Function at 0x4bf6d0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x24
movzx eax, byte [ecx]
push ebx
dec eax
mov dword [esp + 0xc], ecx
mov ebx, edx
mov dword [esp + 0x10], ebx
push esi
push edi
cmp eax, 6
ja case.default.0x4bf6f3
jmp dword [eax*4 + 0x4bfcc0]
mov eax, dword [ebx]
mov ecx, 0x9000
test word [eax + 0x10], cx
je 0x4bf71c
push 0
push 1
mov ecx, eax
call fcn.0044cd40
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [eax], 1
mov ecx, 4
mov dword [eax + 4], 0
mov word [eax + 0x10], cx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebx]
mov ecx, 0x9000
test word [eax + 0x10], cx
je 0x4bf75b
push 0
push 0
mov ecx, eax
call fcn.0044cd40
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [eax], 0
mov ecx, 4
mov dword [eax + 4], 0
mov word [eax + 0x10], cx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ecx + 8]
xorps xmm0, xmm0
movlpd qword [esp + 0x28], xmm0
mov dword [esp + 0x20], ecx
mov dl, byte [ecx]
mov al, dl
cmp dl, 0x2d
jne 0x4bf794
mov al, byte [ecx + 1]
mov esi, dword [esp + 0x2c]
lea ebx, [ecx + 1]
cmp dl, 0x2d
mov edx, dword [esp + 0x28]
cmovne ebx, ecx
cmp al, 0x30
jl 0x4bf82b
nop dword [eax]
cmp al, 0x39
jg 0x4bf827
movsx edi, al
inc ebx
sub edi, 0x30
cmp esi, 0xccccccc
jl 0x4bf807
jg 0x4bf8bf
cmp edx, 0xcccccccc
jb 0x4bf807
cmp esi, 0xccccccc
jg 0x4bf8bf
jl 0x4bf7eb
cmp edx, 0xcccccccc
ja 0x4bf8bf
mov al, byte [ebx]
cmp al, 0x30
jl 0x4bf7f9
cmp al, 0x39
jle 0x4bf8bf
cmp edi, 9
je 0x4bf8bf
cmp edi, 8
je 0x4bf85b
mov eax, edx
mov ecx, esi
shld ecx, eax, 2
shl eax, 2
add edx, eax
mov al, byte [ebx]
adc esi, ecx
shld esi, edx, 1
add edx, edx
add edx, edi
adc esi, 0
cmp al, 0x30
jge 0x4bf7b0
mov ecx, dword [esp + 0x20]
cmp byte [ecx], 0x2d
jne 0x4bf837
neg edx
adc esi, 0
neg esi
mov eax, dword [esp + 0x18]
mov ecx, 0x9000
mov eax, dword [eax]
test word [eax + 0x10], cx
je 0x4bf8aa
push esi
push edx
mov ecx, eax
call fcn.0044cd40
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x20]
cmp byte [eax], 0x2d
jne 0x4bf8bf
mov eax, dword [esp + 0x18]
mov ecx, 0x9000
mov eax, dword [eax]
test word [eax + 0x10], cx
je 0x4bf88d
push accept
push 0
mov ecx, eax
call fcn.0044cd40
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [eax], 0
mov ecx, 4
mov dword [eax + 4], accept
mov word [eax + 0x10], cx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [eax], edx
mov ecx, 4
mov dword [eax + 4], esi
mov word [eax + 0x10], cx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
mov esi, dword [ecx + 8]
test esi, esi
jne 0x4bf8d2
xor ecx, ecx
jmp 0x4bf8e6
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4bf8d7
sub ecx, edx
and ecx, 0x3fffffff
push 1
push ecx
lea edx, [esp + 0x30]
mov ecx, esi
call fcn.0042fcc0
mov esi, dword [ebx]
mov eax, 0x9000
add esp, 8
test word [esi + 0x10], ax
je 0x4bf90d
mov ecx, esi
call fcn.0044c6e0
jmp 0x4bf916
mov eax, 1
mov word [esi + 0x10], ax
movsd xmm0, qword [esp + 0x28]
movsd qword [esp + 0x28], xmm0
mov ecx, dword [esp + 0x2c]
mov eax, ecx
and eax, 0x7ff00000
cmp eax, 0x7ff00000
jne 0x4bf946
mov eax, dword [esp + 0x28]
and ecx, 0xfffff
or eax, ecx
jne 0x4bfcb6
mov eax, 8
movsd qword [esi], xmm0
mov word [esi + 0x10], ax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test byte [ecx + 1], 2
jne 0x4bf982
mov esi, dword [ecx + 4]
or eax, 0xffffffff
mov edx, dword [ecx + 8]
sub esi, 2
push eax
push 1
inc edx
mov ecx, ebx
push esi
call fcn.004530f0
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ecx + 4]
mov eax, dword [ecx + 8]
mov dword [esp + 0x10], eax
mov dword [esp + 0x24], edx
lea eax, [edx + 1]
push eax
call fcn.0042c130
mov edx, eax
add esp, 4
mov dword [esp + 0x20], edx
test edx, edx
jne 0x4bf9b6
push ebx
call fcn.00453730
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x24]
mov edi, 1
dec eax
xor esi, esi
mov dword [esp + 0x28], eax
cmp eax, edi
jbe 0x4bfc63
mov ecx, dword [esp + 0x10]
lea ebx, [edi + 8]
mov al, byte [edi + ecx]
cmp al, 0x5c
je 0x4bf9e4
mov byte [esi + edx], al
jmp 0x4bfc4f
mov al, byte [edi + ecx + 1]
inc edi
cmp al, 0x75
jne 0x4bfc20
mov bl, byte [ecx + edi + 2]
mov dl, byte [ecx + edi + 1]
mov ch, byte [ecx + edi + 3]
mov cl, dl
mov eax, dword [esp + 0x10]
sar cl, 6
and cl, 1
mov byte [esp + 0x14], dl
mov dh, byte [eax + edi + 4]
mov al, cl
shl al, 3
add edi, 4
sub al, cl
sub byte [esp + 0x14], al
mov eax, dword [esp + 0x14]
and eax, 0xf
shl eax, 4
mov dword [esp + 0x14], eax
mov al, bl
sar al, 6
and al, 1
mov cl, al
shl cl, 3
sub cl, al
mov al, bl
mov ebx, dword [esp + 0x14]
sub al, cl
and eax, 0xf
add ebx, eax
mov al, ch
sar al, 6
and al, 1
shl ebx, 4
mov cl, al
shl cl, 3
sub cl, al
mov al, ch
sub al, cl
and eax, 0xf
add ebx, eax
mov al, dh
sar al, 6
and al, 1
shl ebx, 4
mov cl, al
shl cl, 3
sub cl, al
mov al, dh
sub al, cl
and eax, 0xf
add ebx, eax
mov dword [esp + 0x14], ebx
test ebx, ebx
je 0x4bfc5b
cmp ebx, 0x7f
ja 0x4bfa9e
mov edx, dword [esp + 0x20]
mov byte [esi + edx], bl
mov ebx, 9
jmp 0x4bfc4b
mov eax, ebx
cmp ebx, 0x7ff
ja 0x4bfac8
mov edx, dword [esp + 0x20]
and bl, 0x3f
shr eax, 6
or al, 0xc0
mov byte [esi + edx], al
inc esi
or bl, 0x80
mov byte [esi + edx], bl
mov ebx, 9
jmp 0x4bfc4b
mov ecx, dword [esp + 0x10]
and eax, 0xfc00
cmp eax, 0xd800
jne 0x4bfbf2
mov eax, dword [esp + 0x24]
add eax, 0xfffffffa
cmp edi, eax
jae 0x4bfbf2
cmp byte [ecx + edi + 1], 0x5c
jne 0x4bfbf2
cmp byte [edi + ecx + 2], 0x75
jne 0x4bfbf2
mov bl, byte [edi + ecx + 4]
mov dl, byte [edi + ecx + 3]
mov ch, byte [edi + ecx + 5]
mov cl, dl
mov eax, dword [esp + 0x10]
sar cl, 6
and cl, 1
mov byte [esp + 0x1c], dl
mov dh, byte [edi + eax + 6]
mov al, cl
shl al, 3
sub al, cl
sub byte [esp + 0x1c], al
mov eax, dword [esp + 0x1c]
and eax, 0xf
shl eax, 4
mov dword [esp + 0x1c], eax
mov al, bl
sar al, 6
and al, 1
mov cl, al
shl cl, 3
sub cl, al
mov al, bl
mov ebx, dword [esp + 0x1c]
sub al, cl
and eax, 0xf
add ebx, eax
mov al, ch
sar al, 6
and al, 1
shl ebx, 4
mov cl, al
shl cl, 3
sub cl, al
mov al, ch
sub al, cl
and eax, 0xf
add ebx, eax
mov al, dh
sar al, 6
and al, 1
shl ebx, 4
mov cl, al
shl cl, 3
sub cl, al
mov al, dh
sub al, cl
and eax, 0xf
add ebx, eax
mov eax, ebx
and eax, 0xfc00
cmp eax, 0xdc00
jne 0x4bfbea
mov ecx, dword [esp + 0x14]
and ebx, 0x3ff
mov edx, dword [esp + 0x20]
and ecx, 0x3ff
add ecx, 0x40
add edi, 6
shl ecx, 0xa
add ecx, ebx
mov ebx, 9
mov eax, ecx
shr eax, 0x12
or al, 0xf0
mov byte [esi + edx], al
mov eax, ecx
shr eax, 0xc
and al, 0x3f
or al, 0x80
mov byte [esi + edx + 1], al
mov eax, ecx
shr eax, 6
and cl, 0x3f
and al, 0x3f
or al, 0x80
mov byte [esi + edx + 2], al
add esi, 3
or cl, 0x80
jmp 0x4bfc48
mov ebx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x20]
mov eax, ebx
shr eax, 0xc
or al, 0xe0
mov byte [esi + edx], al
mov eax, ebx
shr eax, 6
and bl, 0x3f
and al, 0x3f
or al, 0x80
mov byte [esi + edx + 1], al
add esi, 2
or bl, 0x80
mov byte [esi + edx], bl
mov ebx, 9
jmp 0x4bfc4f
cmp al, 0x62
jne 0x4bfc28
mov cl, 8
jmp 0x4bfc48
cmp al, 0x66
jne 0x4bfc30
mov cl, 0xc
jmp 0x4bfc48
cmp al, 0x6e
jne 0x4bfc38
mov cl, 0xa
jmp 0x4bfc48
cmp al, 0x72
jne 0x4bfc40
mov cl, 0xd
jmp 0x4bfc48
cmp al, 0x74
movzx ecx, al
cmove ecx, ebx
mov byte [esi + edx], cl
mov ecx, dword [esp + 0x10]
inc edi
inc esi
cmp edi, dword [esp + 0x28]
jb 0x4bf9d5
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x18]
mov eax, fcn.0042c1f0
mov byte [esi + edx], 0
push eax
push 1
push esi
mov ecx, ebx
call fcn.004530f0
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0
call fcn.004bf650
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebx]
mov ecx, 0x9000
test word [eax + 0x10], cx
je 0x4bfcad
mov ecx, eax
call fcn.0044c6e0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, 1
mov word [eax + 0x10], cx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret