Function at 0x4fd0dd
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x1005f74c]
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
xor eax, ebp
mov esi, ecx
push 0x14
mov ecx, edi
mov dword [ebp - 4], eax
call dword [0x1004b144]
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 0x18]
shl eax, 3
mov edx, ecx
shr edx, 0x1d
or eax, edx
mov ebx, eax
shr ebx, 0x18
mov byte [ebp - 0xc], bl
mov ebx, eax
shr ebx, 0x10
mov byte [ebp - 9], al
mov edx, ecx
shl edx, 3
mov byte [ebp - 0xb], bl
mov ebx, eax
mov eax, edx
shr eax, 0x18
mov byte [ebp - 8], al
mov eax, edx
shr eax, 0x10
mov byte [ebp - 7], al
mov eax, edx
shr eax, 8
push 0x38
mov byte [ebp - 6], al
shr ebx, 8
and ecx, 0x3f
pop eax
cmp ecx, eax
mov byte [ebp - 0xa], bl
mov byte [ebp - 5], dl
jb 0x4fd157
push 0x78
pop eax
sub eax, ecx
push eax
push 0x1005ece8
mov ecx, esi
call fcn.004fd042
push 8
lea eax, [ebp - 0xc]
push eax
mov ecx, esi
call fcn.004fd042
push 0x10
pop edx
cmp dword [edi + 0x18], edx
lea eax, [edi + 4]
jb 0x4fd182
mov ecx, dword [eax]
jmp 0x4fd184
mov ecx, eax
mov bl, byte [esi + 3]
mov byte [ecx], bl
cmp dword [edi + 0x18], edx
jb 0x4fd192
mov ecx, dword [eax]
jmp 0x4fd194
mov ecx, eax
mov bl, byte [esi + 2]
mov byte [ecx + 1], bl
cmp dword [edi + 0x18], edx
jb 0x4fd1a3
mov ecx, dword [eax]
jmp 0x4fd1a5
mov ecx, eax
mov ebx, dword [esi]
shr ebx, 8
mov byte [ecx + 2], bl
cmp dword [edi + 0x18], edx
jb 0x4fd1b6
mov ecx, dword [eax]
jmp 0x4fd1b8
mov ecx, eax
mov bl, byte [esi]
mov byte [ecx + 3], bl
cmp dword [edi + 0x18], edx
jb 0x4fd1c6
mov ecx, dword [eax]
jmp 0x4fd1c8
mov ecx, eax
mov bl, byte [esi + 7]
mov byte [ecx + 4], bl
cmp dword [edi + 0x18], edx
jb 0x4fd1d7
mov ecx, dword [eax]
jmp 0x4fd1d9
mov ecx, eax
mov bl, byte [esi + 6]
mov byte [ecx + 5], bl
cmp dword [edi + 0x18], edx
jb 0x4fd1e8
mov ecx, dword [eax]
jmp 0x4fd1ea
mov ecx, eax
mov ebx, dword [esi + 4]
shr ebx, 8
mov byte [ecx + 6], bl
cmp dword [edi + 0x18], edx
jb 0x4fd1fc
mov ecx, dword [eax]
jmp 0x4fd1fe
mov ecx, eax
mov bl, byte [esi + 4]
mov byte [ecx + 7], bl
cmp dword [edi + 0x18], edx
jb 0x4fd20d
mov ecx, dword [eax]
jmp 0x4fd20f
mov ecx, eax
mov bl, byte [esi + 0xb]
mov byte [ecx + 8], bl
cmp dword [edi + 0x18], edx
jb 0x4fd21e
mov ecx, dword [eax]
jmp 0x4fd220
mov ecx, eax
mov bl, byte [esi + 0xa]
mov byte [ecx + 9], bl
cmp dword [edi + 0x18], edx
jb 0x4fd22f
mov ecx, dword [eax]
jmp 0x4fd231
mov ecx, eax
mov ebx, dword [esi + 8]
shr ebx, 8
mov byte [ecx + 0xa], bl
cmp dword [edi + 0x18], edx
jb 0x4fd243
mov ecx, dword [eax]
jmp 0x4fd245
mov ecx, eax
mov bl, byte [esi + 8]
mov byte [ecx + 0xb], bl
cmp dword [edi + 0x18], edx
jb 0x4fd254
mov ecx, dword [eax]
jmp 0x4fd256
mov ecx, eax
mov bl, byte [esi + 0xf]
mov byte [ecx + 0xc], bl
cmp dword [edi + 0x18], edx
jb 0x4fd265
mov ecx, dword [eax]
jmp 0x4fd267
mov ecx, eax
mov bl, byte [esi + 0xe]
mov byte [ecx + 0xd], bl
cmp dword [edi + 0x18], edx
jb 0x4fd276
mov ecx, dword [eax]
jmp 0x4fd278
mov ecx, eax
mov ebx, dword [esi + 0xc]
shr ebx, 8
mov byte [ecx + 0xe], bl
cmp dword [edi + 0x18], edx
jb 0x4fd28a
mov ecx, dword [eax]
jmp 0x4fd28c
mov ecx, eax
mov bl, byte [esi + 0xc]
mov byte [ecx + 0xf], bl
cmp dword [edi + 0x18], edx
jb 0x4fd29b
mov ecx, dword [eax]
jmp 0x4fd29d
mov ecx, eax
mov bl, byte [esi + 0x13]
mov byte [ecx + 0x10], bl
cmp dword [edi + 0x18], edx
jb 0x4fd2ac
mov ecx, dword [eax]
jmp 0x4fd2ae
mov ecx, eax
mov bl, byte [esi + 0x12]
mov byte [ecx + 0x11], bl
cmp dword [edi + 0x18], edx
jb 0x4fd2bd
mov ecx, dword [eax]
jmp 0x4fd2bf
mov ecx, eax
mov ebx, dword [esi + 0x10]
shr ebx, 8
mov byte [ecx + 0x12], bl
cmp dword [edi + 0x18], edx
jb 0x4fd2cf
mov eax, dword [eax]
mov cl, byte [esi + 0x10]
mov byte [eax + 0x13], cl
mov ecx, esi
call fcn.004fb6b3
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00516059
leave
ret 4