Function at 0x589cd0
Capabilities:
Enumerate pe sections
Reference http user-agent string

Disassembly:
mov ecx, dword [0x99504c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x589f56
sub esp, 8
mov eax, dword [esp + 0x14]
cmp eax, 0x20
je 0x589d2b
lea eax, [0x701240]
mov dword [esp], eax
call fcn.0040c500
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x2e
lea ecx, [0x74cfa5]
mov dword [eax], ecx
mov dword [esp + 0x1c], 0
lea ecx, [0x7b0bb8]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
add esp, 8
ret
mov eax, dword [esp + 0x10]
movzx ecx, byte [eax]
movzx edx, byte [eax + 1]
mov ebx, edx
shl edx, 8
or ecx, edx
shr ebx, 0x18
movzx edx, byte [eax + 2]
mov ebp, edx
shr edx, 0x10
or edx, ebx
shl ebp, 0x10
or ecx, ebp
movzx ebx, byte [eax + 3]
mov ebp, ebx
shr ebx, 8
or edx, ebx
shl ebp, 0x18
or ecx, ebp
movzx ebx, byte [eax + 4]
or ebx, edx
movzx edx, byte [eax + 5]
shl edx, 8
or ebx, edx
movzx edx, byte [eax + 6]
shl edx, 0x10
or ebx, edx
movzx edx, byte [eax + 7]
shl edx, 0x18
or ebx, edx
and ebx, 0x7ffff
mov edx, dword [esp + 0xc]
mov dword [edx], ecx
mov dword [edx + 4], ebx
movzx ecx, byte [eax + 6]
movzx ebx, byte [eax + 7]
mov ebp, ebx
shl ebx, 8
or ecx, ebx
shr ebp, 0x18
movzx ebx, byte [eax + 8]
mov esi, ebx
shr ebx, 0x10
or ebx, ebp
shl esi, 0x10
or ecx, esi
movzx ebp, byte [eax + 9]
mov esi, ebp
shr ebp, 8
or ebx, ebp
shl esi, 0x18
or esi, ecx
shr esi, 3
movzx ecx, byte [eax + 0xa]
or ecx, ebx
movzx ebx, byte [eax + 0xb]
shl ebx, 8
or ecx, ebx
movzx ebx, byte [eax + 0xc]
shl ebx, 0x10
or ecx, ebx
movzx ebx, byte [eax + 0xd]
shl ebx, 0x18
or ecx, ebx
mov ebx, ecx
shr ecx, 3
shl ebx, 0x1d
or ebx, esi
and ecx, 0x7ffff
mov dword [edx + 8], ebx
mov dword [edx + 0xc], ecx
movzx ecx, byte [eax + 0xc]
movzx ebx, byte [eax + 0xd]
mov ebp, ebx
shl ebx, 8
or ecx, ebx
shr ebp, 0x18
movzx ebx, byte [eax + 0xe]
mov esi, ebx
shr ebx, 0x10
or ebx, ebp
shl esi, 0x10
or ecx, esi
movzx ebp, byte [eax + 0xf]
mov esi, ebp
shr ebp, 8
or ebx, ebp
shl esi, 0x18
or esi, ecx
shr esi, 6
movzx ecx, byte [eax + 0x10]
or ecx, ebx
movzx ebx, byte [eax + 0x11]
shl ebx, 8
or ecx, ebx
movzx ebx, byte [eax + 0x12]
shl ebx, 0x10
or ecx, ebx
movzx ebx, byte [eax + 0x13]
shl ebx, 0x18
or ecx, ebx
mov ebx, ecx
shr ecx, 6
shl ebx, 0x1a
or ebx, esi
and ecx, 0x7ffff
mov dword [edx + 0x10], ebx
mov dword [edx + 0x14], ecx
movzx ecx, byte [eax + 0x13]
movzx ebx, byte [eax + 0x14]
mov ebp, ebx
shl ebx, 8
or ecx, ebx
shr ebp, 0x18
movzx ebx, byte [eax + 0x15]
mov esi, ebx
shr ebx, 0x10
or ebx, ebp
shl esi, 0x10
or ecx, esi
movzx ebp, byte [eax + 0x16]
mov esi, ebp
shr ebp, 8
or ebx, ebp
shl esi, 0x18
or esi, ecx
shr esi, 1
movzx ecx, byte [eax + 0x17]
or ecx, ebx
movzx ebx, byte [eax + 0x18]
shl ebx, 8
or ecx, ebx
movzx ebx, byte [eax + 0x19]
shl ebx, 0x10
or ecx, ebx
movzx ebx, byte [eax + 0x1a]
shl ebx, 0x18
or ecx, ebx
mov ebx, ecx
shr ecx, 1
shl ebx, 0x1f
or ebx, esi
and ecx, 0x7ffff
mov dword [edx + 0x18], ebx
mov dword [edx + 0x1c], ecx
movzx ecx, byte [eax + 0x18]
movzx ebx, byte [eax + 0x19]
mov ebp, ebx
shl ebx, 8
or ecx, ebx
shr ebp, 0x18
movzx ebx, byte [eax + 0x1a]
mov esi, ebx
shr ebx, 0x10
or ebx, ebp
shl esi, 0x10
or ecx, esi
movzx ebp, byte [eax + 0x1b]
mov esi, ebp
shr ebp, 8
or ebx, ebp
shl esi, 0x18
or esi, ecx
shr esi, 0xc
movzx ecx, byte [eax + 0x1c]
or ecx, ebx
movzx ebx, byte [eax + 0x1d]
shl ebx, 8
or ecx, ebx
movzx ebx, byte [eax + 0x1e]
shl ebx, 0x10
or ecx, ebx
movzx eax, byte [eax + 0x1f]
shl eax, 0x18
or ecx, eax
mov eax, ecx
shr ecx, 0xc
shl eax, 0x14
or eax, esi
and ecx, 0x7ffff
mov dword [edx + 0x20], eax
mov dword [edx + 0x24], ecx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
add esp, 8
ret
call fcn.00467a60
jmp fcn.00589cd0