Function at 0x56c4b0
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x44]
cmp eax, dword [ecx + 8]
jbe 0x56cb83
sub esp, 0xc4
lea edi, [esp + 0xd8]
xor eax, eax
call fcn.00465fe6
lea edi, [esp + 0x9c]
call fcn.00465fe6
mov ecx, dword [esp + 0xcc]
cmp ecx, 0x10
jl 0x56c6ed
mov edx, dword [esp + 0xc8]
movzx ebx, byte [edx + 3]
movzx ebp, byte [edx + 2]
shl ebp, 8
or ebx, ebp
movzx ebp, byte [edx + 1]
shl ebp, 0x10
or ebx, ebp
movzx ebp, byte [edx]
shl ebp, 0x18
or ebp, ebx
mov dword [esp + 0x9c], ebp
lea ebx, [ecx - 4]
cmp ebx, 3
jbe 0x56cb76
movzx ebx, byte [edx + 7]
movzx ebp, byte [edx + 6]
shl ebp, 8
or ebx, ebp
movzx ebp, byte [edx + 5]
shl ebp, 0x10
or ebx, ebp
movzx ebp, byte [edx + 4]
shl ebp, 0x18
or ebp, ebx
mov dword [esp + 0xa0], ebp
lea ebx, [ecx - 8]
cmp ebx, 3
jbe 0x56cb6a
movzx ebx, byte [edx + 0xb]
movzx ebp, byte [edx + 0xa]
shl ebp, 8
or ebx, ebp
movzx ebp, byte [edx + 9]
shl ebp, 0x10
or ebx, ebp
movzx ebp, byte [edx + 8]
shl ebp, 0x18
or ebp, ebx
mov dword [esp + 0xa4], ebp
lea ebx, [ecx - 0xc]
cmp ebx, 3
jbe 0x56cb5e
movzx ebx, byte [edx + 0xf]
movzx esi, byte [edx + 0xe]
shl esi, 8
or ebx, esi
movzx esi, byte [edx + 0xd]
shl esi, 0x10
or ebx, esi
movzx esi, byte [edx + 0xc]
shl esi, 0x18
or esi, ebx
mov dword [esp + 0xa8], esi
lea ebx, [ebp + ebp*2]
shl ebx, 2
add ebx, 0x10
cmp ecx, ebx
jl 0x56c621
mov dword [esp + 0x30], ebp
mov dword [esp + 0x50], ebx
lea eax, [0x6c4080]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ebp
call fcn.0044bce0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], eax
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xcc]
mov ebx, dword [esp + 0xc8]
xor ebp, ebp
jmp 0x56c7c6
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
mov dword [esp], ebx
call fcn.00409720
mov eax, dword [esp + 4]
lea ecx, [0x69b600]
mov dword [esp + 0x64], ecx
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0xcc]
mov dword [esp], eax
call fcn.00409720
mov eax, dword [esp + 4]
lea ecx, [0x69b600]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x70], eax
lea eax, [0x70300e]
mov dword [esp], eax
mov dword [esp + 4], 0x33
lea eax, [esp + 0x64]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004cde70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x58], ecx
lea edi, [esp + 0xd8]
lea esi, [esp + 0x9c]
call fcn.0046649c
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x108], eax
add esp, 0xc4
ret
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov dword [esp], ecx
call fcn.00409720
mov eax, dword [esp + 4]
lea ecx, [0x69b600]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x60], eax
lea eax, [0x703041]
mov dword [esp], eax
mov dword [esp + 4], 0x33
lea eax, [esp + 0x5c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cde70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x58], ecx
lea edi, [esp + 0xd8]
lea esi, [esp + 0x9c]
call fcn.0046649c
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x108], eax
add esp, 0xc4
ret
movzx ecx, byte [esi + edx + 0xb]
movzx ebp, byte [esi + edx + 0xa]
shl ebp, 8
or ecx, ebp
movzx ebp, byte [esi + edx + 9]
shl ebp, 0x10
or ecx, ebp
movzx edx, byte [esi + edx + 8]
shl edx, 0x18
or edx, ecx
mov dword [ebx + edi*4 + 8], edx
mov ecx, dword [esp + 0x44]
lea ebp, [ecx + 1]
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xcc]
mov ebx, esi
cmp ebp, eax
jge 0x56c8c1
mov dword [esp + 0x44], ebp
mov esi, ebx
lea ebx, [ebp + ebp*2]
mov edi, ebx
shl ebx, 2
lea ebp, [ebx + 0x10]
cmp edx, ebp
jb 0x56cb55
mov edx, dword [esp + 0xac]
mov dword [esp + 0x54], edx
mov edx, dword [esp + 0xb0]
mov dword [esp + 0x4c], edx
sub ecx, ebx
lea edx, [ecx - 0x10]
neg edx
sar edx, 0x1f
and ebp, edx
mov ecx, dword [esp + 0xcc]
sub ecx, ebx
mov ebx, dword [esp + 0x44]
mov edx, dword [esp + 0x4c]
cmp ebx, edx
jae 0x56cb4c
lea edx, [ecx - 0x10]
cmp edx, 0xb
jbe 0x56cb40
mov dword [esp + 0x4c], ebp
mov edx, dword [esp + 0x54]
lea ebx, [edx + edi*4]
movzx edx, byte [esi + ebp + 1]
movzx ebp, byte [esi + ebp]
shl ebp, 8
or edx, ebp
mov word [ebx], dx
lea edx, [ecx - 0x12]
cmp edx, 1
jbe 0x56cb34
mov edx, dword [esp + 0x54]
lea ebx, [edx + edi*4 + 2]
mov ebp, dword [esp + 0x4c]
movzx edx, byte [esi + ebp + 3]
movzx ebp, byte [esi + ebp + 2]
shl ebp, 8
or edx, ebp
mov word [ebx], dx
lea edx, [ecx - 0x14]
cmp edx, 3
jbe 0x56cb28
mov edx, dword [esp + 0x4c]
movzx ebx, byte [esi + edx + 7]
movzx ebp, byte [esi + edx + 6]
shl ebp, 8
or ebx, ebp
movzx ebp, byte [esi + edx + 5]
shl ebp, 0x10
or ebx, ebp
movzx ebp, byte [esi + edx + 4]
shl ebp, 0x18
or ebp, ebx
mov ebx, dword [esp + 0x54]
mov dword [ebx + edi*4 + 4], ebp
add ecx, 0xffffffe8
cmp ecx, 3
ja 0x56c788
jmp 0x56cb1e
mov ebp, dword [esp + 0xa8]
mov dword [esp + 0x48], ebp
mov eax, dword [esp + 0xd4]
mov esi, dword [esp + 0x50]
xor edi, edi
jmp 0x56c90b
mov eax, dword [esp + 0x40]
lea edi, [eax + 1]
mov ecx, dword [esp + 0xd0]
mov ebp, dword [esp + 0x48]
mov eax, dword [esp + 0xd4]
mov ebx, dword [esp + 0xc8]
mov esi, dword [esp + 0xcc]
mov esi, edx
mov edx, dword [esp + 0xcc]
cmp edi, ebp
jge 0x56cadc
cmp edx, esi
jb 0x56cb15
mov dword [esp + 0x40], edi
mov dword [esp + 0x3c], esi
lea edi, [esp + 0x88]
mov ebp, eax
xor eax, eax
call fcn.00465feb
mov ecx, dword [esp + 0xd0]
sub ecx, esi
mov dword [esp + 0x50], ecx
neg ecx
sar ecx, 0x1f
and ecx, esi
add ecx, ebx
mov dword [esp], ecx
sub edx, esi
mov dword [esp + 4], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
call fcn.0056cb90
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x34], ecx
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x2c]
lea edi, [esp + 0x88]
lea esi, [esp + 0x10]
call fcn.004664ce
lea edi, [esp + 0x74]
lea esi, [esp + 0x88]
call fcn.004664ce
test edx, edx
jne 0x56ca4c
mov ecx, dword [esp + 0xbc]
inc ecx
mov edx, dword [esp + 0xb8]
mov ebx, dword [esp + 0xc0]
cmp ebx, ecx
jae 0x56c9f5
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 1
lea eax, [0x6ce560]
mov dword [esp + 0x10], eax
call fcn.0044be60
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xb8], edx
mov dword [esp + 0xbc], ecx
lea ecx, [ecx + ecx*4]
lea edi, [edx + ecx*4 - 0x14]
mov ecx, dword [0x1eaa9f0]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x34]
add edx, ebx
test ecx, ecx
jne 0x56ca25
lea esi, [esp + 0x74]
call fcn.004664ce
jmp 0x56c8db
mov dword [esp + 0x38], edx
lea eax, [0x6ce560]
mov dword [esp], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x74]
mov dword [esp + 8], eax
call fcn.004115f0
mov edx, dword [esp + 0x38]
jmp 0x56c8db
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
test ebx, ebx
je 0x56ca63
mov ebx, dword [ebx + 4]
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebp
lea eax, [0x6f6d8c]
mov dword [esp], eax
mov dword [esp + 4], 0x15
lea eax, [esp + 0x5c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004cde70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x58], ecx
lea edi, [esp + 0xd8]
lea esi, [esp + 0x9c]
call fcn.0046649c
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x108], eax
add esp, 0xc4
ret
lea edi, [esp + 0xd8]
mov eax, esi
lea esi, [esp + 0x9c]
call fcn.0046649c
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
add esp, 0xc4
ret
mov eax, esi
mov ecx, edx
call fcn.00465e60
mov eax, 3
call fcn.00465e00
mov eax, 3
mov ecx, edx
call fcn.00465e00
mov eax, 1
mov ecx, edx
call fcn.00465e00
mov eax, 0xb
mov ecx, edx
call fcn.00465e00
mov eax, ebx
mov ecx, edx
call fcn.00465e00
mov eax, ebp
mov ecx, edx
call fcn.00465e60
mov eax, 3
mov ecx, ebx
call fcn.00465e00
mov eax, 3
mov ecx, ebx
call fcn.00465e00
mov eax, 3
mov ecx, ebx
call fcn.00465e00
nop
call fcn.004649b0
jmp fcn.0056c4b0