Function at 0x497a20
Capabilities:
Enumerate pe sections

Disassembly:
push edi
mov eax, 0x4ec4ec4f
push esi
push ebx
mov edi, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mul edi
mov esi, edx
shr esi, 4
cmp edi, 0x33
jbe 0x497b7f
test ecx, ecx
je 0x497b7f
xor eax, eax
nop
cmp ebx, ecx
je 0x497a7c
lea edx, [ebx + 0x10]
cmp ecx, edx
jae 0x497a66
lea edx, [ecx + 0x10]
cmp ebx, edx
jb 0x497b90
mov edx, dword [ebx]
mov dword [ecx], edx
mov edx, dword [ebx + 4]
mov dword [ecx + 4], edx
mov edx, dword [ebx + 8]
mov dword [ecx + 8], edx
mov edx, dword [ebx + 0xc]
mov dword [ecx + 0xc], edx
movzx edx, byte [ebx + 0x11]
add eax, 1
add ebx, 0x34
add ecx, 0x34
mov byte [ecx - 0x24], dl
movzx edx, word [ebx - 0x24]
mov byte [ecx - 0x23], dl
movzx edx, byte [ebx - 0x21]
mov byte [ecx - 0x22], dl
movzx edx, word [ebx - 0x22]
mov byte [ecx - 0x21], dl
movzx edx, byte [ebx - 0x1d]
mov byte [ecx - 0x20], dl
movzx edx, word [ebx - 0x1e]
mov byte [ecx - 0x1f], dl
mov edx, dword [ebx - 0x20]
mov byte [ecx - 0x1e], dh
mov edx, dword [ebx - 0x20]
mov byte [ecx - 0x1d], dl
movzx edx, byte [ebx - 0x19]
mov byte [ecx - 0x1c], dl
movzx edx, word [ebx - 0x1a]
mov byte [ecx - 0x1b], dl
mov edx, dword [ebx - 0x1c]
mov byte [ecx - 0x1a], dh
mov edx, dword [ebx - 0x1c]
mov byte [ecx - 0x19], dl
movzx edx, byte [ebx - 0x15]
mov byte [ecx - 0x18], dl
movzx edx, word [ebx - 0x16]
mov byte [ecx - 0x17], dl
mov edx, dword [ebx - 0x18]
mov byte [ecx - 0x16], dh
mov edx, dword [ebx - 0x18]
mov byte [ecx - 0x15], dl
movzx edx, byte [ebx - 0x11]
mov byte [ecx - 0x14], dl
movzx edx, word [ebx - 0x12]
mov byte [ecx - 0x13], dl
mov edx, dword [ebx - 0x14]
mov byte [ecx - 0x12], dh
mov edx, dword [ebx - 0x14]
mov byte [ecx - 0x11], dl
movzx edx, byte [ebx - 0xd]
mov byte [ecx - 0x10], dl
movzx edx, word [ebx - 0xe]
mov byte [ecx - 0xf], dl
mov edx, dword [ebx - 0x10]
mov byte [ecx - 0xe], dh
mov edx, dword [ebx - 0x10]
mov byte [ecx - 0xd], dl
movzx edx, byte [ebx - 0xb]
mov byte [ecx - 0xc], dl
movzx edx, word [ebx - 0xc]
mov byte [ecx - 0xb], dl
movzx edx, byte [ebx - 9]
mov byte [ecx - 0xa], dl
movzx edx, word [ebx - 0xa]
mov byte [ecx - 9], dl
movzx edx, byte [ebx - 7]
mov byte [ecx - 8], dl
movzx edx, word [ebx - 8]
mov byte [ecx - 7], dl
movzx edx, byte [ebx - 5]
mov byte [ecx - 6], dl
movzx edx, word [ebx - 6]
mov byte [ecx - 5], dl
movzx edx, byte [ebx - 3]
mov byte [ecx - 4], dl
movzx edx, word [ebx - 4]
mov byte [ecx - 3], dl
movzx edx, byte [ebx - 1]
mov byte [ecx - 2], dl
movzx edx, word [ebx - 2]
mov byte [ecx - 1], dl
cmp eax, esi
jb 0x497a50
imul eax, esi, 0x34
pop ebx
pop esi
pop edi
ret
cmp ecx, ebx
jb 0x497c08
movzx edx, byte [ebx + 0xf]
mov byte [ecx + 0xf], dl
movzx edx, byte [ebx + 0xe]
mov byte [ecx + 0xe], dl
movzx edx, byte [ebx + 0xd]
mov byte [ecx + 0xd], dl
movzx edx, byte [ebx + 0xc]
mov byte [ecx + 0xc], dl
movzx edx, byte [ebx + 0xb]
mov byte [ecx + 0xb], dl
movzx edx, byte [ebx + 0xa]
mov byte [ecx + 0xa], dl
movzx edx, byte [ebx + 9]
mov byte [ecx + 9], dl
movzx edx, byte [ebx + 8]
mov byte [ecx + 8], dl
movzx edx, byte [ebx + 7]
mov byte [ecx + 7], dl
movzx edx, byte [ebx + 6]
mov byte [ecx + 6], dl
movzx edx, byte [ebx + 5]
mov byte [ecx + 5], dl
movzx edx, byte [ebx + 4]
mov byte [ecx + 4], dl
movzx edx, byte [ebx + 3]
mov byte [ecx + 3], dl
movzx edx, byte [ebx + 2]
mov byte [ecx + 2], dl
movzx edx, byte [ebx + 1]
mov byte [ecx + 1], dl
jmp 0x497a7c
movzx edx, byte [ebx]
mov byte [ecx], dl
movzx edx, byte [ebx + 1]
mov byte [ecx + 1], dl
movzx edx, byte [ebx + 2]
mov byte [ecx + 2], dl
movzx edx, byte [ebx + 3]
mov byte [ecx + 3], dl
movzx edx, byte [ebx + 4]
mov byte [ecx + 4], dl
movzx edx, byte [ebx + 5]
mov byte [ecx + 5], dl
movzx edx, byte [ebx + 6]
mov byte [ecx + 6], dl
movzx edx, byte [ebx + 7]
mov byte [ecx + 7], dl
movzx edx, byte [ebx + 8]
mov byte [ecx + 8], dl
movzx edx, byte [ebx + 9]
mov byte [ecx + 9], dl
movzx edx, byte [ebx + 0xa]
mov byte [ecx + 0xa], dl
movzx edx, byte [ebx + 0xb]
mov byte [ecx + 0xb], dl
movzx edx, byte [ebx + 0xc]
mov byte [ecx + 0xc], dl
movzx edx, byte [ebx + 0xd]
mov byte [ecx + 0xd], dl
movzx edx, byte [ebx + 0xe]
mov byte [ecx + 0xe], dl
movzx edx, byte [ebx + 0xf]
mov byte [ecx + 0xf], dl
jmp 0x497a7c