Function at 0x4b8ef0
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x20
push esi
mov esi, dword [esp + 0x3c]
test esi, esi
jle 0x4b9126
mov ecx, dword [esp + 0x38]
mov eax, ecx
cdq
and edx, 7
push ebx
push ebp
add eax, edx
mov ebp, eax
sar ebp, 3
and ecx, 0x80000007
push edi
mov dword [esp + 0x28], ebp
jns 0x4b8f25
dec ecx
or ecx, 0xfffffff8
inc ecx
mov eax, dword [esp + 0x3c]
mov edi, dword [esp + 0x58]
mov dword [esp + 0x2c], ecx
lea ecx, [eax*4]
mov eax, dword [esp + 0x54]
lea edx, [eax + eax*2]
mov eax, dword [esp + 0x40]
sub eax, edi
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], edx
mov dword [esp + 0x14], edi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], esi
mov bl, 0xff
jmp 0x4b8f65
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x38]
mov ecx, dword [ecx]
mov edx, dword [ecx]
add eax, edi
push eax
call dword [edx + 4]
mov ecx, dword [esp + 0x20]
mov esi, eax
mov eax, dword [esp + 0x50]
add esi, ecx
mov ecx, dword [eax]
mov edx, dword [ecx]
push edi
call dword [edx + 4]
mov ecx, dword [esp + 0x24]
mov edi, eax
add edi, ecx
test ebp, ebp
jle 0x4b90db
lea ecx, [esi + 6]
lea edx, [edi + 5]
lea ecx, [ecx]
mov al, byte [edi]
mov byte [esp + 0x13], al
mov al, byte [edx - 4]
mov byte [esp + 0x48], al
mov al, byte [edx - 3]
mov byte [ecx - 4], al
mov al, byte [esp + 0x48]
mov byte [ecx - 5], al
mov byte [ecx - 3], bl
mov al, byte [esp + 0x13]
mov byte [esi], al
mov al, byte [edx - 2]
mov byte [esp + 0x13], al
mov al, byte [edx - 1]
mov byte [esp + 0x48], al
mov al, byte [edx]
mov byte [ecx], al
mov al, byte [esp + 0x48]
mov byte [ecx - 1], al
mov al, byte [esp + 0x13]
mov byte [ecx - 2], al
mov byte [ecx + 1], bl
mov al, byte [edx + 1]
mov byte [esp + 0x13], al
mov al, byte [edx + 2]
mov byte [esp + 0x48], al
mov al, byte [edx + 3]
mov byte [ecx + 4], al
mov al, byte [esp + 0x48]
mov byte [ecx + 3], al
mov al, byte [esp + 0x13]
mov byte [ecx + 2], al
mov byte [ecx + 5], bl
mov al, byte [edx + 4]
mov byte [esp + 0x13], al
mov al, byte [edx + 5]
mov byte [esp + 0x48], al
mov al, byte [edx + 6]
mov byte [ecx + 8], al
mov al, byte [esp + 0x48]
mov byte [ecx + 7], al
mov al, byte [esp + 0x13]
mov byte [ecx + 6], al
mov byte [ecx + 9], bl
mov al, byte [edx + 7]
mov byte [esp + 0x13], al
mov al, byte [edx + 8]
mov byte [esp + 0x48], al
mov al, byte [edx + 9]
mov byte [ecx + 0xc], al
mov al, byte [esp + 0x48]
mov byte [ecx + 0xb], al
mov al, byte [esp + 0x13]
mov byte [ecx + 0xa], al
mov byte [ecx + 0xd], bl
mov al, byte [edx + 0xa]
mov byte [esp + 0x13], al
mov al, byte [edx + 0xb]
mov byte [esp + 0x48], al
mov al, byte [edx + 0xc]
mov byte [ecx + 0x10], al
mov al, byte [esp + 0x48]
mov byte [ecx + 0xf], al
mov al, byte [esp + 0x13]
mov byte [ecx + 0xe], al
mov byte [ecx + 0x11], bl
mov al, byte [edx + 0xd]
mov byte [esp + 0x13], al
mov al, byte [edx + 0xe]
mov byte [esp + 0x48], al
mov al, byte [edx + 0xf]
mov byte [ecx + 0x14], al
mov al, byte [esp + 0x48]
mov byte [ecx + 0x13], al
mov al, byte [esp + 0x13]
mov byte [ecx + 0x15], bl
mov byte [ecx + 0x12], al
mov al, byte [edx + 0x10]
mov byte [esp + 0x13], al
mov al, byte [edx + 0x11]
mov byte [esp + 0x48], al
mov al, byte [edx + 0x12]
mov byte [ecx + 0x18], al
mov al, byte [esp + 0x48]
mov byte [ecx + 0x17], al
mov al, byte [esp + 0x13]
mov byte [ecx + 0x19], bl
mov byte [ecx + 0x16], al
add esi, 0x20
add ecx, 0x20
add edi, 0x18
add edx, 0x18
dec ebp
jne 0x4b8fa0
mov ebp, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
test eax, eax
jle 0x4b910b
mov dword [esp + 0x48], eax
mov al, byte [edi]
mov cl, byte [edi + 1]
mov dl, byte [edi + 2]
mov byte [esi], al
mov eax, dword [esp + 0x48]
mov byte [esi + 3], bl
mov byte [esi + 2], dl
mov byte [esi + 1], cl
add esi, 4
add edi, 3
dec eax
mov dword [esp + 0x48], eax
jne 0x4b90e7
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
inc ecx
dec eax
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
jne 0x4b8f5d
pop edi
pop ebp
pop ebx
pop esi
add esp, 0x20
ret