Function at 0x4937d0
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0xc
mov eax, dword [esp + 0x14]
movzx ecx, byte [eax + 3]
movzx edx, byte [eax + 2]
mov dword [esp], edx
push ebx
movzx ebx, byte [eax + 5]
push ebp
movzx ebp, byte [eax + 4]
mov dword [esp + 0x1c], ecx
movzx ecx, byte [eax + 1]
push esi
movzx esi, byte [eax + 7]
push edi
movzx edi, byte [eax + 6]
mov dword [esp + 0x14], ecx
movzx ecx, byte [eax]
mov edx, esi
and edx, 0x80
add edx, edx
mov eax, edi
and eax, 0x80
or edx, eax
add edx, edx
mov eax, ebx
and eax, 0x80
or edx, eax
add edx, edx
mov eax, ebp
and eax, 0x80
or edx, eax
mov eax, dword [esp + 0x24]
and eax, 0x80
add edx, edx
or edx, eax
mov eax, dword [esp + 0x10]
and eax, 0x80
add edx, edx
or edx, eax
mov eax, dword [esp + 0x14]
and eax, 0x80
add edx, edx
or edx, eax
add edx, edx
mov eax, ecx
and eax, 0x80
or edx, eax
mov eax, esi
and eax, 0x40
or edx, eax
add edx, edx
mov eax, edi
and eax, 0x40
or edx, eax
add edx, edx
mov eax, ebx
and eax, 0x40
or edx, eax
add edx, edx
mov eax, ebp
and eax, 0x40
or edx, eax
mov eax, dword [esp + 0x24]
and eax, 0x40
add edx, edx
or edx, eax
mov eax, dword [esp + 0x10]
and eax, 0x40
add edx, edx
or edx, eax
mov eax, dword [esp + 0x14]
and eax, 0x40
add edx, edx
or edx, eax
mov eax, ecx
and eax, 0x40
add edx, edx
or edx, eax
mov eax, esi
and eax, 0x20
mov dword [esp + 0x18], ebp
or edx, eax
add edx, edx
mov eax, edi
and eax, 0x20
or edx, eax
add edx, edx
mov eax, ebx
and eax, 0x20
or edx, eax
mov eax, ebp
and eax, 0x20
shr ebp, 1
and ebp, 8
add edx, edx
or edx, eax
mov eax, dword [esp + 0x24]
and eax, 0x20
add edx, edx
or edx, eax
mov eax, dword [esp + 0x10]
and eax, 0x20
add edx, edx
or edx, eax
mov eax, ebx
and eax, 0x10
or ebp, eax
shr ebp, 1
mov eax, edi
and eax, 0x10
or ebp, eax
shr ebp, 1
mov eax, ecx
and eax, 0x20
or ebp, eax
mov eax, esi
and eax, 0x10
or ebp, eax
mov eax, dword [esp + 0x14]
shr ebp, 1
and eax, 0x20
add edx, edx
or edx, ebp
or edx, eax
mov eax, esi
and eax, 2
add eax, eax
mov ebp, edi
and ebp, 2
or eax, ebp
add eax, eax
mov ebp, ebx
and ebp, 2
or eax, ebp
mov ebp, dword [esp + 0x18]
add eax, eax
and ebp, 2
or eax, ebp
mov ebp, dword [esp + 0x24]
add eax, eax
and ebp, 2
or eax, ebp
mov ebp, dword [esp + 0x10]
add eax, eax
and ebp, 2
or eax, ebp
mov ebp, dword [esp + 0x14]
add eax, eax
and ebp, 2
or eax, ebp
add eax, eax
mov ebp, ecx
and ebp, 2
or eax, ebp
add eax, eax
add eax, eax
mov ebp, esi
and ebp, 4
or eax, ebp
mov ebp, edi
add eax, eax
and ebp, 4
or eax, ebp
add eax, eax
mov ebp, ebx
and ebp, 4
or eax, ebp
mov ebp, dword [esp + 0x18]
add eax, eax
and ebp, 4
or eax, ebp
mov ebp, dword [esp + 0x24]
add eax, eax
and ebp, 4
or eax, ebp
mov ebp, dword [esp + 0x10]
add eax, eax
and ebp, 4
or eax, ebp
mov ebp, dword [esp + 0x14]
add eax, eax
and ebp, 4
or eax, ebp
add eax, eax
mov ebp, ecx
and ebp, 4
or eax, ebp
add eax, eax
add eax, eax
and esi, 8
or eax, esi
mov esi, dword [esp + 0x18]
add eax, eax
and edi, 8
or eax, edi
add eax, eax
and ebx, 8
or eax, ebx
add eax, eax
and esi, 8
or eax, esi
mov esi, dword [esp + 0x24]
add eax, eax
mov edi, esi
and edi, 8
or eax, edi
mov edi, dword [esp + 0x10]
add eax, eax
mov ebx, edi
and ebx, 8
or eax, ebx
mov ebx, dword [esp + 0x14]
add eax, eax
mov ebp, ebx
and ebp, 8
or eax, ebp
mov ebp, ecx
shr ecx, 1
and ecx, 8
and ebx, 0x10
or ecx, ebx
shr ecx, 1
and edi, 0x10
or ecx, edi
add eax, eax
shr ecx, 1
and ebp, 8
and esi, 0x10
or eax, ebp
or ecx, esi
add eax, eax
shr ecx, 1
or eax, ecx
xor esi, esi
lea esp, [esp]
movzx edi, byte [esi + 0x4f3e24]
mov ebx, 0x1c
sub ebx, edi
mov ecx, ebx
mov ebp, edx
shr ebp, cl
mov ecx, edi
shl edx, cl
mov ecx, ebx
or edx, ebp
and edx, 0xfffffff
mov ebp, eax
shr ebp, cl
mov ecx, edi
shl eax, cl
mov edi, edx
and edi, 0x10
shl edi, 5
mov ecx, edx
and ecx, 0x800
or edi, ecx
add edi, edi
mov ecx, edx
and ecx, 0x20
or edi, ecx
add edi, edi
mov ecx, edx
and ecx, 0x4004
or edi, ecx
shl edi, 4
mov ecx, edx
and ecx, 0x200
or edi, ecx
add edi, edi
mov ecx, edx
and ecx, 0x20000
or edi, ecx
add edi, edi
add edi, edi
or eax, ebp
and eax, 0xfffffff
mov ecx, eax
and ecx, 0x10
or edi, ecx
add edi, edi
mov ecx, eax
and ecx, 2
or edi, ecx
shl edi, 4
mov ecx, edx
and ecx, 0x10000
or edi, ecx
add edi, edi
mov ecx, eax
and ecx, 1
or edi, ecx
add edi, edi
mov ecx, edx
and ecx, 0x800000
or edi, ecx
mov ecx, eax
shr ecx, 7
and ecx, 0x8000
mov ebx, eax
and ebx, 0x2020000
or ecx, ebx
shr ecx, 5
mov ebx, eax
and ebx, 0x80000
or ecx, ebx
shr ecx, 2
mov ebx, eax
and ebx, 0x1000
or ecx, ebx
mov ebx, edx
and ebx, 0x1000000
shr ecx, 1
or ecx, ebx
add edi, edi
shr ecx, 2
mov ebx, edx
and ebx, 0x100000
or ecx, ebx
shr ecx, 1
mov ebx, eax
and ebx, 0x88
or ecx, ebx
shr ecx, 1
mov ebx, edx
and ebx, 0x8000000
or ecx, ebx
mov ebx, eax
and ebx, 0x8000
or ecx, ebx
shr ecx, 2
or edi, ecx
mov ecx, eax
and ecx, 0x200
or edi, ecx
mov ecx, dword [esp + 0x20]
mov dword [ecx + esi*8], edi
mov edi, eax
shr edi, 2
and edi, 0x2000000
mov ebx, eax
and ebx, 0x1000000
or edi, ebx
shr edi, 6
mov ebx, eax
and ebx, 0x100000
or edi, ebx
shr edi, 4
mov ebx, eax
and ebx, 0x800000
or edi, ebx
shr edi, 1
mov ebx, eax
and ebx, 0x4000000
or edi, ebx
shr edi, 3
mov ebx, eax
and ebx, 0x4000
or edi, ebx
mov ebx, edx
and ebx, 0x4000000
or edi, ebx
shr edi, 5
mov ebx, eax
and ebx, 0x400
or edi, ebx
shr edi, 1
mov ebx, eax
and ebx, 0x10000
or edi, ebx
shr edi, 1
mov ebx, eax
and ebx, 0x40
or edi, ebx
shr edi, 2
mov ebx, eax
and ebx, 0x800
or edi, ebx
mov ebx, edx
and ebx, 0x200000
or edi, ebx
mov ebx, edx
and ebx, 1
shl ebx, 0xa
mov ebp, edx
and ebp, 0x82
or ebx, ebp
shl ebx, 4
mov ebp, edx
and ebp, 0x2000
or ebx, ebp
mov ebp, edx
and ebp, 0x100
shl ebx, 4
or ebx, ebp
shr edi, 1
add ebx, ebx
mov ebp, edx
and ebp, 0x1000
or ebx, ebp
add ebx, ebx
add ebx, ebx
add ebx, ebx
mov ebp, eax
and ebp, 0x20
or ebx, ebp
mov ebp, edx
and ebp, 0x40000
or ebx, ebp
add ebx, ebx
add ebx, ebx
mov ebp, edx
and ebp, 0x2400000
or ebx, ebp
add ebx, ebx
add ebx, ebx
mov ebp, edx
and ebp, 0x8000
or ebx, ebp
add ebx, ebx
add ebx, ebx
or edi, ebx
mov ebx, eax
and ebx, 0x100
or edi, ebx
mov dword [ecx + esi*8 + 4], edi
inc esi
cmp esi, 0x10
jne 0x493a30
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret