Function at 0x56b8c0
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x56bd52
sub esp, 0x34
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
movzx edx, word [eax + 4]
movzx ebx, word [eax + 6]
imul edx, ebx
mov dword [esp + 0x1c], edx
test ecx, 1
je 0x56b9d7
mov ecx, dword [eax + 0x10]
lea ecx, [ecx + edx*4]
mov ebx, dword [esp + 0x4c]
cmp ebx, ecx
jl 0x56b93d
lea eax, [0x69be00]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.0044bce0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x4c]
mov esi, dword [esp + 0x38]
xor edi, edi
jmp 0x56bced
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
mov dword [esp], ecx
call fcn.00409720
mov eax, dword [esp + 4]
lea ecx, [0x69b600]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
call fcn.00409720
mov eax, dword [esp + 4]
lea ecx, [0x69b600]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], eax
lea eax, [0x6fc70f]
mov dword [esp], eax
mov dword [esp + 4], 0x20
lea eax, [esp + 0x24]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004cde70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], ecx
add esp, 0x34
ret
mov ecx, dword [eax + 0x10]
lea ecx, [ecx + edx*2]
mov ebx, dword [esp + 0x4c]
cmp ebx, ecx
jl 0x56ba1a
lea eax, [0x69be00]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], edx
call fcn.0044bce0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x4c]
mov esi, dword [esp + 0x38]
xor edi, edi
jmp 0x56bac7
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
mov dword [esp], ecx
call fcn.00409720
mov eax, dword [esp + 4]
lea ecx, [0x69b600]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
call fcn.00409720
mov eax, dword [esp + 4]
lea ecx, [0x69b600]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], eax
lea eax, [0x6fc70f]
mov dword [esp], eax
mov dword [esp + 4], 0x20
lea eax, [esp + 0x24]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004cde70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], ecx
add esp, 0x34
ret
movzx edx, bp
mov dword [eax + edi*4], edx
inc edi
mov edx, dword [esp + 0x50]
mov ebp, dword [esp + 0x4c]
mov esi, dword [esp + 0x38]
cmp edi, ecx
jge 0x56bb04
mov esi, dword [esi + 0x10]
lea esi, [esi + edi*2]
cmp ebp, esi
jb 0x56bcd4
sub ebp, esi
sub edx, esi
neg edx
sar edx, 0x1f
and esi, edx
cmp ebp, 1
jbe 0x56bcc8
movzx edx, byte [ebx + esi + 1]
movzx ebp, byte [ebx + esi]
shl ebp, 8
or ebp, edx
cmp edi, ecx
jb 0x56bab4
jmp 0x56bcc1
mov dword [esp + 0x20], eax
lea edx, [0x69b640]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.0044bce0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x38]
mov dword [edx + 0x2c], ecx
mov dword [edx + 0x30], ecx
mov ebx, dword [0x1eaa9f0]
test ebx, ebx
jne 0x56bb3f
mov dword [edx + 0x28], eax
jmp 0x56bb47
lea edi, [edx + 0x28]
call fcn.00465d80
mov ebx, dword [esp + 0x54]
test ebx, ebx
je 0x56bb63
mov ebx, dword [esp + 0x4c]
mov ebp, dword [esp + 0x48]
mov esi, dword [esp + 0x50]
mov edi, dword [esp + 0x20]
xor eax, eax
jmp 0x56bbb9
mov ebx, dword [esp + 0x20]
xor eax, eax
jmp 0x56bb70
mov word [edi + eax*2], bp
inc eax
cmp eax, ecx
jge 0x56bb83
mov ebp, dword [ebx + eax*4]
mov esi, dword [edx + 0x2c]
mov edi, dword [edx + 0x28]
cmp eax, esi
jb 0x56bb6b
jmp 0x56bb97
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
add esp, 0x34
ret
mov ecx, esi
call fcn.00465e00
mov word [esi + eax*2], bp
inc eax
mov ebx, dword [esp + 0x4c]
mov edx, dword [esp + 0x38]
mov esi, dword [esp + 0x50]
mov ebp, dword [esp + 0x20]
mov ebp, edi
mov edi, dword [esp + 0x20]
cmp eax, ecx
jge 0x56bb83
mov ebp, dword [edx + 0x14]
add ebp, dword [edi + eax*4]
lea edi, [ebp + 2]
cmp ebx, edi
jl 0x56bc0b
cmp ebx, ebp
jb 0x56bcb8
sub ebx, ebp
sub esi, ebp
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and ebp, esi
cmp ebx, 1
jbe 0x56bcac
mov ebx, dword [edx + 0x2c]
mov esi, dword [edx + 0x28]
mov edi, dword [esp + 0x48]
movzx edx, byte [edi + ebp + 1]
movzx ebp, byte [edi + ebp]
shl ebp, 8
or ebp, edx
cmp eax, ebx
jb 0x56bb9e
jmp 0x56bca5
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
mov dword [esp], edi
call fcn.00409720
mov eax, dword [esp + 4]
lea ecx, [0x69b600]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
call fcn.00409720
mov eax, dword [esp + 4]
lea ecx, [0x69b600]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], eax
lea eax, [0x6fc70f]
mov dword [esp], eax
mov dword [esp + 4], 0x20
lea eax, [esp + 0x24]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004cde70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], ecx
add esp, 0x34
ret
mov ecx, ebx
call fcn.00465e00
mov eax, 1
mov ecx, ebx
call fcn.00465e00
mov eax, ebp
mov ecx, ebx
call fcn.00465e60
mov eax, edi
call fcn.00465e00
mov eax, 1
mov ecx, ebp
call fcn.00465e00
mov eax, esi
mov ecx, ebp
call fcn.00465e60
mov dword [eax + edi*4], edx
inc edi
mov edx, dword [esp + 0x50]
mov ebp, dword [esp + 0x4c]
mov esi, dword [esp + 0x38]
cmp edi, ecx
jge 0x56bb04
mov esi, dword [esi + 0x10]
lea esi, [esi + edi*4]
cmp ebp, esi
jb 0x56bd48
sub edx, esi
neg edx
sar edx, 0x1f
and edx, esi
sub ebp, esi
cmp ebp, 3
jbe 0x56bd3c
movzx ebp, byte [ebx + edx + 3]
movzx esi, byte [ebx + edx + 2]
shl esi, 8
or ebp, esi
movzx esi, byte [ebx + edx + 1]
shl esi, 0x10
or esi, ebp
movzx edx, byte [ebx + edx]
shl edx, 0x18
or edx, esi
cmp edi, ecx
jb 0x56bcdd
mov eax, edi
call fcn.00465e00
mov eax, 3
mov ecx, ebp
call fcn.00465e00
mov eax, esi
mov ecx, ebp
call fcn.00465e60
nop
call fcn.004649b0
jmp fcn.0056b8c0