Function at 0x64d8d0
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword [0x9ec7ac]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x64dd00
sub esp, 0x58
mov ecx, dword [esp + 0x5c]
mov edx, dword [ecx + 0x10]
mov ebx, dword [ecx + 0x18]
mov ebp, dword [ecx + 0x14]
mov esi, dword [ecx + 0x1c]
mov edi, dword [ecx + 0xc]
mov eax, dword [ecx + 4]
mov dword [esp + 0x1c], eax
mov eax, dword [ecx]
mov ecx, dword [ecx + 8]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x54], ecx
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x44]
jmp 0x64dcba
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
mov dword [esp], ebx
add esi, 0xffffffe0
mov dword [esp + 0x40], esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and esi, 0x20
mov ebx, dword [esp + 0x54]
movzx ebp, byte [ebx]
movzx edx, byte [ebx + 1]
mov dword [esp + 0x3c], edx
shl edx, 8
or ebp, edx
mov edx, dword [esp + 0x3c]
shr edx, 0x18
movzx edi, byte [ebx + 2]
mov dword [esp + 0x3c], edi
shr edi, 0x10
or edi, edx
mov edx, dword [esp + 0x3c]
shl edx, 0x10
or edx, ebp
movzx ebp, byte [ebx + 3]
mov dword [esp + 0x3c], ebp
shr ebp, 8
or ebp, edi
mov edi, dword [esp + 0x3c]
shl edi, 0x18
or edi, edx
mov eax, edi
mov ecx, 0x27d4eb4f
mul ecx
mov dword [esp + 0x3c], eax
imul edi, edi, 0xc2b2ae3d
add edx, edi
movzx edi, byte [ebx + 4]
or edi, ebp
movzx ebp, byte [ebx + 5]
shl ebp, 8
or ebp, edi
movzx edi, byte [ebx + 6]
shl edi, 0x10
or edi, ebp
movzx ebp, byte [ebx + 7]
shl ebp, 0x18
or ebp, edi
imul ebp, ebp, 0x27d4eb4f
add edx, ebp
mov dword [esp + 0x38], edx
movzx ebp, byte [ebx + 8]
movzx edi, byte [ebx + 9]
mov dword [esp + 0x34], edi
shl edi, 8
or ebp, edi
mov edi, dword [esp + 0x34]
shr edi, 0x18
movzx edx, byte [ebx + 0xa]
mov dword [esp + 0x34], edx
shr edx, 0x10
or edx, edi
mov edi, dword [esp + 0x34]
shl edi, 0x10
or edi, ebp
movzx ebp, byte [ebx + 0xb]
mov dword [esp + 0x34], ebp
shr ebp, 8
or ebp, edx
mov edx, dword [esp + 0x34]
shl edx, 0x18
or edx, edi
mov dword [esp + 0x34], edx
mov eax, ecx
mul edx
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x34]
imul eax, eax, 0xc2b2ae3d
movzx edi, byte [ebx + 0xc]
or edi, ebp
movzx ebp, byte [ebx + 0xd]
shl ebp, 8
or ebp, edi
movzx edi, byte [ebx + 0xe]
shl edi, 0x10
or edi, ebp
movzx ebp, byte [ebx + 0xf]
shl ebp, 0x18
or ebp, edi
imul ebp, ebp, 0x27d4eb4f
add edx, ebp
add eax, edx
mov dword [esp + 0x34], eax
movzx edx, byte [ebx + 0x10]
movzx ebp, byte [ebx + 0x11]
mov edi, ebp
shl ebp, 8
or edx, ebp
shr edi, 0x18
movzx ebp, byte [ebx + 0x12]
mov dword [esp + 0x2c], ebp
shr ebp, 0x10
or ebp, edi
mov edi, dword [esp + 0x2c]
shl edi, 0x10
or edi, edx
movzx edx, byte [ebx + 0x13]
mov dword [esp + 0x2c], edx
shr edx, 8
or edx, ebp
mov dword [esp + 0x28], edx
mov ebp, dword [esp + 0x2c]
shl ebp, 0x18
or ebp, edi
mov eax, ecx
mul ebp
mov dword [esp + 0x2c], eax
imul ebp, ebp, 0xc2b2ae3d
movzx eax, byte [ebx + 0x14]
mov edi, dword [esp + 0x28]
or eax, edi
movzx edi, byte [ebx + 0x15]
shl edi, 8
or edi, eax
movzx eax, byte [ebx + 0x16]
shl eax, 0x10
or eax, edi
movzx edi, byte [ebx + 0x17]
shl edi, 0x18
or edi, eax
imul eax, edi, 0x27d4eb4f
add eax, edx
add eax, ebp
movzx edx, byte [ebx + 0x18]
movzx ebp, byte [ebx + 0x19]
mov edi, ebp
shl ebp, 8
or edx, ebp
shr edi, 0x18
movzx ebp, byte [ebx + 0x1a]
mov dword [esp + 0x28], ebp
shr ebp, 0x10
or ebp, edi
mov edi, dword [esp + 0x28]
shl edi, 0x10
or edi, edx
movzx edx, byte [ebx + 0x1b]
mov dword [esp + 0x28], edx
shr edx, 8
or edx, ebp
mov dword [esp + 0x24], edx
mov ebp, dword [esp + 0x28]
shl ebp, 0x18
or ebp, edi
mov edi, eax
mov eax, ecx
mul ebp
mov dword [esp + 0x28], eax
imul ebp, ebp, 0xc2b2ae3d
movzx ecx, byte [ebx + 0x1c]
mov eax, dword [esp + 0x24]
or ecx, eax
movzx eax, byte [ebx + 0x1d]
shl eax, 8
or eax, ecx
movzx ecx, byte [ebx + 0x1e]
shl ecx, 0x10
or ecx, eax
movzx eax, byte [ebx + 0x1f]
shl eax, 0x18
or eax, ecx
imul eax, eax, 0x27d4eb4f
add eax, edx
add eax, ebp
lea ecx, [ebx + esi]
mov dword [esp + 0x54], ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x3c]
add edx, ebx
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0x1c]
adc ebx, ebp
mov ebp, edx
shr edx, 1
mov esi, ebx
shl ebx, 0x1f
or edx, ebx
imul edx, edx, 0x85ebca87
mov dword [esp + 0x3c], edx
shl ebp, 0x1f
shr esi, 1
or esi, ebp
mov ebx, eax
mov eax, esi
mov ebp, 0x85ebca87
mul ebp
mov dword [esp + 0x18], eax
imul esi, esi, 0x9e3779b1
add edx, esi
mov esi, dword [esp + 0x3c]
add edx, esi
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0x30]
add eax, esi
mov esi, dword [esp + 0x34]
mov ecx, dword [esp + 0x14]
adc esi, ecx
mov dword [esp + 0x20], esi
mov ecx, eax
shr ecx, 1
shl esi, 0x1f
or ecx, esi
imul ecx, ecx, 0x85ebca87
shl eax, 0x1f
mov esi, dword [esp + 0x20]
shr esi, 1
or eax, esi
mov dword [esp + 0x3c], eax
mov esi, edx
mul ebp
mov dword [esp + 0x10], eax
add ecx, edx
mov edx, dword [esp + 0x3c]
imul edx, edx, 0x9e3779b1
add ecx, edx
mov edx, dword [esp + 8]
mov eax, dword [esp + 0x2c]
add eax, edx
mov edx, dword [esp + 0xc]
adc edx, edi
mov dword [esp + 0x20], edx
mov edi, eax
shr edi, 1
shl edx, 0x1f
or edi, edx
imul edx, edi, 0x85ebca87
shl eax, 0x1f
mov edi, dword [esp + 0x20]
shr edi, 1
or eax, edi
mov dword [esp + 0x3c], eax
mov edi, edx
mul ebp
mov dword [esp + 8], eax
add edx, edi
mov edi, dword [esp + 0x3c]
imul edi, edi, 0x9e3779b1
add edx, edi
mov edi, dword [esp]
mov eax, dword [esp + 0x28]
add eax, edi
mov edi, dword [esp + 4]
adc edi, ebx
mov dword [esp + 0x20], edi
mov ebx, eax
shr ebx, 1
shl edi, 0x1f
or ebx, edi
imul ebx, ebx, 0x85ebca87
shl eax, 0x1f
mov edi, dword [esp + 0x20]
shr edi, 1
or eax, edi
mov dword [esp + 0x3c], eax
mov edi, edx
mul ebp
add edx, ebx
mov ebx, dword [esp + 0x3c]
imul ebx, ebx, 0x9e3779b1
add edx, ebx
mov ebx, dword [esp + 8]
mov dword [esp + 0x1c], esi
mov ebp, edi
mov ebx, eax
mov esi, edx
mov eax, dword [esp + 0x18]
mov edi, ecx
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0x10]
mov dword [esp + 4], esi
mov esi, dword [esp + 0x40]
cmp esi, 0x20
jge 0x64d92b
mov esi, dword [esp + 0x5c]
mov dword [esi], eax
mov eax, dword [esp + 0x1c]
mov dword [esi + 4], eax
mov dword [esi + 8], ecx
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], edx
mov dword [esi + 0x14], ebp
mov dword [esi + 0x18], ebx
mov eax, dword [esp + 4]
mov dword [esi + 0x1c], eax
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x40]
sub eax, ecx
mov dword [esp + 0x6c], eax
add esp, 0x58
ret
call fcn.00467050
jmp fcn.0064d8d0