Function at 0x41bbf0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
push ebx
push esi
push edi
mov esi, ecx
push 0xa
push 0
mov ebx, esi
mov edi, eax
call fcn.0041a1a0
mov eax, dword [esi + 0x10]
mov ecx, dword [eax + 0x44]
add esp, 8
cmp ecx, dword [eax + 0x40]
jb 0x41bc20
mov eax, esi
call fcn.004289d0
mov ebx, dword [esi + 8]
push 0x60
push str.WORD_year_WORD_month_WORD_dayofweek_WORD_day_WORD_hour_WORD_minute_WORD_second_WORD_milliseconds
push esi
mov dword [esp + 0x18], ebx
call fcn.0042e590
mov edx, dword [esp + 0x18]
mov dword [ebx], eax
add esp, 0xc
mov ebx, 4
mov dword [edx + 8], ebx
add dword [esi + 8], 0x10
mov eax, dword [esi + 8]
push 7
add eax, 0xffffffe0
push 0x47da38
push esi
mov dword [esp + 0x18], eax
call fcn.0042e590
mov edx, dword [esp + 0x18]
mov dword [esp + 0x1c], eax
mov eax, dword [esi + 8]
add esp, 0xc
sub eax, 0x10
push eax
lea ecx, [esp + 0x14]
push ecx
push edx
push esi
mov dword [esp + 0x28], ebx
call fcn.00429320
add dword [esi + 8], 0xfffffff0
movzx ecx, word [edi + 6]
mov eax, dword [esi + 8]
mov dword [esp + 0x1c], ecx
mov dword [eax + 8], 3
push 3
fild dword [esp + 0x20]
push 0x47daa4
push esi
fstp qword [eax]
add dword [esi + 8], 0x10
mov eax, dword [esi + 8]
add eax, 0xffffffe0
mov dword [esp + 0x28], eax
call fcn.0042e590
mov edx, dword [esi + 8]
mov ecx, dword [esp + 0x28]
add esp, 0x1c
sub edx, 0x10
push edx
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push eax
push ecx
push esi
mov dword [esp + 0x28], ebx
call fcn.00429320
add dword [esi + 8], 0xfffffff0
movzx edx, word [edi + 4]
mov eax, dword [esi + 8]
mov dword [esp + 0x1c], edx
mov dword [eax + 8], 3
push 9
fild dword [esp + 0x20]
push str.dayofweek
push esi
fstp qword [eax]
add dword [esi + 8], 0x10
mov eax, dword [esi + 8]
add eax, 0xffffffe0
mov dword [esp + 0x28], eax
call fcn.0042e590
mov dword [esp + 0x2c], eax
mov eax, dword [esi + 8]
add esp, 0x1c
sub eax, 0x10
push eax
lea ecx, [esp + 0x14]
mov dword [esp + 0x1c], ebx
push ecx
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.00429320
add dword [esi + 8], 0xfffffff0
movzx ecx, word [edi + 2]
mov eax, dword [esi + 8]
mov dword [esp + 0x1c], ecx
mov dword [eax + 8], 3
push 5
fild dword [esp + 0x20]
push 0x47dab4
push esi
fstp qword [eax]
add dword [esi + 8], 0x10
mov eax, dword [esi + 8]
add eax, 0xffffffe0
mov dword [esp + 0x28], eax
call fcn.0042e590
mov edx, dword [esi + 8]
mov ecx, dword [esp + 0x28]
add esp, 0x1c
sub edx, 0x10
push edx
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push eax
push ecx
push esi
mov dword [esp + 0x28], ebx
call fcn.00429320
add dword [esi + 8], 0xfffffff0
movzx edx, word [edi]
mov eax, dword [esi + 8]
mov dword [esp + 0x1c], edx
mov dword [eax + 8], 3
push ebx
fild dword [esp + 0x20]
push 0x47dabc
push esi
fstp qword [eax]
add dword [esi + 8], 0x10
mov eax, dword [esi + 8]
add eax, 0xffffffe0
mov dword [esp + 0x28], eax
call fcn.0042e590
mov edx, dword [esp + 0x28]
mov dword [esp + 0x2c], eax
mov eax, dword [esi + 8]
add esp, 0x1c
sub eax, 0x10
push eax
lea ecx, [esp + 0x14]
push ecx
push edx
push esi
mov dword [esp + 0x28], ebx
call fcn.00429320
add dword [esi + 8], 0xfffffff0
movzx ecx, word [edi + 8]
mov eax, dword [esi + 8]
mov dword [esp + 0x1c], ecx
mov dword [eax + 8], 3
push ebx
fild dword [esp + 0x20]
push str.hour
push esi
fstp qword [eax]
add dword [esi + 8], 0x10
mov eax, dword [esi + 8]
add eax, 0xffffffe0
mov dword [esp + 0x28], eax
call fcn.0042e590
mov edx, dword [esi + 8]
add esp, 0x1c
sub edx, 0x10
mov dword [esp + 0x10], eax
push edx
lea eax, [esp + 0x14]
mov dword [esp + 0x1c], ebx
push eax
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.00429320
add dword [esi + 8], 0xfffffff0
movzx edx, word [edi + 0xa]
mov eax, dword [esi + 8]
mov dword [esp + 0x1c], edx
mov dword [eax + 8], 3
push 6
fild dword [esp + 0x20]
push str.minute
push esi
fstp qword [eax]
add dword [esi + 8], 0x10
mov eax, dword [esi + 8]
add eax, 0xffffffe0
mov dword [esp + 0x28], eax
call fcn.0042e590
mov edx, dword [esp + 0x28]
mov dword [esp + 0x2c], eax
mov eax, dword [esi + 8]
add esp, 0x1c
sub eax, 0x10
push eax
lea ecx, [esp + 0x14]
push ecx
push edx
push esi
mov dword [esp + 0x28], ebx
call fcn.00429320
add dword [esi + 8], 0xfffffff0
movzx ecx, word [edi + 0xc]
mov eax, dword [esi + 8]
mov dword [esp + 0x1c], ecx
mov dword [eax + 8], 3
push 6
fild dword [esp + 0x20]
push str.second
push esi
fstp qword [eax]
add dword [esi + 8], 0x10
mov eax, dword [esi + 8]
add eax, 0xffffffe0
mov dword [esp + 0x28], eax
call fcn.0042e590
mov edx, dword [esi + 8]
mov ecx, dword [esp + 0x28]
add esp, 0x1c
sub edx, 0x10
push edx
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push eax
push ecx
push esi
mov dword [esp + 0x28], ebx
call fcn.00429320
add dword [esi + 8], 0xfffffff0
movzx edx, word [edi + 0xe]
mov eax, dword [esi + 8]
mov dword [esp + 0x1c], edx
mov dword [eax + 8], 3
push 0xc
fild dword [esp + 0x20]
push str.milliseconds
push esi
fstp qword [eax]
add dword [esi + 8], 0x10
mov edi, dword [esi + 8]
add edi, 0xffffffe0
call fcn.0042e590
add esp, 0x1c
mov dword [esp + 0x10], eax
mov eax, dword [esi + 8]
sub eax, 0x10
push eax
lea ecx, [esp + 0x14]
push ecx
mov dword [esp + 0x20], ebx
push edi
push esi
call fcn.00429320
add dword [esi + 8], 0xfffffff0
push 0x47d998
mov edi, str.datetime
mov eax, esi
call fcn.0041c490
add esp, 0x14
call fcn.0041a660
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret