Function at 0x485310
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, edi
and esi, 0xfff
lea eax, [esi + edx]
mov dword [esp + 0x10], edx
mov ebx, ecx
cmp eax, 0x1000
ja 0x48548e
mov ecx, dword [ebx + 0x38]
mov edx, edi
shr edx, 0xc
and edx, 0x3f
lea eax, [ecx + edx*8 + 0x200]
mov edx, dword [ebp + 0xc]
mov dword [esp + 0x14], eax
mov eax, edi
shrd eax, edx, 0x12
shr edx, 0x12
mov edx, dword [esp + 0x14]
and eax, 0x3fffffff
mov dword [esp + 0x18], eax
cmp eax, dword [edx]
jne 0x485373
mov eax, dword [edx + 4]
jmp 0x4853c5
mov eax, dword [ebp + 0xc]
push eax
push edi
mov edx, ecx
call fcn.00454320
test eax, eax
je 0x48547c
mov ecx, dword [eax]
test ecx, 0x12a00000
jne 0x48548a
test cl, 7
je 0x48547c
test cl, cl
jns 0x48548a
mov edx, dword [esp + 0x18]
or ecx, 0x10
mov dword [eax], ecx
mov ecx, dword [esp + 0x14]
mov dword [ecx], edx
mov eax, dword [eax + 4]
mov edx, edi
and edx, 0xfffff000
sub eax, edx
mov dword [ecx + 4], eax
mov edx, dword [esp + 0x10]
lea ecx, [edx - 1]
add eax, edi
cmp ecx, 0xf
ja case.0x4853da.3
movzx ecx, byte [ecx + 0x4856f8]
jmp dword [ecx*4 + 0x4856dc]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
jmp 0x48544d
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov ax, word [eax + 8]
mov word [ecx + 8], ax
jmp 0x48544d
mov edx, dword [eax]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], edx
mov eax, dword [eax + 4]
mov dword [ecx + 4], eax
jmp 0x48544d
mov ecx, dword [eax]
mov edx, dword [ebp + 0x10]
mov dword [edx], ecx
jmp 0x48544d
mov ax, word [eax]
mov ecx, dword [ebp + 0x10]
mov word [ecx], ax
jmp 0x48544d
mov dl, byte [eax]
mov eax, dword [ebp + 0x10]
mov byte [eax], dl
jmp 0x48544d
mov ecx, dword [ebp + 0x10]
push edx
push eax
push ecx
call fcn.005186a0
add esp, 0xc
mov ecx, dword [esp + 0x10]
mov eax, dword [ebx + 0x44]
add ecx, 7
shr ecx, 3
add dword [eax + 0x10], ecx
mov edx, 0
adc dword [eax + 0x14], edx
mov ebx, dword [ebx + 0x44]
add ecx, 0x40
add dword [ebx + 8], ecx
adc dword [ebx + 0xc], edx
xor al, al
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edx, dword [ebp + 0xc]
mov dword [ebx + 0x258], edi
jmp 0x4856bf
mov edx, dword [esp + 0x10]
mov ecx, dword [ebp + 0xc]
mov eax, edi
and eax, 0xfffff000
mov edi, 0x1000
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x14], esi
sub edi, esi
jmp 0x4854b0
cmp edi, edx
jbe 0x4854b6
mov edi, edx
mov ecx, dword [esp + 0x1c]
mov edx, dword [ebx + 0x38]
push ecx
push eax
call fcn.00454320
mov esi, eax
test esi, esi
je 0x4856ab
mov eax, dword [esi]
test eax, 0x10000000
je 0x4854ff
mov edx, dword [esp + 0x14]
or edx, dword [esp + 0x18]
xor eax, eax
or eax, dword [esp + 0x1c]
push eax
mov eax, dword [ebx + 0x38]
mov ecx, dword [eax + 0xe08]
mov eax, dword [eax + 0xe04]
push edx
mov edx, 1
call eax
mov eax, dword [esi]
test eax, 0x2a00000
je 0x485521
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push ecx
push edx
push esi
push ebx
call fcn.00484ea0
test al, al
jne 0x485686
mov eax, dword [esi]
test al, 7
je 0x4856ab
test al, al
js 0x48554a
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [ebx + 0x40]
push eax
push ecx
push edx
mov eax, esi
call fcn.00484c60
test eax, eax
je 0x4856ab
mov eax, dword [esi + 4]
or dword [esi], 0x10
add eax, dword [esp + 0x14]
lea ecx, [edi - 1]
cmp ecx, 0xf
ja case.0x485567.3
movzx ecx, byte [ecx + 0x485724]
jmp dword [ecx*4 + 0x485708]
movzx edx, byte [eax + 0xf]
mov esi, dword [ebp + 0x10]
mov byte [esi + 0xf], dl
movzx ecx, byte [eax + 0xe]
mov byte [esi + 0xe], cl
movzx edx, byte [eax + 0xd]
mov byte [esi + 0xd], dl
movzx ecx, byte [eax + 0xc]
mov byte [esi + 0xc], cl
movzx edx, byte [eax + 0xb]
mov byte [esi + 0xb], dl
movzx ecx, byte [eax + 0xa]
mov byte [esi + 0xa], cl
mov dl, byte [eax + 9]
mov byte [esi + 9], dl
mov cl, byte [eax + 8]
mov byte [esi + 8], cl
jmp 0x4855bd
mov esi, dword [ebp + 0x10]
mov dl, byte [eax + 9]
mov byte [esi + 9], dl
mov cl, byte [eax + 8]
mov byte [esi + 8], cl
jmp 0x4855bd
mov esi, dword [ebp + 0x10]
movzx edx, byte [eax + 7]
mov byte [esi + 7], dl
movzx ecx, byte [eax + 6]
mov byte [esi + 6], cl
movzx edx, byte [eax + 5]
mov byte [esi + 5], dl
movzx ecx, byte [eax + 4]
mov byte [esi + 4], cl
mov dl, byte [eax + 3]
mov byte [esi + 3], dl
mov cl, byte [eax + 2]
mov byte [esi + 2], cl
mov dl, byte [eax + 1]
mov byte [esi + 1], dl
mov al, byte [eax]
mov byte [esi], al
jmp 0x485635
mov dl, byte [eax + 3]
mov esi, dword [ebp + 0x10]
mov byte [esi + 3], dl
mov cl, byte [eax + 2]
mov byte [esi + 2], cl
mov dl, byte [eax + 1]
mov byte [esi + 1], dl
mov al, byte [eax]
mov byte [esi], al
jmp 0x485635
mov dl, byte [eax + 1]
mov esi, dword [ebp + 0x10]
mov byte [esi + 1], dl
mov al, byte [eax]
mov byte [esi], al
jmp 0x485635
mov esi, dword [ebp + 0x10]
mov al, byte [eax]
mov byte [esi], al
jmp 0x485635
mov ecx, dword [ebp + 0x10]
push edi
push eax
push ecx
call fcn.005186a0
mov esi, dword [ebp + 0x10]
add esp, 0xc
mov eax, dword [ebx + 0x44]
lea ecx, [edi + 7]
shr ecx, 3
add dword [eax + 0x10], ecx
mov edx, 0
adc dword [eax + 0x14], edx
mov eax, dword [ebx + 0x44]
add ecx, 0x40
add dword [eax + 8], ecx
adc dword [eax + 0xc], edx
sub dword [esp + 0x10], edi
je 0x485471
add dword [esp + 0x18], 0x1000
mov eax, dword [esp + 0x18]
mov dword [esp + 0x14], edx
adc dword [esp + 0x1c], edx
mov edx, dword [esp + 0x10]
add esi, edi
mov dword [ebp + 0x10], esi
mov edi, 0x1000
jmp 0x4854b0
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov dword [ebx + 0x258], edx
mov dword [ebx + 0x25c], ecx
mov dword [ebx + 0xdc], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [esp + 0x14]
xor edx, edx
add eax, dword [esp + 0x18]
adc edx, dword [esp + 0x1c]
mov dword [ebx + 0x258], eax
pop edi
pop esi
mov dword [ebx + 0x25c], edx
mov dword [ebx + 0xdc], 1
mov al, 0x1e
pop ebx
mov esp, ebp
pop ebp
ret 0xc