Function at 0x4ebd90
Capabilities:
Enumerate pe sections

Disassembly:
push 0xffffffffffffffff
push 0x624d48
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x30
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x1c], ecx
mov eax, dword [esp + 0x50]
mov dword [esp + 0x48], 0
mov eax, dword [eax - 8]
test eax, eax
je 0x4ec58c
cmp eax, 0xa
jne 0x4ec58c
push 0x6978ec
lea ecx, [esp + 0x18]
call fcn.005eb1a1
push 0x6978ec
lea ecx, [esp + 0x14]
mov byte [esp + 0x4c], 1
call fcn.005eb1a1
mov ecx, dword [esp + 0x50]
mov byte [esp + 0x48], 2
mov ax, word [ecx]
lea ecx, [esp + 0x14]
push eax
call fcn.005e242a
mov edx, dword [esp + 0x14]
push 0
push edx
call fcn.0053da8f
add esp, 8
call fcn.0042c878
mov edi, eax
mov eax, dword [esp + 0x50]
lea ecx, [esp + 0x14]
mov ax, word [eax + 2]
push eax
call fcn.005e242a
mov ecx, dword [esp + 0x14]
push 0
push ecx
call fcn.0053da8f
add esp, 8
call fcn.0042c878
cmp di, 6
mov dword [esp + 0x34], eax
ja 0x4ec570
cmp ax, 6
ja 0x4ec570
cmp di, ax
ja 0x4ec570
mov eax, dword [esp + 0x50]
mov cx, word [eax + 0xa]
mov dx, word [eax + 8]
mov si, word [eax + 6]
mov ax, word [eax + 4]
and ecx, 0xffff
and edx, 0xffff
push ecx
and esi, 0xffff
push edx
and eax, 0xffff
push esi
push eax
lea edx, [esp + 0x20]
push str._c_c_c_c
push edx
call fcn.005e2e4e
mov eax, dword [esp + 0x28]
push 0
push eax
call fcn.0053da8f
add esp, 0x20
call fcn.0042c878
mov ebx, eax
mov esi, 0x64
mov ecx, ebx
mov dword [esp + 0x20], ebx
and ecx, 0xffff
mov eax, ecx
cdq
idiv esi
cmp edx, 0x3b
jg 0x4ec570
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
cmp edx, 0x17
jg 0x4ec570
mov eax, dword [esp + 0x50]
mov cx, word [eax + 0x12]
mov dx, word [eax + 0x10]
mov si, word [eax + 0xe]
mov ax, word [eax + 0xc]
and ecx, 0xffff
and edx, 0xffff
push ecx
and esi, 0xffff
push edx
and eax, 0xffff
push esi
push eax
lea edx, [esp + 0x20]
push str._c_c_c_c
push edx
call fcn.005e2e4e
mov eax, dword [esp + 0x28]
push 0
push eax
call fcn.0053da8f
add esp, 0x20
call fcn.0042c878
mov esi, eax
mov ebp, 0x64
mov ecx, esi
mov dword [esp + 0x24], esi
and ecx, 0xffff
mov eax, ecx
cdq
idiv ebp
cmp edx, 0x3b
jg 0x4ec570
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
cmp edx, 0x17
jg 0x4ec570
cmp bx, si
ja 0x4ec570
mov eax, dword [esp + 0x34]
and edi, 0xffff
and eax, 0xffff
mov dword [esp + 0x28], edi
cmp edi, eax
mov dword [esp + 0x3c], eax
jg 0x4ec53c
mov edx, dword [esp + 0x28]
lea eax, [edx + edx*4]
lea ecx, [edx + eax*2]
mov eax, dword [esp + 0x1c]
lea ebx, [eax + ecx*4]
mov dword [esp + 0x34], ebx
mov eax, dword [ebx + 0x10]
test eax, eax
jne 0x4ec022
lea esi, [ebx + 0x14]
push 0xffffffffffffffff
push 0
mov ecx, esi
call fcn.004ec7f0
lea edi, [ebx + 0x28]
push 0xffffffffffffffff
push 0
mov ecx, edi
call fcn.004ec7f0
mov ebp, dword [esi + 8]
push 0xffffffffffffffff
lea ecx, [ebp + 1]
push ecx
mov ecx, esi
call fcn.004ec7f0
mov edx, dword [esi + 4]
mov ax, word [esp + 0x20]
push 0xffffffffffffffff
mov word [edx + ebp*2], ax
mov esi, dword [edi + 8]
lea ecx, [esi + 1]
push ecx
mov ecx, edi
call fcn.004ec7f0
mov edx, dword [edi + 4]
mov ax, word [esp + 0x24]
mov word [edx + esi*2], ax
mov dword [ebx + 0x10], 1
jmp 0x4ec527
mov ecx, dword [ebx + 0x1c]
mov eax, dword [ebx + 0x30]
cmp ecx, eax
mov dword [esp + 0x2c], ecx
jne 0x4ec570
xor edi, edi
test ecx, ecx
jle 0x4ec04e
mov eax, dword [ebx + 0x18]
mov esi, dword [esp + 0x20]
cmp si, word [eax]
jb 0x4ec04e
inc edi
add eax, 2
cmp edi, ecx
jl 0x4ec041
xor ebp, ebp
test ecx, ecx
mov dword [esp + 0x18], ebp
jle 0x4ec070
mov eax, dword [ebx + 0x18]
mov esi, dword [esp + 0x24]
cmp si, word [eax]
jb 0x4ec06c
inc ebp
add eax, 2
cmp ebp, ecx
jl 0x4ec05f
mov dword [esp + 0x18], ebp
dec ecx
test ecx, ecx
jl 0x4ec099
mov esi, dword [esp + 0x1c]
lea eax, [edx + edx*4 + 5]
lea eax, [edx + eax*2 + 1]
mov eax, dword [esi + eax*4]
lea esi, [eax + ecx*2]
mov ax, word [esp + 0x20]
cmp ax, word [esi]
ja 0x4ec099
dec ecx
sub esi, 2
test ecx, ecx
jge 0x4ec087
mov eax, dword [esp + 0x2c]
dec eax
test eax, eax
mov dword [esp + 0x30], eax
jl 0x4ec0d2
mov ebp, dword [esp + 0x1c]
lea esi, [edx + edx*4 + 5]
lea esi, [edx + esi*2 + 1]
mov esi, dword [ebp + esi*4]
mov ebp, dword [esp + 0x24]
lea esi, [esi + eax*2]
cmp bp, word [esi]
ja 0x4ec0ca
dec eax
sub esi, 2
test eax, eax
jge 0x4ec0bd
mov ebp, dword [esp + 0x18]
mov dword [esp + 0x30], eax
cmp edi, ebp
jne 0x4ec22f
cmp ecx, eax
jne 0x4ec22f
inc ecx
cmp edi, ecx
jne 0x4ec1e2
cmp edi, dword [esp + 0x2c]
je 0x4ec1ec
mov eax, dword [ebx + 0x1c]
lea esi, [ebx + 0x14]
cmp edi, eax
mov dword [esp + 0x34], eax
jl 0x4ec112
lea eax, [edi + 1]
push 0xffffffffffffffff
push eax
mov ecx, esi
call fcn.004ec7f0
jmp 0x4ec155
mov ecx, dword [esp + 0x34]
push 0xffffffffffffffff
inc ecx
push ecx
mov ecx, esi
call fcn.004ec7f0
mov edx, edi
mov eax, dword [esi + 4]
neg edx
shl edx, 0x1f
sub edx, edi
lea ebp, [edi + edi]
add edx, dword [esp + 0x34]
lea ecx, [edi + 1]
shl edx, 1
push edx
lea edx, [eax + ebp]
lea eax, [eax + ecx*2]
push edx
push eax
call fcn.0042c540
mov eax, dword [esi + 4]
add esp, 0xc
add ebp, eax
mov word [ebp], 0
mov edx, dword [esp + 0x20]
xor ecx, ecx
lea eax, [edi + edi]
mov ebp, dword [esi + 4]
add eax, 2
mov word [eax + ebp - 2], dx
mov ebp, ecx
dec ecx
test ebp, ebp
jne 0x4ec15e
mov ebp, dword [ebx + 0x30]
lea esi, [ebx + 0x28]
cmp edi, ebp
push 0xffffffffffffffff
jl 0x4ec189
lea eax, [edi + 1]
mov ecx, esi
push eax
call fcn.004ec7f0
jmp 0x4ec1c7
lea ecx, [ebp + 1]
push ecx
mov ecx, esi
call fcn.004ec7f0
mov edx, edi
mov eax, dword [esi + 4]
neg edx
shl edx, 0x1f
sub edx, edi
add edx, ebp
lea ebp, [edi + edi]
shl edx, 1
lea ecx, [eax + ebp]
push edx
push ecx
lea ecx, [edi + 1]
lea edx, [eax + ecx*2]
push edx
call fcn.0042c540
mov ecx, dword [esi + 4]
mov eax, ebp
add esp, 0xc
add eax, ecx
mov word [eax], 0
xor ecx, ecx
lea eax, [edi + edi]
mov edx, dword [esi + 4]
mov bp, word [esp + 0x24]
mov word [eax + edx], bp
add eax, 2
mov edx, ecx
dec ecx
test edx, edx
jne 0x4ec1cc
cmp edi, dword [esp + 0x2c]
jne 0x4ec4a9
mov edi, dword [ebx + 0x1c]
lea esi, [ebx + 0x14]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.004ec7f0
mov ecx, dword [esi + 4]
mov dx, word [esp + 0x20]
lea esi, [ebx + 0x28]
push 0xffffffffffffffff
mov word [ecx + edi*2], dx
mov ecx, esi
mov edi, dword [esi + 8]
lea eax, [edi + 1]
push eax
call fcn.004ec7f0
mov ecx, dword [esi + 4]
mov dx, word [esp + 0x24]
mov word [ecx + edi*2], dx
jmp 0x4ec4a9
inc ecx
cmp edi, ecx
mov dword [esp + 0x38], ecx
jne 0x4ec38a
inc eax
cmp ebp, eax
mov dword [esp + 0x2c], eax
jne 0x4ec2dc
mov eax, dword [ebx + 0x18]
mov cx, word [esp + 0x20]
lea esi, [edi + 1]
mov word [eax + edi*2], cx
lea eax, [edx + edx*4 + 5]
cmp esi, ebp
lea ecx, [edx + eax*2 + 1]
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + ecx*4]
mov cx, word [esp + 0x24]
mov word [eax + edi*2], cx
jge 0x4ec2dc
mov ecx, dword [esp + 0x1c]
lea edx, [esi + esi*4]
lea eax, [esi + edx*2]
lea ebp, [ecx + eax*4 + 0x1c]
mov eax, dword [ebp]
sub eax, esi
dec eax
je 0x4ec2a2
mov ecx, dword [ebp - 4]
lea edx, [eax + eax]
push edx
lea eax, [ecx + esi*2 + 2]
lea ecx, [ecx + esi*2]
push eax
push ecx
call fcn.0042c540
add esp, 0xc
mov eax, dword [ebp]
dec eax
mov dword [ebp], eax
mov eax, dword [ebp + 0x14]
sub eax, esi
dec eax
je 0x4ec2c9
mov ecx, dword [ebp + 0x10]
lea edx, [eax + eax]
push edx
lea eax, [ecx + esi*2 + 2]
lea ecx, [ecx + esi*2]
push eax
push ecx
call fcn.0042c540
add esp, 0xc
mov eax, dword [ebp + 0x14]
add ebp, 0x2c
dec eax
inc esi
mov dword [ebp - 0x18], eax
mov eax, dword [esp + 0x18]
cmp esi, eax
jl 0x4ec282
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x2c]
dec edx
cmp edx, eax
jne 0x4ec38a
mov eax, dword [ebx + 0x18]
mov cx, word [esp + 0x20]
lea ebp, [edi + 1]
mov word [eax + edi*2], cx
mov eax, dword [esp + 0x18]
cmp ebp, eax
jge 0x4ec38a
lea edx, [ebp - 1]
lea eax, [ebp + ebp*4]
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x1c]
lea ecx, [ebp + eax*2]
lea ebx, [ebp + ebp + 2]
lea esi, [edx + ecx*4 + 0x1c]
mov eax, dword [esi]
sub eax, ebp
dec eax
je 0x4ec341
mov ecx, dword [esi - 4]
add eax, eax
push eax
lea edx, [ecx + ebx]
lea eax, [ecx + ebx - 2]
push edx
push eax
call fcn.0042c540
add esp, 0xc
mov eax, dword [esi]
mov edx, dword [esp + 0x2c]
dec eax
mov dword [esi], eax
mov eax, dword [esi + 0x14]
sub eax, edx
dec eax
je 0x4ec36b
mov ecx, dword [esi + 0x10]
lea edx, [eax + eax]
push edx
lea eax, [ecx + ebx - 2]
lea ecx, [ecx + ebx - 4]
push eax
push ecx
call fcn.0042c540
add esp, 0xc
mov edx, dword [esi + 0x14]
mov eax, dword [esp + 0x18]
dec edx
inc ebp
mov dword [esi + 0x14], edx
mov edx, dword [esp + 0x2c]
add ebx, 2
inc edx
add esi, 0x2c
cmp ebp, eax
mov dword [esp + 0x2c], edx
jl 0x4ec323
mov eax, dword [esp + 0x38]
lea edx, [edi - 1]
cmp edx, eax
jne 0x4ec4a5
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x18]
lea ecx, [eax + 1]
cmp ebx, ecx
mov dword [esp + 0x2c], ecx
jne 0x4ec433
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x1c]
cmp edi, ebx
mov ebp, edi
lea edx, [eax + eax*4 + 5]
lea eax, [eax + edx*2 + 1]
mov edx, dword [esi + eax*4]
mov ax, word [esp + 0x24]
mov word [edx + edi*2 - 2], ax
jge 0x4ec433
lea ecx, [edi + edi*4]
lea edx, [edi + ecx*2]
lea esi, [esi + edx*4 + 0x1c]
mov eax, dword [esi]
sub eax, ebp
dec eax
je 0x4ec3fb
mov ecx, dword [esi - 4]
add eax, eax
push eax
lea edx, [ecx + ebp*2 + 2]
lea eax, [ecx + ebp*2]
push edx
push eax
call fcn.0042c540
add esp, 0xc
mov eax, dword [esi]
dec eax
mov dword [esi], eax
mov eax, dword [esi + 0x14]
sub eax, ebp
dec eax
je 0x4ec420
mov ecx, dword [esi + 0x10]
lea edx, [eax + eax]
push edx
lea eax, [ecx + ebp*2 + 2]
lea ecx, [ecx + ebp*2]
push eax
push ecx
call fcn.0042c540
add esp, 0xc
mov eax, dword [esi + 0x14]
add esi, 0x2c
dec eax
inc ebp
mov dword [esi - 0x18], eax
cmp ebp, ebx
jl 0x4ec3dd
mov ecx, dword [esp + 0x2c]
lea edx, [ebx - 1]
cmp edx, ecx
jne 0x4ec4a5
cmp edi, ebx
jge 0x4ec4a5
mov edx, dword [esp + 0x1c]
lea eax, [edi + edi*4]
lea ebp, [edi + edi + 2]
lea ecx, [edi + eax*2]
lea esi, [edx + ecx*4 + 0x1c]
mov eax, dword [esi]
sub eax, edi
dec eax
je 0x4ec46e
mov ecx, dword [esi - 4]
add eax, eax
push eax
lea edx, [ecx + ebp]
lea eax, [ecx + ebp - 2]
push edx
push eax
call fcn.0042c540
add esp, 0xc
mov edx, dword [esi]
dec edx
mov dword [esi], edx
mov eax, dword [esi + 0x14]
sub eax, edi
je 0x4ec493
mov ecx, dword [esi + 0x10]
lea edx, [eax + eax]
push edx
lea eax, [ecx + ebp - 2]
lea ecx, [ecx + ebp - 4]
push eax
push ecx
call fcn.0042c540
add esp, 0xc
mov ecx, dword [esi + 0x14]
add ebp, 2
dec ecx
inc edi
mov dword [esi + 0x14], ecx
add esi, 0x2c
cmp edi, ebx
jl 0x4ec450
mov ebx, dword [esp + 0x34]
mov esi, dword [ebx + 0x1c]
dec esi
test esi, esi
jle 0x4ec527
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x1c]
lea edi, [esi - 1]
lea edx, [eax + eax*4 + 5]
lea eax, [eax + edx*2 + 1]
lea ebp, [ecx + eax*4]
mov edx, dword [ebx + 0x18]
mov ecx, dword [ebp]
mov ax, word [edx + esi*2]
cmp ax, word [ecx + esi*2 - 2]
jne 0x4ec521
mov eax, dword [ebx + 0x1c]
sub eax, esi
dec eax
je 0x4ec4f7
mov ecx, edx
lea edx, [eax + eax]
push edx
lea eax, [ecx + esi*2 + 2]
lea ecx, [ecx + esi*2]
push eax
push ecx
call fcn.0042c540
add esp, 0xc
mov eax, dword [ebx + 0x1c]
dec eax
mov dword [ebx + 0x1c], eax
mov eax, dword [ebx + 0x30]
sub eax, edi
dec eax
je 0x4ec51e
mov ecx, dword [ebx + 0x2c]
lea edx, [eax + eax]
push edx
lea eax, [ecx + esi*2]
lea ecx, [ecx + esi*2 - 2]
push eax
push ecx
call fcn.0042c540
add esp, 0xc
dec dword [ebx + 0x30]
dec esi
dec edi
test esi, esi
jg 0x4ec4c7
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x3c]
inc eax
cmp eax, ecx
mov dword [esp + 0x28], eax
jle 0x4ebfa6
lea ecx, [esp + 0x10]
mov byte [esp + 0x48], 1
call fcn.005eb12d
lea ecx, [esp + 0x14]
mov byte [esp + 0x48], 0
call fcn.005eb12d
lea ecx, [esp + 0x50]
mov dword [esp + 0x48], 0xffffffff
call fcn.005eb12d
mov eax, 1
jmp 0x4ec59f
lea ecx, [esp + 0x10]
mov byte [esp + 0x48], 1
call fcn.005eb12d
lea ecx, [esp + 0x14]
mov byte [esp + 0x48], 0
call fcn.005eb12d
lea ecx, [esp + 0x50]
mov dword [esp + 0x48], 0xffffffff
call fcn.005eb12d
xor eax, eax
mov ecx, dword [esp + 0x40]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x3c
ret 4