Function at 0x5a2610
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x5a28b3
sub esp, 8
mov eax, dword [esp + 0x14]
cmp eax, 0x20
je 0x5a266d
lea eax, [0x769820]
mov dword [esp], eax
call fcn.0040bcc0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x2e
lea ecx, [0x7d2028]
mov dword [eax], ecx
mov dword [esp + 0x1c], 0
lea ecx, [0x844124]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
add esp, 8
ret
mov eax, dword [esp + 0x10]
movzx ecx, byte [eax]
movzx edx, byte [eax + 1]
mov ebx, edx
shr edx, 0x18
movzx ebp, byte [eax + 2]
mov esi, ebp
shr ebp, 0x10
or edx, ebp
movzx ebp, byte [eax + 3]
mov edi, ebp
shr ebp, 8
or edx, ebp
movzx ebp, byte [eax + 4]
or ebp, edx
movzx edx, byte [eax + 5]
shl edx, 8
or ebp, edx
movzx edx, byte [eax + 6]
shl edx, 0x10
or ebp, edx
movzx edx, byte [eax + 7]
shl edx, 0x18
or ebp, edx
mov edx, dword [esp + 0xc]
mov dword [edx + 4], ebp
shl ebx, 8
or ecx, ebx
shl esi, 0x10
or ecx, esi
shl edi, 0x18
or ecx, edi
mov dword [edx], ecx
and ebp, 0x7ffff
mov dword [edx + 4], ebp
movzx ecx, byte [eax + 7]
mov ebx, ecx
shr ecx, 0x18
movzx ebp, byte [eax + 8]
mov esi, ebp
shr ebp, 0x10
or ecx, ebp
movzx ebp, byte [eax + 9]
mov edi, ebp
shr ebp, 8
or ecx, ebp
movzx ebp, byte [eax + 0xa]
or ebp, ecx
movzx ecx, byte [eax + 0xb]
shl ecx, 8
or ebp, ecx
movzx ecx, byte [eax + 0xc]
shl ecx, 0x10
or ebp, ecx
movzx ecx, byte [eax + 0xd]
shl ecx, 0x18
or ebp, ecx
mov ecx, ebp
shr ebp, 3
movzx eax, byte [eax + 6]
mov dword [edx + 0xc], ebp
shl ebx, 8
or eax, ebx
shl esi, 0x10
or eax, esi
shl edi, 0x18
or eax, edi
shr eax, 3
shl ecx, 0x1d
or ecx, eax
mov dword [edx + 8], ecx
and ebp, 0x7ffff
mov dword [edx + 0xc], ebp
mov eax, dword [esp + 0x10]
movzx ecx, byte [eax + 0xd]
mov ebx, ecx
shr ecx, 0x18
movzx ebp, byte [eax + 0xe]
mov esi, ebp
shr ebp, 0x10
or ebp, ecx
movzx ecx, byte [eax + 0xf]
mov edi, ecx
shr ecx, 8
or ebp, ecx
movzx ecx, byte [eax + 0x10]
or ecx, ebp
movzx ebp, byte [eax + 0x11]
shl ebp, 8
or ecx, ebp
movzx ebp, byte [eax + 0x12]
shl ebp, 0x10
or ecx, ebp
movzx ebp, byte [eax + 0x13]
shl ebp, 0x18
or ecx, ebp
mov ebp, ecx
shr ecx, 6
movzx eax, byte [eax + 0xc]
mov dword [edx + 0x14], ecx
shl ebx, 8
or eax, ebx
shl esi, 0x10
or eax, esi
shl edi, 0x18
or edi, eax
shr edi, 6
shl ebp, 0x1a
or ebp, edi
mov dword [edx + 0x10], ebp
and ecx, 0x7ffff
mov dword [edx + 0x14], ecx
mov eax, dword [esp + 0x10]
movzx ecx, byte [eax + 0x14]
mov ebx, ecx
shr ecx, 0x18
movzx ebp, byte [eax + 0x15]
mov esi, ebp
shr ebp, 0x10
or ebp, ecx
movzx ecx, byte [eax + 0x16]
mov edi, ecx
shr ecx, 8
or ebp, ecx
movzx ecx, byte [eax + 0x17]
or ecx, ebp
movzx ebp, byte [eax + 0x18]
shl ebp, 8
or ecx, ebp
movzx ebp, byte [eax + 0x19]
shl ebp, 0x10
or ecx, ebp
movzx ebp, byte [eax + 0x1a]
shl ebp, 0x18
or ecx, ebp
mov ebp, ecx
shr ecx, 1
movzx eax, byte [eax + 0x13]
mov dword [edx + 0x1c], ecx
shl ebx, 8
or eax, ebx
shl esi, 0x10
or eax, esi
shl edi, 0x18
or edi, eax
shr edi, 1
shl ebp, 0x1f
or ebp, edi
mov dword [edx + 0x18], ebp
and ecx, 0x7ffff
mov dword [edx + 0x1c], ecx
mov eax, dword [esp + 0x10]
movzx ecx, byte [eax + 0x19]
mov ebx, ecx
shr ecx, 0x18
movzx ebp, byte [eax + 0x1a]
mov esi, ebp
shr ebp, 0x10
or ebp, ecx
movzx ecx, byte [eax + 0x1b]
mov edi, ecx
shr ecx, 8
or ebp, ecx
movzx ecx, byte [eax + 0x1c]
or ecx, ebp
movzx ebp, byte [eax + 0x1d]
shl ebp, 8
or ecx, ebp
movzx ebp, byte [eax + 0x1e]
shl ebp, 0x10
or ecx, ebp
movzx ebp, byte [eax + 0x1f]
shl ebp, 0x18
or ecx, ebp
mov ebp, ecx
shr ecx, 0xc
movzx eax, byte [eax + 0x18]
mov dword [edx + 0x24], ecx
shl ebx, 8
or eax, ebx
shl esi, 0x10
or eax, esi
shl edi, 0x18
or edi, eax
shr edi, 0xc
shl ebp, 0x14
or ebp, edi
mov dword [edx + 0x20], ebp
and ecx, 0x7ffff
mov dword [edx + 0x24], ecx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
add esp, 8
ret
call fcn.00462fa0
jmp fcn.005a2610