Function at 0x561d00
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword [0xf33f68]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x561f85
sub esp, 8
mov eax, dword [esp + 0x14]
cmp eax, 0x20
je 0x561d5b
lea eax, [0x783b80]
mov dword [esp], eax
call fcn.0040d540
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x2e
lea ecx, [0x7e456a]
mov dword [eax], ecx
mov dword [esp + 0x1c], 0
lea ecx, [0xc7eec4]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
add esp, 8
ret
mov eax, dword [esp + 0x10]
movzx ecx, byte [eax]
movzx edx, byte [eax + 1]
mov ebx, edx
shl edx, 8
or ecx, edx
shr ebx, 0x18
movzx edx, byte [eax + 2]
mov ebp, edx
shl edx, 0x10
or ecx, edx
shr ebp, 0x10
or ebx, ebp
movzx edx, byte [eax + 3]
mov ebp, edx
shr edx, 8
or ebx, edx
shl ebp, 0x18
or ecx, ebp
movzx edx, byte [eax + 4]
or edx, ebx
movzx ebx, byte [eax + 5]
shl ebx, 8
or edx, ebx
movzx ebx, byte [eax + 6]
shl ebx, 0x10
or edx, ebx
movzx ebx, byte [eax + 7]
shl ebx, 0x18
or ebx, edx
and ebx, 0x7ffff
mov edx, dword [esp + 0xc]
mov dword [edx], ecx
mov dword [edx + 4], ebx
movzx ecx, byte [eax + 6]
movzx ebx, byte [eax + 7]
mov ebp, ebx
shl ebx, 8
or ecx, ebx
shr ebp, 0x18
movzx ebx, byte [eax + 8]
mov esi, ebx
shr ebx, 0x10
or ebx, ebp
shl esi, 0x10
or ecx, esi
movzx ebp, byte [eax + 9]
mov esi, ebp
shr ebp, 8
or ebp, ebx
shl esi, 0x18
or esi, ecx
shr esi, 3
movzx ecx, byte [eax + 0xa]
or ecx, ebp
movzx ebx, byte [eax + 0xb]
shl ebx, 8
or ebx, ecx
movzx ecx, byte [eax + 0xc]
shl ecx, 0x10
or ebx, ecx
movzx ecx, byte [eax + 0xd]
shl ecx, 0x18
or ecx, ebx
mov ebx, ecx
shr ecx, 3
shl ebx, 0x1d
or ebx, esi
and ecx, 0x7ffff
mov dword [edx + 8], ebx
mov dword [edx + 0xc], ecx
movzx ecx, byte [eax + 0xc]
movzx ebx, byte [eax + 0xd]
mov ebp, ebx
shl ebx, 8
or ecx, ebx
shr ebp, 0x18
movzx ebx, byte [eax + 0xe]
mov esi, ebx
shr ebx, 0x10
or ebx, ebp
shl esi, 0x10
or ecx, esi
movzx ebp, byte [eax + 0xf]
mov esi, ebp
shr ebp, 8
or ebp, ebx
shl esi, 0x18
or esi, ecx
shr esi, 6
movzx ecx, byte [eax + 0x10]
or ecx, ebp
movzx ebx, byte [eax + 0x11]
shl ebx, 8
or ebx, ecx
movzx ecx, byte [eax + 0x12]
shl ecx, 0x10
or ebx, ecx
movzx ecx, byte [eax + 0x13]
shl ecx, 0x18
or ecx, ebx
mov ebx, ecx
shr ecx, 6
shl ebx, 0x1a
or ebx, esi
and ecx, 0x7ffff
mov dword [edx + 0x10], ebx
mov dword [edx + 0x14], ecx
movzx ecx, byte [eax + 0x13]
movzx ebx, byte [eax + 0x14]
mov ebp, ebx
shl ebx, 8
or ecx, ebx
shr ebp, 0x18
movzx ebx, byte [eax + 0x15]
mov esi, ebx
shr ebx, 0x10
or ebx, ebp
shl esi, 0x10
or ecx, esi
movzx ebp, byte [eax + 0x16]
mov esi, ebp
shr ebp, 8
or ebp, ebx
shl esi, 0x18
or esi, ecx
shr esi, 1
movzx ecx, byte [eax + 0x17]
or ecx, ebp
movzx ebx, byte [eax + 0x18]
shl ebx, 8
or ebx, ecx
movzx ecx, byte [eax + 0x19]
shl ecx, 0x10
or ebx, ecx
movzx ecx, byte [eax + 0x1a]
shl ecx, 0x18
or ecx, ebx
mov ebx, ecx
shr ecx, 1
shl ebx, 0x1f
or ebx, esi
and ecx, 0x7ffff
mov dword [edx + 0x18], ebx
mov dword [edx + 0x1c], ecx
movzx ecx, byte [eax + 0x18]
movzx ebx, byte [eax + 0x19]
mov ebp, ebx
shl ebx, 8
or ecx, ebx
shr ebp, 0x18
movzx ebx, byte [eax + 0x1a]
mov esi, ebx
shr ebx, 0x10
or ebx, ebp
shl esi, 0x10
or ecx, esi
movzx ebp, byte [eax + 0x1b]
mov esi, ebp
shr ebp, 8
or ebp, ebx
shl esi, 0x18
or esi, ecx
shr esi, 0xc
movzx ecx, byte [eax + 0x1c]
or ecx, ebp
movzx ebx, byte [eax + 0x1d]
shl ebx, 8
or ebx, ecx
movzx ecx, byte [eax + 0x1e]
shl ecx, 0x10
or ebx, ecx
movzx eax, byte [eax + 0x1f]
shl eax, 0x18
or eax, ebx
mov ecx, eax
shr eax, 0xc
shl ecx, 0x14
or ecx, esi
and eax, 0x7ffff
mov dword [edx + 0x20], ecx
mov dword [edx + 0x24], eax
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
add esp, 8
ret
call fcn.0046b3d0
jmp fcn.00561d00