Function at 0x4b9bf0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
mov edi, edx
mov ebx, ecx
cmp dword [edi], 0x54
je 0x4b9c04
pop edi
xor eax, eax
pop ebx
pop ebp
ret
mov edx, dword [ebx]
push esi
mov esi, dword [ebp + 8]
mov eax, dword [edx]
mov dword [esi], eax
movzx ecx, byte [edx + 7]
shl ecx, 8
movzx eax, byte [edx + 6]
or ecx, eax
movzx eax, byte [edx + 5]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 4]
shl ecx, 8
or ecx, eax
mov dword [esi + 4], ecx
movzx ecx, byte [edx + 0xb]
shl ecx, 8
movzx eax, byte [edx + 0xa]
or ecx, eax
movzx eax, byte [edx + 9]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 8]
shl ecx, 8
or ecx, eax
mov dword [esi + 8], ecx
movzx ecx, byte [edx + 0xf]
movzx eax, byte [edx + 0xe]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 0xd]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 0xc]
shl ecx, 8
or ecx, eax
mov dword [esi + 0xc], ecx
movzx ecx, byte [edx + 0x13]
movzx eax, byte [edx + 0x12]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 0x11]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 0x10]
shl ecx, 8
or ecx, eax
mov dword [esi + 0x10], ecx
movzx ecx, byte [edx + 0x17]
movzx eax, byte [edx + 0x16]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 0x15]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 0x14]
shl ecx, 8
or ecx, eax
mov dword [esi + 0x14], ecx
movzx ecx, byte [edx + 0x1b]
movzx eax, byte [edx + 0x1a]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 0x19]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 0x18]
shl ecx, 8
or ecx, eax
mov dword [esi + 0x18], ecx
movzx ecx, byte [edx + 0x1f]
movzx eax, byte [edx + 0x1e]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 0x1d]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 0x1c]
shl ecx, 8
or ecx, eax
mov dword [esi + 0x1c], ecx
movzx ecx, byte [edx + 0x23]
movzx eax, byte [edx + 0x22]
shl ecx, 8
or ecx, eax
mov dword [edi], 0
movzx eax, byte [edx + 0x21]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 0x20]
shl ecx, 8
or ecx, eax
mov dword [esi + 0x20], ecx
movzx ecx, byte [edx + 0x27]
movzx eax, byte [edx + 0x26]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 0x25]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 0x24]
shl ecx, 8
or ecx, eax
mov dword [esi + 0x24], ecx
movzx ecx, byte [edx + 0x2b]
movzx eax, byte [edx + 0x2a]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 0x29]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 0x28]
shl ecx, 8
or ecx, eax
mov dword [esi + 0x28], ecx
movzx ecx, byte [edx + 0x2f]
movzx eax, byte [edx + 0x2e]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 0x2d]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 0x2c]
shl ecx, 8
or ecx, eax
mov dword [esi + 0x2c], ecx
movzx ecx, byte [edx + 0x33]
movzx eax, byte [edx + 0x32]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 0x31]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 0x30]
shl ecx, 8
or ecx, eax
mov dword [esi + 0x30], ecx
mov eax, dword [edx + 0x34]
mov dword [esi + 0x34], eax
mov eax, dword [edx + 0x38]
mov dword [esi + 0x38], eax
mov eax, dword [edx + 0x3c]
mov dword [esi + 0x3c], eax
mov eax, dword [edx + 0x40]
mov dword [esi + 0x40], eax
mov eax, dword [edx + 0x44]
mov dword [esi + 0x44], eax
mov eax, dword [edx + 0x48]
mov dword [esi + 0x48], eax
mov eax, dword [edx + 0x4c]
mov dword [esi + 0x4c], eax
mov eax, dword [edx + 0x50]
mov dword [esi + 0x50], eax
lea eax, [edx + 0x54]
cmp dword [esi], 0x50535449
mov dword [ebx], eax
jne 0x4b9def
cmp dword [esi + 4], 1
je 0x4b9df6
pop esi
pop edi
xor eax, eax
pop ebx
pop ebp
ret
xor eax, eax
cmp dword [esi + 8], 0x54
jne 0x4b9e04
cmp dword [esi + 0x10], eax
setne al
pop esi
pop edi
pop ebx
pop ebp
ret