Function at 0x536aa4
Capabilities:
Enumerate pe sections

Disassembly:
push ebx
push esi
push edi
push ebp
add esp, 0xffffffd8
mov edi, esp
mov edx, 0x55fc74
mov eax, 0x543c1c
mov ecx, 0x400
call fcn.0040306c
mov esi, pe_nt_image_headers32
mov ebx, 0x55fc74
mov ebp, 0x560074
cmp dword [ebx], 0
jne 0x536add
mov word [ebp], 0
jmp 0x536b2f
mov al, byte [ebx + 2]
and al, 0xf8
and eax, 0xff
mov edx, 8
call fcn.00470308
shl eax, 8
push eax
mov al, byte [ebx + 1]
and al, 0xfc
and eax, 0xff
mov edx, 8
call fcn.00470308
shl eax, 3
pop edx
or dx, ax
push edx
mov al, byte [ebx]
and al, 0xf8
and eax, 0xff
mov edx, 8
call fcn.00470308
shr eax, 3
pop edx
or dx, ax
mov word [ebp], dx
add ebp, 2
add ebx, 4
dec esi
jne 0x536ad0
mov word [0x560274], 0
mov word [0x580274], 0
mov word [0x5a0274], 0
mov word [0x5c0274], 0
mov word [0x5e0274], 0
mov word [0x600274], 0
mov word [0x620274], 0
mov esi, 1
mov ebp, 0x580276
mov dword [esp + 0xc], 0x560276
mov dword [esp + 0x10], 0x5a0276
mov dword [esp + 0x14], 0x5c0276
mov dword [esp + 0x18], 0x5e0276
mov dword [esp + 0x1c], 0x600276
mov dword [esp + 0x20], 0x620276
mov eax, esi
and eax, 0xf800
shr eax, 8
mov byte [edi + 2], al
mov eax, esi
and eax, 0x7e0
shr eax, 3
mov byte [edi + 1], al
mov ebx, esi
and bl, 0x1f
shl ebx, 3
mov byte [edi], bl
xor eax, eax
mov al, byte [edi + 2]
xor edx, edx
mov dl, byte [edi + 1]
add eax, edx
xor edx, edx
mov dl, bl
add eax, edx
mov dword [esp + 0x24], eax
fild dword [esp + 0x24]
fdiv dword [0x536f00]
call fcn.00403330
mov byte [esp + 6], al
mov byte [esp + 5], al
mov byte [esp + 4], al
mov al, byte [esp + 6]
and al, 0xf8
and eax, 0xff
mov edx, 8
call fcn.00470308
shl eax, 8
push eax
mov al, byte [esp + 9]
and al, 0xfc
and eax, 0xff
mov edx, 8
call fcn.00470308
shl eax, 3
pop edx
or dx, ax
push edx
mov al, byte [esp + 8]
and al, 0xf8
and eax, 0xff
mov edx, 8
call fcn.00470308
shr eax, 3
pop edx
or dx, ax
mov word [ebp], dx
xor eax, eax
mov al, byte [edi + 2]
mov dword [esp + 0x24], eax
fild dword [esp + 0x24]
fld xword [0x536f04]
fmulp st(1)
call fcn.00403330
mov edx, 0xff
call fcn.00470300
mov byte [esp + 6], al
xor eax, eax
mov al, byte [edi + 1]
mov dword [esp + 0x24], eax
fild dword [esp + 0x24]
fld xword [0x536f04]
fmulp st(1)
call fcn.00403330
mov edx, 0xff
call fcn.00470300
mov byte [esp + 5], al
xor eax, eax
mov al, bl
mov dword [esp + 0x24], eax
fild dword [esp + 0x24]
fld xword [0x536f04]
fmulp st(1)
call fcn.00403330
mov edx, 0xff
call fcn.00470300
mov byte [esp + 4], al
mov al, byte [esp + 6]
and al, 0xf8
and eax, 0xff
mov edx, 8
call fcn.00470308
mov ebx, eax
shl ebx, 8
mov al, byte [esp + 5]
and al, 0xfc
and eax, 0xff
mov edx, 8
call fcn.00470308
shl eax, 3
or bx, ax
mov al, byte [esp + 4]
and al, 0xf8
and eax, 0xff
mov edx, 8
call fcn.00470308
shr eax, 3
or bx, ax
mov eax, dword [esp + 0xc]
mov word [eax], bx
mov al, byte [edi + 2]
and al, 0xf8
and eax, 0xff
shl eax, 8
movzx eax, ax
mov edx, 0x800
call fcn.00470308
mov edx, dword [esp + 0x10]
mov word [edx], ax
xor eax, eax
mov al, byte [edi + 2]
xor edx, edx
mov dl, byte [edi + 1]
add eax, edx
xor edx, edx
mov dl, byte [edi]
add eax, edx
mov dword [esp + 0x24], eax
fild dword [esp + 0x24]
fdiv dword [0x536f00]
call fcn.00403330
mov edx, 0x20
call fcn.00470308
mov byte [esp + 8], al
mov al, byte [esp + 8]
and al, 0xfc
and eax, 0xff
shl eax, 3
mov edx, dword [esp + 0x14]
mov word [edx], ax
xor ebx, ebx
mov byte [esp + 8], 0
xor eax, eax
mov al, byte [edi + 2]
xor edx, edx
mov dl, byte [edi + 1]
add eax, edx
xor edx, edx
mov dl, byte [edi]
add eax, edx
mov dword [esp + 0x24], eax
fild dword [esp + 0x24]
fdiv dword [0x536f00]
call fcn.00403330
mov edx, 8
call fcn.00470308
mov byte [esp + 9], al
and bl, 0xf8
xor eax, eax
mov al, bl
shl eax, 8
mov dl, byte [esp + 8]
and dl, 0xfc
and edx, 0xff
shl edx, 3
or ax, dx
mov dl, byte [esp + 9]
and dl, 0xf8
and edx, 0xff
shr edx, 3
or ax, dx
mov edx, dword [esp + 0x18]
mov word [edx], ax
xor eax, eax
mov al, byte [edi + 2]
xor edx, edx
mov dl, byte [edi + 1]
add eax, edx
xor edx, edx
mov dl, byte [edi]
add eax, edx
mov dword [esp + 0x24], eax
fild dword [esp + 0x24]
fdiv dword [0x536f00]
call fcn.00403330
mov ebx, eax
mov byte [esp + 8], bl
mov byte [esp + 9], 0
and bl, 0xf8
xor eax, eax
mov al, bl
shl eax, 8
mov dl, byte [esp + 8]
and dl, 0xfc
and edx, 0xff
shl edx, 3
or ax, dx
mov dl, byte [esp + 9]
and dl, 0xf8
and edx, 0xff
shr edx, 3
or ax, dx
mov edx, dword [esp + 0x1c]
mov word [edx], ax
xor eax, eax
mov al, byte [edi + 2]
xor edx, edx
mov dl, byte [edi + 1]
add eax, edx
xor edx, edx
mov dl, byte [edi]
add eax, edx
mov dword [esp + 0x24], eax
fild dword [esp + 0x24]
fdiv dword [0x536f00]
call fcn.00403330
mov ebx, eax
mov byte [esp + 9], bl
mov eax, ebx
and al, 0xf8
and eax, 0xff
shl eax, 8
mov dl, byte [esp + 9]
and dl, 0xf8
and edx, 0xff
shr edx, 3
or ax, dx
movzx eax, ax
mov edx, 0x801
call fcn.00470308
mov edx, dword [esp + 0x20]
mov word [edx], ax
inc esi
add dword [esp + 0x20], 2
add dword [esp + 0x1c], 2
add dword [esp + 0x18], 2
add dword [esp + 0x14], 2
add dword [esp + 0x10], 2
add dword [esp + 0xc], 2
add ebp, 2
cmp esi, 0x10000
jne 0x536bb1
add esp, 0x28
pop ebp
pop edi
pop esi
pop ebx
ret