Function at 0x4ef250
Capabilities:
Enumerate pe sections

Disassembly:
push 0xffffffffffffffff
push 0x629088
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x30
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x1c], ecx
mov eax, dword [esp + 0x50]
mov dword [esp + 0x48], 0
mov eax, dword [eax - 8]
test eax, eax
je 0x4efa4c
cmp eax, 0xa
jne 0x4efa4c
push 0x69cacc
lea ecx, [esp + 0x18]
call fcn.005ef2a9
push 0x69cacc
lea ecx, [esp + 0x14]
mov byte [esp + 0x4c], 1
call fcn.005ef2a9
mov ecx, dword [esp + 0x50]
mov byte [esp + 0x48], 2
mov ax, word [ecx]
lea ecx, [esp + 0x14]
push eax
call fcn.005e6532
mov edx, dword [esp + 0x14]
push 0
push edx
call fcn.00540f6f
add esp, 8
call fcn.0042cca8
mov edi, eax
mov eax, dword [esp + 0x50]
lea ecx, [esp + 0x14]
mov ax, word [eax + 2]
push eax
call fcn.005e6532
mov ecx, dword [esp + 0x14]
push 0
push ecx
call fcn.00540f6f
add esp, 8
call fcn.0042cca8
cmp di, 6
mov dword [esp + 0x34], eax
ja 0x4efa30
cmp ax, 6
ja 0x4efa30
cmp di, ax
ja 0x4efa30
mov eax, dword [esp + 0x50]
mov cx, word [eax + 0xa]
mov dx, word [eax + 8]
mov si, word [eax + 6]
mov ax, word [eax + 4]
and ecx, 0xffff
and edx, 0xffff
push ecx
and esi, 0xffff
push edx
and eax, 0xffff
push esi
push eax
lea edx, [esp + 0x20]
push str._c_c_c_c
push edx
call fcn.005e6f56
mov eax, dword [esp + 0x28]
push 0
push eax
call fcn.00540f6f
add esp, 0x20
call fcn.0042cca8
mov ebx, eax
mov esi, 0x64
mov ecx, ebx
mov dword [esp + 0x20], ebx
and ecx, 0xffff
mov eax, ecx
cdq
idiv esi
cmp edx, 0x3b
jg 0x4efa30
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
cmp edx, 0x17
jg 0x4efa30
mov eax, dword [esp + 0x50]
mov cx, word [eax + 0x12]
mov dx, word [eax + 0x10]
mov si, word [eax + 0xe]
mov ax, word [eax + 0xc]
and ecx, 0xffff
and edx, 0xffff
push ecx
and esi, 0xffff
push edx
and eax, 0xffff
push esi
push eax
lea edx, [esp + 0x20]
push str._c_c_c_c
push edx
call fcn.005e6f56
mov eax, dword [esp + 0x28]
push 0
push eax
call fcn.00540f6f
add esp, 0x20
call fcn.0042cca8
mov esi, eax
mov ebp, 0x64
mov ecx, esi
mov dword [esp + 0x24], esi
and ecx, 0xffff
mov eax, ecx
cdq
idiv ebp
cmp edx, 0x3b
jg 0x4efa30
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
cmp edx, 0x17
jg 0x4efa30
cmp bx, si
ja 0x4efa30
mov eax, dword [esp + 0x34]
and edi, 0xffff
and eax, 0xffff
mov dword [esp + 0x28], edi
cmp edi, eax
mov dword [esp + 0x3c], eax
jg 0x4ef9fc
mov edx, dword [esp + 0x28]
lea eax, [edx + edx*4]
lea ecx, [edx + eax*2]
mov eax, dword [esp + 0x1c]
lea ebx, [eax + ecx*4]
mov dword [esp + 0x34], ebx
mov eax, dword [ebx + 0x10]
test eax, eax
jne 0x4ef4e2
lea esi, [ebx + 0x14]
push 0xffffffffffffffff
push 0
mov ecx, esi
call fcn.004efcb0
lea edi, [ebx + 0x28]
push 0xffffffffffffffff
push 0
mov ecx, edi
call fcn.004efcb0
mov ebp, dword [esi + 8]
push 0xffffffffffffffff
lea ecx, [ebp + 1]
push ecx
mov ecx, esi
call fcn.004efcb0
mov edx, dword [esi + 4]
mov ax, word [esp + 0x20]
push 0xffffffffffffffff
mov word [edx + ebp*2], ax
mov esi, dword [edi + 8]
lea ecx, [esi + 1]
push ecx
mov ecx, edi
call fcn.004efcb0
mov edx, dword [edi + 4]
mov ax, word [esp + 0x24]
mov word [edx + esi*2], ax
mov dword [ebx + 0x10], 1
jmp 0x4ef9e7
mov ecx, dword [ebx + 0x1c]
mov eax, dword [ebx + 0x30]
cmp ecx, eax
mov dword [esp + 0x2c], ecx
jne 0x4efa30
xor edi, edi
test ecx, ecx
jle 0x4ef50e
mov eax, dword [ebx + 0x18]
mov esi, dword [esp + 0x20]
cmp si, word [eax]
jb 0x4ef50e
inc edi
add eax, 2
cmp edi, ecx
jl 0x4ef501
xor ebp, ebp
test ecx, ecx
mov dword [esp + 0x18], ebp
jle 0x4ef530
mov eax, dword [ebx + 0x18]
mov esi, dword [esp + 0x24]
cmp si, word [eax]
jb 0x4ef52c
inc ebp
add eax, 2
cmp ebp, ecx
jl 0x4ef51f
mov dword [esp + 0x18], ebp
dec ecx
test ecx, ecx
jl 0x4ef559
mov esi, dword [esp + 0x1c]
lea eax, [edx + edx*4 + 5]
lea eax, [edx + eax*2 + 1]
mov eax, dword [esi + eax*4]
lea esi, [eax + ecx*2]
mov ax, word [esp + 0x20]
cmp ax, word [esi]
ja 0x4ef559
dec ecx
sub esi, 2
test ecx, ecx
jge 0x4ef547
mov eax, dword [esp + 0x2c]
dec eax
test eax, eax
mov dword [esp + 0x30], eax
jl 0x4ef592
mov ebp, dword [esp + 0x1c]
lea esi, [edx + edx*4 + 5]
lea esi, [edx + esi*2 + 1]
mov esi, dword [ebp + esi*4]
mov ebp, dword [esp + 0x24]
lea esi, [esi + eax*2]
cmp bp, word [esi]
ja 0x4ef58a
dec eax
sub esi, 2
test eax, eax
jge 0x4ef57d
mov ebp, dword [esp + 0x18]
mov dword [esp + 0x30], eax
cmp edi, ebp
jne 0x4ef6ef
cmp ecx, eax
jne 0x4ef6ef
inc ecx
cmp edi, ecx
jne 0x4ef6a2
cmp edi, dword [esp + 0x2c]
je 0x4ef6ac
mov eax, dword [ebx + 0x1c]
lea esi, [ebx + 0x14]
cmp edi, eax
mov dword [esp + 0x34], eax
jl 0x4ef5d2
lea eax, [edi + 1]
push 0xffffffffffffffff
push eax
mov ecx, esi
call fcn.004efcb0
jmp 0x4ef615
mov ecx, dword [esp + 0x34]
push 0xffffffffffffffff
inc ecx
push ecx
mov ecx, esi
call fcn.004efcb0
mov edx, edi
mov eax, dword [esi + 4]
neg edx
shl edx, 0x1f
sub edx, edi
lea ebp, [edi + edi]
add edx, dword [esp + 0x34]
lea ecx, [edi + 1]
shl edx, 1
push edx
lea edx, [eax + ebp]
lea eax, [eax + ecx*2]
push edx
push eax
call fcn.0042c970
mov eax, dword [esi + 4]
add esp, 0xc
add ebp, eax
mov word [ebp], 0
mov edx, dword [esp + 0x20]
xor ecx, ecx
lea eax, [edi + edi]
mov ebp, dword [esi + 4]
add eax, 2
mov word [eax + ebp - 2], dx
mov ebp, ecx
dec ecx
test ebp, ebp
jne 0x4ef61e
mov ebp, dword [ebx + 0x30]
lea esi, [ebx + 0x28]
cmp edi, ebp
push 0xffffffffffffffff
jl 0x4ef649
lea eax, [edi + 1]
mov ecx, esi
push eax
call fcn.004efcb0
jmp 0x4ef687
lea ecx, [ebp + 1]
push ecx
mov ecx, esi
call fcn.004efcb0
mov edx, edi
mov eax, dword [esi + 4]
neg edx
shl edx, 0x1f
sub edx, edi
add edx, ebp
lea ebp, [edi + edi]
shl edx, 1
lea ecx, [eax + ebp]
push edx
push ecx
lea ecx, [edi + 1]
lea edx, [eax + ecx*2]
push edx
call fcn.0042c970
mov ecx, dword [esi + 4]
mov eax, ebp
add esp, 0xc
add eax, ecx
mov word [eax], 0
xor ecx, ecx
lea eax, [edi + edi]
mov edx, dword [esi + 4]
mov bp, word [esp + 0x24]
mov word [eax + edx], bp
add eax, 2
mov edx, ecx
dec ecx
test edx, edx
jne 0x4ef68c
cmp edi, dword [esp + 0x2c]
jne 0x4ef969
mov edi, dword [ebx + 0x1c]
lea esi, [ebx + 0x14]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.004efcb0
mov ecx, dword [esi + 4]
mov dx, word [esp + 0x20]
lea esi, [ebx + 0x28]
push 0xffffffffffffffff
mov word [ecx + edi*2], dx
mov ecx, esi
mov edi, dword [esi + 8]
lea eax, [edi + 1]
push eax
call fcn.004efcb0
mov ecx, dword [esi + 4]
mov dx, word [esp + 0x24]
mov word [ecx + edi*2], dx
jmp 0x4ef969
inc ecx
cmp edi, ecx
mov dword [esp + 0x38], ecx
jne 0x4ef84a
inc eax
cmp ebp, eax
mov dword [esp + 0x2c], eax
jne 0x4ef79c
mov eax, dword [ebx + 0x18]
mov cx, word [esp + 0x20]
lea esi, [edi + 1]
mov word [eax + edi*2], cx
lea eax, [edx + edx*4 + 5]
cmp esi, ebp
lea ecx, [edx + eax*2 + 1]
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + ecx*4]
mov cx, word [esp + 0x24]
mov word [eax + edi*2], cx
jge 0x4ef79c
mov ecx, dword [esp + 0x1c]
lea edx, [esi + esi*4]
lea eax, [esi + edx*2]
lea ebp, [ecx + eax*4 + 0x1c]
mov eax, dword [ebp]
sub eax, esi
dec eax
je 0x4ef762
mov ecx, dword [ebp - 4]
lea edx, [eax + eax]
push edx
lea eax, [ecx + esi*2 + 2]
lea ecx, [ecx + esi*2]
push eax
push ecx
call fcn.0042c970
add esp, 0xc
mov eax, dword [ebp]
dec eax
mov dword [ebp], eax
mov eax, dword [ebp + 0x14]
sub eax, esi
dec eax
je 0x4ef789
mov ecx, dword [ebp + 0x10]
lea edx, [eax + eax]
push edx
lea eax, [ecx + esi*2 + 2]
lea ecx, [ecx + esi*2]
push eax
push ecx
call fcn.0042c970
add esp, 0xc
mov eax, dword [ebp + 0x14]
add ebp, 0x2c
dec eax
inc esi
mov dword [ebp - 0x18], eax
mov eax, dword [esp + 0x18]
cmp esi, eax
jl 0x4ef742
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x2c]
dec edx
cmp edx, eax
jne 0x4ef84a
mov eax, dword [ebx + 0x18]
mov cx, word [esp + 0x20]
lea ebp, [edi + 1]
mov word [eax + edi*2], cx
mov eax, dword [esp + 0x18]
cmp ebp, eax
jge 0x4ef84a
lea edx, [ebp - 1]
lea eax, [ebp + ebp*4]
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x1c]
lea ecx, [ebp + eax*2]
lea ebx, [ebp + ebp + 2]
lea esi, [edx + ecx*4 + 0x1c]
mov eax, dword [esi]
sub eax, ebp
dec eax
je 0x4ef801
mov ecx, dword [esi - 4]
add eax, eax
push eax
lea edx, [ecx + ebx]
lea eax, [ecx + ebx - 2]
push edx
push eax
call fcn.0042c970
add esp, 0xc
mov eax, dword [esi]
mov edx, dword [esp + 0x2c]
dec eax
mov dword [esi], eax
mov eax, dword [esi + 0x14]
sub eax, edx
dec eax
je 0x4ef82b
mov ecx, dword [esi + 0x10]
lea edx, [eax + eax]
push edx
lea eax, [ecx + ebx - 2]
lea ecx, [ecx + ebx - 4]
push eax
push ecx
call fcn.0042c970
add esp, 0xc
mov edx, dword [esi + 0x14]
mov eax, dword [esp + 0x18]
dec edx
inc ebp
mov dword [esi + 0x14], edx
mov edx, dword [esp + 0x2c]
add ebx, 2
inc edx
add esi, 0x2c
cmp ebp, eax
mov dword [esp + 0x2c], edx
jl 0x4ef7e3
mov eax, dword [esp + 0x38]
lea edx, [edi - 1]
cmp edx, eax
jne 0x4ef965
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x18]
lea ecx, [eax + 1]
cmp ebx, ecx
mov dword [esp + 0x2c], ecx
jne 0x4ef8f3
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x1c]
cmp edi, ebx
mov ebp, edi
lea edx, [eax + eax*4 + 5]
lea eax, [eax + edx*2 + 1]
mov edx, dword [esi + eax*4]
mov ax, word [esp + 0x24]
mov word [edx + edi*2 - 2], ax
jge 0x4ef8f3
lea ecx, [edi + edi*4]
lea edx, [edi + ecx*2]
lea esi, [esi + edx*4 + 0x1c]
mov eax, dword [esi]
sub eax, ebp
dec eax
je 0x4ef8bb
mov ecx, dword [esi - 4]
add eax, eax
push eax
lea edx, [ecx + ebp*2 + 2]
lea eax, [ecx + ebp*2]
push edx
push eax
call fcn.0042c970
add esp, 0xc
mov eax, dword [esi]
dec eax
mov dword [esi], eax
mov eax, dword [esi + 0x14]
sub eax, ebp
dec eax
je 0x4ef8e0
mov ecx, dword [esi + 0x10]
lea edx, [eax + eax]
push edx
lea eax, [ecx + ebp*2 + 2]
lea ecx, [ecx + ebp*2]
push eax
push ecx
call fcn.0042c970
add esp, 0xc
mov eax, dword [esi + 0x14]
add esi, 0x2c
dec eax
inc ebp
mov dword [esi - 0x18], eax
cmp ebp, ebx
jl 0x4ef89d
mov ecx, dword [esp + 0x2c]
lea edx, [ebx - 1]
cmp edx, ecx
jne 0x4ef965
cmp edi, ebx
jge 0x4ef965
mov edx, dword [esp + 0x1c]
lea eax, [edi + edi*4]
lea ebp, [edi + edi + 2]
lea ecx, [edi + eax*2]
lea esi, [edx + ecx*4 + 0x1c]
mov eax, dword [esi]
sub eax, edi
dec eax
je 0x4ef92e
mov ecx, dword [esi - 4]
add eax, eax
push eax
lea edx, [ecx + ebp]
lea eax, [ecx + ebp - 2]
push edx
push eax
call fcn.0042c970
add esp, 0xc
mov edx, dword [esi]
dec edx
mov dword [esi], edx
mov eax, dword [esi + 0x14]
sub eax, edi
je 0x4ef953
mov ecx, dword [esi + 0x10]
lea edx, [eax + eax]
push edx
lea eax, [ecx + ebp - 2]
lea ecx, [ecx + ebp - 4]
push eax
push ecx
call fcn.0042c970
add esp, 0xc
mov ecx, dword [esi + 0x14]
add ebp, 2
dec ecx
inc edi
mov dword [esi + 0x14], ecx
add esi, 0x2c
cmp edi, ebx
jl 0x4ef910
mov ebx, dword [esp + 0x34]
mov esi, dword [ebx + 0x1c]
dec esi
test esi, esi
jle 0x4ef9e7
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x1c]
lea edi, [esi - 1]
lea edx, [eax + eax*4 + 5]
lea eax, [eax + edx*2 + 1]
lea ebp, [ecx + eax*4]
mov edx, dword [ebx + 0x18]
mov ecx, dword [ebp]
mov ax, word [edx + esi*2]
cmp ax, word [ecx + esi*2 - 2]
jne 0x4ef9e1
mov eax, dword [ebx + 0x1c]
sub eax, esi
dec eax
je 0x4ef9b7
mov ecx, edx
lea edx, [eax + eax]
push edx
lea eax, [ecx + esi*2 + 2]
lea ecx, [ecx + esi*2]
push eax
push ecx
call fcn.0042c970
add esp, 0xc
mov eax, dword [ebx + 0x1c]
dec eax
mov dword [ebx + 0x1c], eax
mov eax, dword [ebx + 0x30]
sub eax, edi
dec eax
je 0x4ef9de
mov ecx, dword [ebx + 0x2c]
lea edx, [eax + eax]
push edx
lea eax, [ecx + esi*2]
lea ecx, [ecx + esi*2 - 2]
push eax
push ecx
call fcn.0042c970
add esp, 0xc
dec dword [ebx + 0x30]
dec esi
dec edi
test esi, esi
jg 0x4ef987
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x3c]
inc eax
cmp eax, ecx
mov dword [esp + 0x28], eax
jle 0x4ef466
lea ecx, [esp + 0x10]
mov byte [esp + 0x48], 1
call fcn.005ef235
lea ecx, [esp + 0x14]
mov byte [esp + 0x48], 0
call fcn.005ef235
lea ecx, [esp + 0x50]
mov dword [esp + 0x48], 0xffffffff
call fcn.005ef235
mov eax, 1
jmp 0x4efa5f
lea ecx, [esp + 0x10]
mov byte [esp + 0x48], 1
call fcn.005ef235
lea ecx, [esp + 0x14]
mov byte [esp + 0x48], 0
call fcn.005ef235
lea ecx, [esp + 0x50]
mov dword [esp + 0x48], 0xffffffff
call fcn.005ef235
xor eax, eax
mov ecx, dword [esp + 0x40]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x3c
ret 4