Function at 0x5b4660
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x80]
cmp eax, dword [ecx + 8]
jbe 0x5b5097
sub esp, 0x100
mov eax, dword [esp + 0x104]
mov ecx, dword [eax]
mov dword [esp + 0x44], ecx
mov edx, dword [eax + 4]
mov ebx, dword [eax + 8]
mov ebp, dword [eax + 0xc]
mov esi, dword [eax + 0x10]
mov edi, dword [eax + 0x14]
mov ecx, dword [eax + 0x18]
mov dword [esp + 0x54], ecx
mov ecx, dword [eax + 0x1c]
mov dword [esp + 0x58], ecx
mov ecx, dword [eax + 0x20]
mov dword [esp + 0x4c], ecx
mov ecx, dword [eax + 0x24]
mov dword [esp + 0x50], ecx
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 0xfc], eax
mov dword [esp + 0xdc], ecx
mov ecx, dword [esp + 0x10c]
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], edx
mov edx, dword [esp + 0x110]
mov dword [esp + 0xcc], edx
mov edx, dword [esp + 0xd4]
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0xdc]
jmp 0x5b49d5
mov dword [esp + 0x74], ebp
mov dword [esp + 0x70], ebx
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x18], eax
call fcn.005b45a0
mov eax, dword [esp + 0x24]
mov dword [esp + 0xb4], eax
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0xc0]
add edx, ecx
mov dword [esp + 0xc0], edx
mov ecx, dword [esp + 0xc8]
adc ecx, eax
mov dword [esp + 0xc4], ecx
mov ebp, dword [esp + 0x2c]
mov dword [esp + 0xb0], ebp
mov esi, dword [esp + 0x28]
mov dword [esp + 0xac], esi
mov edi, dword [esp + 0x9c]
mov dword [esp + 4], edi
mov edi, dword [esp + 0x98]
mov dword [esp], edi
mov edi, dword [esp + 0xa0]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0xa4]
mov dword [esp + 8], edi
mov edi, dword [esp + 0x84]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x80]
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x78]
mov dword [esp + 0x1c], edi
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x18], edi
call fcn.005b45a0
mov ecx, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
mov esi, dword [esp + 0xac]
add ecx, esi
mov edx, dword [esp + 0xb0]
mov eax, ebx
adc ebx, edx
mov esi, dword [esp + 0xc8]
mov ebp, dword [esp + 0xb4]
mov edi, esi
and esi, ebp
or edi, ebp
mov ebp, dword [esp + 0xc4]
xchg ebp, ebx
not ebx
xchg ebp, ebx
and edi, ebp
or esi, edi
shr esi, 0x1f
add ecx, esi
adc ebx, 0
mov dword [esp + 0x6c], ebx
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0x70]
add edi, ebp
mov ebp, dword [esp + 0x74]
adc esi, ebp
mov ebp, eax
and eax, edx
or edx, ebp
mov ebp, ebx
not ebx
and ebx, edx
or ebx, eax
shr ebx, 0x1f
add ebx, edi
mov dword [esp + 0x40], ebx
adc esi, 0
mov dword [esp + 0x68], esi
mov eax, ecx
and ecx, 0xfffffffc
mov dword [esp + 0x34], ecx
mov edx, dword [esp + 0xb8]
add edx, ecx
mov dword [esp + 0xc8], edx
mov edi, dword [esp + 0xbc]
adc ebp, edi
mov dword [esp + 0x64], ebp
mov edx, dword [esp + 0xc0]
add edx, ebx
mov ebx, dword [esp + 0xc4]
adc ebx, esi
mov ecx, dword [esp + 0x6c]
and ecx, edi
mov esi, dword [esp + 0x6c]
or edi, esi
xchg ebp, ebx
not ebx
xchg ebp, ebx
and edi, ebp
or ecx, edi
shr ecx, 0x1f
add ecx, edx
adc ebx, 0
mov dword [esp + 0x6c], ebx
and eax, 3
mov ebp, dword [esp + 0x68]
mov edx, dword [esp + 0xc4]
mov edi, ebp
and ebp, edx
or edx, edi
not ebx
and edx, ebx
or ebp, edx
shr ebp, 0x1f
add eax, ebp
mov dword [esp + 0x38], eax
mov edx, 0
adc edx, 0
mov dword [esp + 0xc4], edx
mov ebx, dword [esp + 0x34]
shr ebx, 2
mov ebp, esi
shl esi, 0x1e
or esi, ebx
shr ebp, 2
mov ebx, dword [esp + 0x40]
and ebx, 3
shl ebx, 0x1e
or ebx, ebp
mov ebp, dword [esp + 0xc8]
add esi, ebp
mov dword [esp + 0xc8], esi
mov ebp, dword [esp + 0x64]
adc ebp, ebx
mov esi, dword [esp + 0x40]
shr esi, 2
shl edi, 0x1e
or edi, esi
mov esi, dword [esp + 0x68]
shr esi, 2
add edi, ecx
mov ecx, dword [esp + 0x6c]
adc ecx, esi
mov edx, dword [esp + 0x64]
and edx, ebx
mov eax, dword [esp + 0x64]
or ebx, eax
mov eax, ebp
xchg ebp, ebx
not ebx
xchg ebp, ebx
and ebx, ebp
or ebx, edx
shr ebx, 0x1f
add ebx, edi
adc ecx, 0
mov edx, dword [esp + 0x6c]
mov ebp, edx
and edx, esi
or esi, ebp
mov ebp, ecx
not ecx
and esi, ecx
or esi, edx
shr esi, 0x1f
mov ecx, dword [esp + 0x38]
add esi, ecx
mov edi, dword [esp + 0xc4]
adc edi, 0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x50]
mov edx, eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x104]
mov ecx, dword [esp + 0xd0]
test ecx, ecx
je 0x5b504a
mov dword [esp + 0x48], edx
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], edi
cmp ecx, 0x10
jl 0x5b4bae
mov eax, dword [esp + 0xfc]
movzx ecx, byte [eax]
movzx edi, byte [eax + 1]
mov dword [esp + 0xc8], edi
shl edi, 8
or ecx, edi
mov edi, dword [esp + 0xc8]
shr edi, 0x18
movzx esi, byte [eax + 2]
mov dword [esp + 0xc8], esi
shl esi, 0x10
or esi, ecx
mov ecx, dword [esp + 0xc8]
shr ecx, 0x10
or ecx, edi
movzx edi, byte [eax + 3]
mov dword [esp + 0xc8], edi
shl edi, 0x18
or edi, esi
mov esi, dword [esp + 0xc8]
shr esi, 8
or esi, ecx
movzx ecx, byte [eax + 4]
or ecx, esi
movzx esi, byte [eax + 5]
shl esi, 8
or esi, ecx
movzx ecx, byte [eax + 6]
shl ecx, 0x10
or ecx, esi
movzx esi, byte [eax + 7]
shl esi, 0x18
or esi, ecx
mov ecx, dword [esp + 0x44]
add edi, ecx
mov dword [esp + 0xc8], edi
adc edx, esi
mov dword [esp + 0xc4], edx
movzx edi, byte [eax + 8]
movzx edx, byte [eax + 9]
mov dword [esp + 0xc0], edx
shl edx, 8
or edi, edx
mov edx, dword [esp + 0xc0]
shr edx, 0x18
movzx ecx, byte [eax + 0xa]
mov dword [esp + 0xc0], ecx
shr ecx, 0x10
or ecx, edx
mov edx, dword [esp + 0xc0]
shl edx, 0x10
or edx, edi
movzx edi, byte [eax + 0xb]
mov dword [esp + 0xc0], edi
shr edi, 8
or edi, ecx
mov ecx, dword [esp + 0xc0]
shl ecx, 0x18
or ecx, edx
movzx edx, byte [eax + 0xc]
or edx, edi
movzx edi, byte [eax + 0xd]
shl edi, 8
or edi, edx
movzx edx, byte [eax + 0xe]
shl edx, 0x10
or edx, edi
movzx edi, byte [eax + 0xf]
shl edi, 0x18
or edi, edx
add ecx, ebx
mov edx, ebp
adc ebp, edi
mov ebx, dword [esp + 0x48]
and ebx, esi
mov eax, dword [esp + 0x48]
or eax, esi
mov esi, dword [esp + 0xc4]
xchg esi, ebx
not ebx
xchg esi, ebx
and esi, eax
or ebx, esi
shr ebx, 0x1f
add ecx, ebx
adc ebp, 0
mov eax, edx
and edx, edi
or eax, edi
mov ebx, ebp
xchg ebp, ebx
not ebx
xchg ebp, ebx
and ebp, eax
or edx, ebp
shr edx, 0x1f
mov eax, dword [esp + 0x38]
add edx, eax
mov eax, dword [esp + 0x3c]
adc eax, 0
add edx, 1
adc eax, 0
nop
nop
nop
nop
mov ebp, dword [esp + 0xcc]
add ebp, 0xfffffff0
mov esi, ebp
xchg ebp, ebx
neg ebx
xchg ebp, ebx
sar ebp, 0x1f
and ebp, 0x10
mov edi, dword [esp + 0xfc]
add ebp, edi
mov edi, dword [esp + 0xd0]
add edi, 0xfffffff0
nop
nop
mov dword [esp + 0xd0], edi
mov dword [esp + 0xfc], ebp
mov edi, dword [esp + 0xc8]
mov ebp, ebx
mov ebx, esi
mov esi, edx
mov edx, dword [esp + 0xc4]
jmp 0x5b4e3d
mov dword [esp + 0x5c], ebx
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf8], 0
mov eax, dword [esp + 0xfc]
lea edi, [esp + 0xec]
cmp eax, edi
je 0x5b4c1b
mov dword [esp + 0x60], ebp
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00457450
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x60]
mov esi, dword [esp + 0x38]
mov byte [esp + ecx + 0xec], 1
movzx edi, byte [esp + 0xec]
movzx ecx, byte [esp + 0xed]
mov eax, ecx
shl ecx, 8
or edi, ecx
shr eax, 0x18
movzx ecx, byte [esp + 0xee]
mov dword [esp + 0xc8], ecx
shr ecx, 0x10
or ecx, eax
mov eax, esi
mov esi, dword [esp + 0xc8]
shl esi, 0x10
or edi, esi
movzx esi, byte [esp + 0xef]
mov dword [esp + 0xc8], esi
shr esi, 8
or ecx, esi
mov esi, dword [esp + 0xc8]
shl esi, 0x18
or edi, esi
movzx esi, byte [esp + 0xf0]
or ecx, esi
movzx esi, byte [esp + 0xf1]
shl esi, 8
or ecx, esi
movzx esi, byte [esp + 0xf2]
shl esi, 0x10
or ecx, esi
movzx esi, byte [esp + 0xf3]
shl esi, 0x18
or ecx, esi
mov dword [esp + 0xc8], ecx
mov esi, dword [esp + 0x44]
add edi, esi
adc ecx, edx
movzx esi, byte [esp + 0xf4]
movzx ebx, byte [esp + 0xf5]
mov dword [esp + 0xc0], ebx
shl ebx, 8
or esi, ebx
mov dword [esp + 0xbc], esi
mov ebx, dword [esp + 0xc0]
shr ebx, 0x18
movzx esi, byte [esp + 0xf6]
mov dword [esp + 0xc0], esi
shr esi, 0x10
or esi, ebx
mov dword [esp + 0xb8], esi
mov ebx, dword [esp + 0xc0]
shl ebx, 0x10
mov esi, dword [esp + 0xbc]
or ebx, esi
mov dword [esp + 0xc0], ebx
movzx esi, byte [esp + 0xf7]
mov dword [esp + 0xbc], esi
shr esi, 8
mov ebx, dword [esp + 0xb8]
or esi, ebx
mov dword [esp + 0xb8], esi
mov ebx, dword [esp + 0xbc]
shl ebx, 0x18
mov esi, dword [esp + 0xc0]
or ebx, esi
mov dword [esp + 0xc0], ebx
movzx esi, byte [esp + 0xf8]
mov ebx, dword [esp + 0xb8]
or esi, ebx
movzx ebx, byte [esp + 0xf9]
shl ebx, 8
or ebx, esi
movzx esi, byte [esp + 0xfa]
shl esi, 0x10
or esi, ebx
movzx ebx, byte [esp + 0xfb]
shl ebx, 0x18
or ebx, esi
mov dword [esp + 0xbc], ebx
mov esi, dword [esp + 0xc0]
mov ebx, dword [esp + 0x5c]
add esi, ebx
mov dword [esp + 0xc0], esi
mov ebx, dword [esp + 0xbc]
adc ebx, ebp
mov dword [esp + 0xc4], ebx
mov ebx, dword [esp + 0xc8]
and ebx, edx
mov esi, dword [esp + 0xc8]
or esi, edx
mov edx, ecx
not ecx
and ecx, esi
or ecx, ebx
shr ecx, 0x1f
mov ebx, dword [esp + 0xc0]
add ecx, ebx
mov ebx, dword [esp + 0xc4]
adc ebx, 0
mov esi, dword [esp + 0xbc]
and esi, ebp
mov dword [esp + 0xc8], esi
mov esi, dword [esp + 0xbc]
or esi, ebp
mov ebp, ebx
not ebx
and ebx, esi
mov esi, dword [esp + 0xc8]
or esi, ebx
shr esi, 0x1f
add esi, eax
mov eax, dword [esp + 0x3c]
adc eax, 0
nop
nop
nop
xor ebx, ebx
xor ebx, ebx
mov dword [esp + 0xd0], ebx
xor ebx, ebx
mov dword [esp + 0xfc], ebx
xor ebx, ebx
mov dword [esp + 0xcc], ebx
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], eax
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x60], ebp
mov dword [esp + 0x44], edi
mov dword [esp + 0x48], edx
mov dword [esp + 4], edx
mov dword [esp], edi
mov ebx, dword [esp + 0x58]
mov dword [esp + 0xc], ebx
mov edi, dword [esp + 0x54]
mov dword [esp + 8], edi
call fcn.005b4530
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc8], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xc0], ecx
mov edx, dword [esp + 0x14]
mov dword [esp + 0xbc], edx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0xb8], ebx
mov ebp, dword [esp + 0x60]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x5c]
mov dword [esp], esi
mov edi, dword [esp + 0x58]
mov dword [esp + 0xc], edi
mov edx, dword [esp + 0x54]
mov dword [esp + 8], edx
call fcn.005b4530
mov eax, dword [esp + 0x14]
mov dword [esp + 0xb4], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xb0], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0xac], edx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0xa8], ebx
mov ebp, dword [esp + 0x3c]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x38]
mov dword [esp], esi
mov edi, dword [esp + 0x58]
mov dword [esp + 0xc], edi
mov edi, dword [esp + 0x54]
mov dword [esp + 8], edi
call fcn.005b4530
mov eax, dword [esp + 0x18]
mov dword [esp + 0xa4], eax
test eax, eax
setne cl
mov byte [esp + 0x33], cl
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xa0], edx
test edx, edx
setne bl
mov byte [esp + 0x32], bl
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x9c], ebp
mov esi, dword [esp + 0x10]
mov dword [esp + 0x98], esi
mov edi, dword [esp + 0x48]
mov dword [esp + 4], edi
mov edi, dword [esp + 0x44]
mov dword [esp], edi
mov edi, dword [esp + 0x50]
mov dword [esp + 0xc], edi
mov eax, dword [esp + 0x4c]
mov dword [esp + 8], eax
call fcn.005b4530
mov eax, dword [esp + 0x14]
mov dword [esp + 0x94], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x90], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x8c], edx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x88], ebx
mov ebp, dword [esp + 0x60]
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x5c]
mov dword [esp], ebp
mov ebp, dword [esp + 0x50]
mov dword [esp + 0xc], ebp
mov esi, dword [esp + 0x4c]
mov dword [esp + 8], esi
call fcn.005b4530
mov eax, dword [esp + 0x14]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x80], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x7c], edx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x78], ebx
mov ebp, dword [esp + 0x3c]
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x38]
mov dword [esp], ebp
mov ebp, dword [esp + 0x50]
mov dword [esp + 0xc], ebp
mov esi, dword [esp + 0x4c]
mov dword [esp + 8], esi
call fcn.005b4530
movzx eax, byte [esp + 0x32]
movzx ecx, byte [esp + 0x33]
or eax, ecx
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
test al, al
jne 0x5b507e
test edx, edx
setne al
test ecx, ecx
setne cl
or ecx, eax
test cl, cl
je 0x5b4711
jmp 0x5b5066
mov ecx, dword [esp + 0x44]
mov dword [eax], ecx
mov dword [eax + 4], edx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebp
mov dword [eax + 0x10], esi
mov dword [eax + 0x14], edi
add esp, 0x100
ret
lea eax, [0x7346e0]
mov dword [esp], eax
lea eax, [0x7c9f7c]
mov dword [esp + 4], eax
call fcn.00430590
lea eax, [0x7346e0]
mov dword [esp], eax
lea eax, [0x7c9f7c]
mov dword [esp + 4], eax
call fcn.00430590
nop
call fcn.00455690
jmp fcn.005b4660