5890d4], eax
test edi, edi
je 0x4c0113
xor eax, eax
mov dword [esp + 0x14], eax
jmp 0x4c0195
mov edx, dword [esp + 0x28]
shr edx, 4
and edx, 1
cmp dword [esp + 0x20], edx
je 0x4c00f4
or eax, 0xffffffff
jmp 0x4c0167
cmp ecx, 0xffffffff
jb 0x4bff9e
ja 0x4c0108
cmp eax, 0xfffffffd
jbe 0x4bff9e
xor edi, edi
xor eax, eax
xor ecx, ecx
jmp 0x4bffa0
cmp dword [esp + 0x20], 0
je 0x4c012e
xor eax, eax
xor edi, edi
xor edx, edx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], edx
jmp 0x4c019d
movzx ecx, byte [0x54bacd]
mov edx, dword [esi + 0x60]
neg ecx
sbb ecx, ecx
and ecx, 4
push ecx
push edx
lea ecx, [esp + 0x64]
call fcn.0043b180
test al, al
jne 0x4c0191
mov dword [esp + 0x120c], 0xffffffff
lea ecx, [esp + 0x5c]
call fcn.0043b850
mov eax, 0x12
mov ecx, dword [esp + 0x1204]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x11ec]
xor ecx, esp
call fcn.004c0c62
add esp, 0x11fc
ret 4
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x24]
mov dword [esi + 8], ecx
cmp dword [0x4e9f54], 2
jne 0x4c024a
movzx eax, word [esi + 0x22]
mov ecx, dword [esi + 0x40]
lea edx, [esp + 0x24]
push edx
push eax
mov eax, dword [esp + 0x38]
movzx edx, bx
push ecx
push edx
push eax
call fcn.004ba230
mov ecx, dword [esi + 0x40]
push ecx
mov edi, eax
call fcn.004c1404
movzx edx, word [esp + 0x28]
movzx ecx, word [esi + 0x24]
add esp, 4
lea eax, [esp + 0x24]
push eax
movzx eax, word [esp + 0x30]
push ecx
mov word [esi + 0x22], dx
mov edx, dword [esi + 0x44]
push edx
push eax
push ebp
mov dword [esi + 0x40], edi
call fcn.004ba230
mov ecx, dword [esi + 0x44]
push ecx
mov edi, eax
call fcn.004c1404
movzx edx, word [esp + 0x28]
add esp, 4
mov word [esi + 0x24], dx
mov dword [esi + 0x44], edi
test bx, bx
je 0x4c022d
mov eax, dword [esp + 0x30]
push eax
call fcn.004c1404
add esp, 4
cmp word [esp + 0x2c], 0
je 0x4c023e
push ebp
call fcn.004c1404
add esp, 4
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ecx, edi
xor ebp, ebp
or ecx, edx
jne 0x4c0256
xor eax, eax
jmp 0x4c0260
cmp eax, 0xffffffff
jne 0x4c0264
mov eax, 8
mov dword [esp + 0x14], eax
mov ecx, 0x1f
mov word [esi], cx
mov ecx, eax
neg ecx
sbb ecx, ecx
and ecx, 0xa
add ecx, 0xa
mov word [esi + 2], cx
mov dword [esi + 0xc], ebp
cmp dword [esp + 0x20], ebp
je 0x4c028d
xor ecx, ecx
mov word [esi + 4], cx
jmp 0x4c02b1
mov ecx, 8
mov word [esi + 4], cx
cmp byte [0x54aa5c], 0
je 0x4c02b1
mov ecx, 9
mov word [esi + 4], cx
mov ecx, dword [esi + 8]
shl ecx, 0x10
mov dword [esi + 0xc], ecx
mov cx, word [esi + 4]
mov word [esi + 0x2e], cx
mov word [esi + 6], ax
cmp eax, ebp
jne 0x4c02d1
cmp edx, ebp
jl 0x4c02d1
jg 0x4c02cb
cmp edi, ebp
jb 0x4c02d1
mov eax, edi
mov ecx, edx
jmp 0x4c02d5
xor eax, eax
xor ecx, ecx
mov dword [esi + 0x10], eax
mov eax, edi
and eax, edx
mov dword [esi + 0x14], ecx
cmp eax, 0xffffffff
je 0x4c02ea
mov eax, edi
mov ecx, edx
jmp 0x4c02ee
xor eax, eax
xor ecx, ecx
mov dword [esi + 0x1c], ecx
mov edx, dword [esi + 0x1c]
mov ecx, eax
mov dword [esi + 0x18], eax
mov eax, 0xffff
mov dword [0x5894e8], ebp
mov dword [0x5894ec], ebp
mov dword [0x5894e0], ecx
mov dword [0x5894e4], edx
cmp word [esi + 0x2c], ax
jne 0x4c0327
xor ecx, ecx
mov word [esi + 0x2c], cx
lea ebx, [ecx + 1]
jmp 0x4c032b
mov ebx, dword [esp + 0x34]
mov edx, dword [esi + 0x38]
and edx, 0xff00
or edx, dword [esp + 0x28]
push ebp
push esi
mov dword [esi + 0x38], edx
call fcn.004bcab0
mov edi, eax
cmp edi, ebp
je 0x4c0363
mov dword [esp + 0x120c], 0xffffffff
lea ecx, [esp + 0x5c]
call fcn.0043b850
mov eax, edi
jmp 0x4c0167
mov eax, dword [0x520d30]
mov dword [esi + 0x30], eax
mov ecx, dword [0x520d34]
movzx eax, word [esi + 0x20]
mov dword [esi + 0x34], ecx
movzx ecx, word [esi + 0x22]
mov edx, dword [0x520cf8]
mov dword [esi + 0x28], edx
lea eax, [eax + ecx + 0x1e]
cdq
add dword [0x51f848], eax
mov edi, 0xc
adc dword [0x51f84c], edx
cmp dword [esp + 0x20], ebp
jne 0x4c0426
cmp byte [0x54aa5c], 0
je 0x4c0426
push 0x80
lea edx, [esp + 0x1104]
push edx
mov ecx, 0x54a95c
call fcn.004784f0
push 0x80
lea eax, [esp + 0x1084]
push eax
lea ecx, [esp + 0x1108]
push ecx
call fcn.00486550
mov edx, dword [esi + 0xc]
push edx
lea eax, [esp + 0x1084]
push eax
call fcn.004b7410
push 0x100
lea ecx, [esp + 0x1104]
push ecx
call fcn.004784d0
push 0x80
lea edx, [esp + 0x1084]
push edx
call fcn.004784d0
add dword [esi + 0x10], edi
adc dword [esi + 0x14], ebp
add dword [0x51f848], edi
adc dword [0x51f84c], ebp
mov eax, dword [0x520ccc]
push eax
call fcn.004c3dc2
add esp, 4
test eax, eax
je 0x4c0451
mov ecx, dword [0x51f844]
push ecx
push ebp
mov ecx, 0x51f7e8
call fcn.00433ba0
push 0xe
call fcn.004b7c00
mov edx, dword [0x520ccc]
push edx
call fcn.004c44ea
mov ebp, eax
mov eax, dword [0x520ccc]
push eax
mov edi, edx
call fcn.004c3dc2
add esp, 8
test eax, eax
je 0x4c0482
mov ecx, dword [0x520ccc]
push ecx
call fcn.004c577f
add esp, 4
mov edx, ebp
and edx, edi
xor ecx, ecx
cmp edx, 0xffffffff
je 0x4c04a0
cmp edi, ecx
jg 0x4c04a0
jl 0x4c0497
cmp ebp, ecx
jae 0x4c04a0
push 6
call fcn.004b7c00
xor ecx, ecx
or eax, 0xffffffff
mov dword [0x5890c0], ecx
mov dword [0x5890c4], ecx
mov dword [0x5894d8], eax
cmp dword [esp + 0x20], ecx
jne 0x4c05ec
cmp dword [esp + 0x14], ecx
je 0x4c04ec
cmp ebx, ecx
je 0x4c04d1
mov eax, 0xffff
mov word [esi + 0x2c], ax
lea ecx, [esp + 0x14]
push ecx
push esi
call fcn.004bfe50
mov edi, eax
mov eax, dword [0x5894d8]
mov ebp, edx
xor ecx, ecx
jmp 0x4c05f4
push 0x4000
call fcn.004c1d07
mov ebp, eax
xor ebx, ebx
add esp, 4
cmp ebp, ebx
jne 0x4c051d
mov dword [esp + 0x120c], 0xffffffff
lea ecx, [esp + 0x5c]
call fcn.0043b850
lea eax, [ebx + 4]
jmp 0x4c0167
cmp dword [esp + 0x38], ebx
je 0x4c058f
push ebx
push ebp
push 0xffffffffffffffff
call fcn.00427d90
push ebx
push 1
push ebp
mov dword [0x5894d8], eax
call fcn.004b7950
test eax, eax
je 0x4c0565
push ebp
call fcn.004c1404
add esp, 4
mov dword [esp + 0x120c], 0xffffffff
lea ecx, [esp + 0x5c]
call fcn.0043b850
mov eax, 0xa
jmp 0x4c0167
mov dword [0x5890c0], ebx
mov dword [0x5890c4], ebx
push ebp
call fcn.004c1404
mov edi, dword [0x5890c0]
mov ebp, dword [0x5890c4]
mov eax, dword [0x5894d8]
add esp, 4
xor ecx, ecx
jmp 0x4c05f4
push 0x4000
push ebp
call fcn.004bfcf0
mov edi, eax
cmp edi, ebx
jbe 0x4c0571
cmp edi, 0xffffffff
je 0x4c0571
push ebx
push edi
call fcn.0040a2f0
push edi
push 1
push ebp
call fcn.004b7950
cmp eax, edi
jne 0x4c05cc
push 0x4000
push ebp
call fcn.004bfcf0
mov edi, eax
cmp edi, ebx
ja 0x4c05a0
jmp 0x4c0571
push ebp
call fcn.004c1404
mov edx, dword [0x51f844]
add esp, 4
push edx
push ebx
mov ecx, 0x51f7e8
call fcn.00433ba0
jmp 0x4c0547
mov ebp, dword [esp + 0x40]
mov edi, dword [esp + 0x3c]
add dword [0x51f848], edi
adc dword [0x51f84c], ebp
cmp dword [esp + 0x20], ecx
je 0x4c0635
xor eax, eax
mov edx, 0xfff7
and word [esi + 4], dx
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], ecx
mov dword [esi + 0x18], ecx
mov dword [esi + 0x1c], ecx
mov word [esi + 6], ax
mov ecx, 0xa
mov eax, edx
and word [esi + 0x2e], ax
mov word [esi + 2], cx
jmp 0x4c084d
not eax
mov dword [esi + 0xc], eax
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], ebp
cmp byte [0x54aa5c], 0
je 0x4c0658
mov edx, edi
add edx, 0xc
mov eax, ebp
adc eax, ecx
mov dword [esi + 0x10], edx
mov dword [esi + 0x14], eax
mov edx, dword [0x5890c0]
mov eax, dword [0x5890c4]
mov dword [esi + 0x18], edx
mov dword [esi + 0x1c], eax
cmp dword [0x520ca8], ecx
jne 0x4c07d5
mov ecx, dword [0x520ccc]
push ecx
call fcn.004c0a00
test eax, eax
je 0x4c07d5
mov edx, dword [esi + 0x34]
mov eax, dword [esi + 0x30]
mov ecx, dword [0x520ccc]
push 0
push edx
push eax
push ecx
call fcn.004c414f
add esp, 0x10
test eax, eax
jne 0x4c07d5
cmp byte [0x54aa5c], al
je 0x4c06b7
add edi, 0xc
adc ebp, eax
mov edx, dword [0x520d58]
mov eax, edi
mov ecx, ebp
cmp edx, eax
jne 0x4c06ce
mov eax, dword [0x520d5c]
cmp eax, ecx
je 0x4c06d5
push 5
call fcn.004b7c00
mov eax, dword [esp + 0x14]
xor ebx, ebx
mov word [esi + 6], ax
cmp eax, ebx
je 0x4c06f3
cmp eax, 8
jne 0x4c06fc
mov ecx, 0x14
mov word [esi + 2], cx
jmp 0x4c06fc
mov edx, 0xa
mov word [esi + 2], dx
movzx eax, word [esi + 4]
test al, 1
jne 0x4c070d
and eax, 0xfff7
mov word [esi + 4], ax
mov ax, word [esi + 4]
mov word [esi + 0x2e], ax
cmp dword [0x520d40], 1
jne 0x4c075f
mov eax, dword [0x520d28]
cmp eax, dword [0x520ccc]
je 0x4c075f
mov ecx, dword [esi + 0x34]
mov edx, dword [esi + 0x30]
push ebx
push ecx
push edx
push eax
call fcn.004c414f
add esp, 0x10
test eax, eax
je 0x4c075f
mov dword [esp + 0x120c], 0xffffffff
lea ecx, [esp + 0x5c]
call fcn.0043b850
mov eax, 0xb
jmp 0x4c0167
push 1
push esi
call fcn.004bcab0
mov edi, eax
cmp edi, ebx
jne 0x4c0348
mov eax, dword [0x520d3c]
mov ecx, dword [0x520d38]
mov edx, dword [0x520ccc]
push ebx
push eax
push ecx
push edx
call fcn.004c414f
add esp, 0x10
test eax, eax
jne 0x4c0741
test byte [esi + 4], 1
je 0x4c084d
push esi
call fcn.004bd0b0
mov edi, eax
cmp edi, ebx
jne 0x4c0348
cmp dword [0x520cb4], ebx
je 0x4c07c6
add dword [0x51f848], 0x18
adc dword [0x51f84c], ebx
jmp 0x4c084d
add dword [0x51f848], 0x10
adc dword [0x51f84c], ebx
jmp 0x4c084d
mov ax, word [esi + 6]
cmp ax, word [esp + 0x14]
je 0x4c07fa
mov ecx, dword [0x51f844]
push ecx
push 0
mov ecx, 0x51f7e8
call fcn.00433ba0
push 5
call fcn.004b7c00
cmp dword [esp + 0x14], 0
jne 0x4c0818
cmp dword [esp + 0x1c], 0
jg 0x4c0818
jl 0x4c0811
cmp dword [esp + 0x18], 0
jae 0x4c0818
push 0x10
call fcn.004b7c00
push esi
call fcn.004bd0b0
mov edi, eax
test edi, edi
jne 0x4c0348
cmp dword [0x520cb4], eax
setne al
lea eax, [eax*8 + 0x10]
cdq
add dword [0x51f848], eax
adc dword [0x51f84c], edx
mov dx, word [esi + 0x2e]
mov word [esi + 4], dx
cmp word [esi + 0x22], 0
je 0x4c0872
mov eax, dword [esi + 0x40]
cmp eax, dword [esi + 0x44]
je 0x4c086c
push eax
call fcn.004c1404
add esp, 4
mov dword [esi + 0x40], 0
xor eax, eax
mov word [esi + 0x22], ax
mov dword [esp + 0x120c], 0xffffffff
lea ecx, [esp + 0x5c]
call fcn.0043b850
xor eax, eax
jmp 0x4c0167