Function at 0x561b53
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
mov dword [ebp - 0x2c], eax
mov esi, edx
mov al, byte [edx]
cmp al, 0x61
ja 0x561b85
test al, al
je 0x563258
lea edx, [eax - 1]
cmp dl, 0x60
ja case.0x561b7e.4
movzx edx, dl
jmp dword [edx*4 + 0x601a2c]
cmp al, 0x81
je 0x5625e4
xor ebx, ebx
cmp al, 0xc0
je 0x56328e
jmp case.0x561b7e.4
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, word [esi + 2]
mov ecx, 0xa
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
xor edx, edx
cmp dword [esi + 4], 0
setne dl
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 0x20]
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov ecx, 4
mov edx, 0xf
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [esi + 4]
test edx, edx
je 0x561c26
mov eax, dword [ebp - 0x2c]
call fcn.005954bd
jmp 0x561cf2
movzx edx, byte [esi + 0x21]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 0x22]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 0x23]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 0x24]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 0x25]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [esi + 8]
mov eax, dword [ebp - 0x2c]
call fcn.004b0ed9
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0xc]
mov eax, dword [ebp - 0x2c]
call fcn.004b0ed9
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0x10]
mov ecx, 0xa
mov eax, dword [ebp - 0x2c]
call fcn.004b0f1e
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0x10]
mov ecx, 0xb
mov eax, dword [ebp - 0x2c]
call fcn.004b0f1e
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0x28]
test edx, edx
je 0x561cf2
mov eax, dword [ebp - 0x2c]
call fcn.00561b53
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0x14]
mov eax, dword [ebp - 0x2c]
call fcn.004b0ed9
mov ebx, eax
jmp 0x56328e
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, word [esi + 2]
mov ecx, 0x10
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
xor edx, edx
cmp word [esi + 6], 0
setne dl
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
xor edx, edx
cmp dword [esi + 0xc], 0
setne dl
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
xor edx, edx
cmp word [esi + 4], 0
setne dl
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 8]
mov ecx, 5
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, word [esi + 6]
test dx, dx
je 0x561dac
mov ecx, 0x10
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [esi + 0xc]
test edx, edx
je 0x561dbb
mov eax, dword [ebp - 0x2c]
call fcn.005954bd
movzx edx, word [esi + 4]
test dx, dx
je 0x561dd1
mov ecx, 0x10
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [esi + 0x10]
test edx, edx
jne 0x561de1
mov edx, dword [esi + 0x14]
test edx, edx
jne 0x561df4
jmp 0x561e06
mov eax, dword [ebp - 0x2c]
call fcn.00561b53
mov ebx, eax
test eax, eax
je 0x561dd8
jmp 0x56328e
mov eax, dword [ebp - 0x2c]
call fcn.00561b53
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0x18]
test edx, edx
je 0x561e1f
mov eax, dword [ebp - 0x2c]
call fcn.00561b53
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0x24]
test edx, edx
je 0x561e38
mov eax, dword [ebp - 0x2c]
call fcn.00561b53
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0x28]
mov eax, dword [ebp - 0x2c]
call fcn.004b0ed9
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0x2c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0ed9
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0x1c]
test edx, edx
jne 0x561e72
mov edx, dword [esi + 0x20]
test edx, edx
jne 0x561e85
jmp 0x561e97
mov eax, dword [ebp - 0x2c]
call fcn.00561b53
mov ebx, eax
test eax, eax
je 0x561e69
jmp 0x56328e
mov eax, dword [ebp - 0x2c]
call fcn.00561b53
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0x30]
mov eax, dword [ebp - 0x2c]
call fcn.004b0ed9
mov ebx, eax
jmp 0x56328e
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 4]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 8]
mov ecx, 6
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 9]
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [esi + 0xc]
mov ecx, 0x18
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [esi + 0x10]
mov ecx, 0x20
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [esi + 0x14]
mov ecx, 0x20
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [esi + 0x18]
test edx, edx
jne 0x561f62
mov edx, dword [esi + 0x24]
mov eax, dword [ebp - 0x2c]
call fcn.004b0ed9
mov ebx, eax
jmp 0x56328e
mov eax, dword [ebp - 0x2c]
call fcn.00561b53
mov ebx, eax
test eax, eax
je 0x561f50
jmp 0x56328e
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi + 1]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
cmp byte [esi + 1], 0
jne 0x5620ed
movzx edx, byte [esi + 2]
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 3]
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 4]
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 5]
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 6]
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 7]
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 8]
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 9]
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [esi + 0xc]
mov ecx, 0x20
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [esi + 0x10]
mov ecx, 0x20
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 0x14]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 0x15]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 0x16]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 0x17]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 0x18]
mov ecx, 4
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 0x19]
mov ecx, 5
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 0x1a]
mov ecx, 5
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov ecx, 2
mov edx, 3
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
cmp byte [esi + 9], 0
je 0x562125
mov edx, dword [esi + 0x1c]
mov ecx, 0x20
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, word [esi + 0x20]
mov ecx, 0x10
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, word [esi + 0x22]
mov ecx, 0x10
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
cmp byte [esi + 7], 0
jne 0x56328e
movzx eax, byte [esi + 0x14]
mov dword [esp], eax
mov edx, dword [esi + 0x28]
mov ecx, dword [esi + 0x2c]
mov eax, dword [ebp - 0x2c]
call fcn.004262df
mov eax, dword [esi + 0x30]
mov edx, dword [esi + 0x34]
movzx ecx, byte [esi + 0x14]
mov dword [esp], ecx
mov ecx, edx
mov edx, eax
mov eax, dword [ebp - 0x2c]
call fcn.004262df
jmp 0x56328e
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 4]
mov ecx, 0x20
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
jmp 0x56328e
mov edx, esi
mov eax, dword [ebp - 0x2c]
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004b1b61
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, word [esi + 2]
mov ecx, 0xa
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
xor edx, edx
cmp dword [esi + 4], 0
setne dl
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 0x1c]
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov ecx, 4
mov edx, 0xf
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [esi + 4]
test edx, edx
je 0x56223e
mov eax, dword [ebp - 0x2c]
call fcn.005954bd
jmp 0x56231f
movzx edx, byte [esi + 0x1d]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 0x1e]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 0x1f]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 0x20]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 0x21]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [esi + 0x18]
mov eax, dword [ebp - 0x2c]
call fcn.004b0ed9
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 8]
mov eax, dword [ebp - 0x2c]
call fcn.004b0ed9
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0xc]
mov eax, dword [ebp - 0x2c]
call fcn.004b0ed9
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0x10]
mov ecx, 0xa
mov eax, dword [ebp - 0x2c]
call fcn.004b0f1e
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0x10]
mov ecx, 0xb
mov eax, dword [ebp - 0x2c]
call fcn.004b0f1e
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0x24]
test edx, edx
je 0x56231f
mov eax, dword [ebp - 0x2c]
call fcn.00561b53
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0x14]
mov eax, dword [ebp - 0x2c]
call fcn.004b0ed9
mov ebx, eax
jmp 0x56328e
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, word [esi + 2]
mov ecx, 0xa
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
xor edx, edx
cmp dword [esi + 4], 0
setne dl
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov ecx, 5
mov edx, 0x1f
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [esi + 4]
test edx, edx
je 0x5623a7
mov eax, dword [ebp - 0x2c]
call fcn.005954bd
jmp 0x56241a
mov edx, dword [esi + 0x18]
mov eax, dword [ebp - 0x2c]
call fcn.004b0ed9
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 8]
mov eax, dword [ebp - 0x2c]
call fcn.004b0ed9
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0xc]
mov eax, dword [ebp - 0x2c]
call fcn.004b0ed9
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0x10]
mov ecx, 0xa
mov eax, dword [ebp - 0x2c]
call fcn.004b0f1e
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0x10]
mov ecx, 0xb
mov eax, dword [ebp - 0x2c]
call fcn.004b0f1e
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0x14]
mov eax, dword [ebp - 0x2c]
call fcn.004b0ed9
mov ebx, eax
jmp 0x56328e
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, word [esi + 2]
mov ecx, 0xa
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
xor edx, edx
cmp dword [esi + 4], 0
setne dl
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov ecx, 5
mov edx, 0x1f
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [esi + 4]
test edx, edx
je 0x5624a2
mov eax, dword [ebp - 0x2c]
call fcn.005954bd
jmp 0x562500
mov edx, dword [esi + 8]
mov eax, dword [ebp - 0x2c]
call fcn.004b0ed9
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0xc]
mov eax, dword [ebp - 0x2c]
call fcn.004b0ed9
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0x10]
mov ecx, 0xa
mov eax, dword [ebp - 0x2c]
call fcn.004b0f1e
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0x10]
mov ecx, 0xb
mov eax, dword [ebp - 0x2c]
call fcn.004b0f1e
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 0x14]
mov eax, dword [ebp - 0x2c]
call fcn.004b0ed9
mov ebx, eax
jmp 0x56328e
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
movsd xmm0, qword [esi + 8]
mov eax, dword [ebp - 0x2c]
call fcn.00426425
movsd xmm0, qword [esi + 0x10]
mov eax, dword [ebp - 0x2c]
call fcn.00426425
mov eax, dword [esi + 0x18]
test eax, eax
je 0x562592
mov dword [esp], eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov edx, eax
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov esi, dword [esi + 0x18]
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov ecx, eax
mov edx, esi
mov eax, dword [ebp - 0x2c]
call fcn.00427720
jmp 0x56328e
mov ecx, 8
xor edx, edx
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
jmp 0x56328e
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
movsd xmm0, qword [esi + 8]
mov eax, dword [ebp - 0x2c]
call fcn.00426425
jmp 0x56328e
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 4]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [esi + 8]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [esi + 0xc]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov eax, dword [esi + 4]
cmp eax, 0x10
je 0x562696
cmp eax, 0x11
jne 0x56328e
mov edx, dword [esi + 0x18]
mov ecx, 0x10
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [esi + 0x1c]
mov ecx, 0x10
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [esi + 0x20]
mov ecx, 0x10
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [esi + 0x24]
mov ecx, 0x10
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
jmp 0x56328e
mov edx, dword [esi + 0x14]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [esi + 0x10]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
jmp 0x56328e
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 4]
mov ecx, 0x18
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
jmp 0x56328e
mov edx, esi
mov eax, dword [ebp - 0x2c]
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004b1be9
mov edx, esi
mov eax, dword [ebp - 0x2c]
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004b1c56
lea edx, [ebp - 0x20]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
mov eax, dword [esi + 4]
xor edx, edx
test eax, eax
je 0x562756
mov edx, dword [eax + 4]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
xor eax, eax
mov dword [ebp - 0x1c], eax
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 4]
call fcn.00425f4e
mov edi, eax
test eax, eax
je 0x56328e
mov ecx, 0x18
mov edx, dword [edi]
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [edi + 4]
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov ecx, 7
xor edx, edx
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx ecx, byte [edi + 4]
mov edx, dword [edi + 8]
mov eax, dword [ebp - 0x2c]
call fcn.004b1a80
jmp 0x562768
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi + 1]
mov ecx, 2
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 3]
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 4]
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 2]
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov ecx, 3
mov edx, 7
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
cmp byte [esi + 3], 0
je 0x562856
movzx edx, byte [esi + 5]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
cmp byte [esi + 4], 0
je 0x56328e
movzx edx, byte [esi + 6]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov eax, dword [ebp - 0x1c]
lea ecx, [eax - 2]
movzx eax, byte [esi + 3]
sub ecx, eax
mov edx, dword [esi + 8]
mov eax, dword [ebp - 0x2c]
call fcn.00427720
jmp 0x56328e
mov edx, dword [esi + 0xc]
xor eax, eax
test edx, edx
je 0x562899
mov eax, dword [edx + 4]
mov ecx, dword [esi + 0x10]
xor edx, edx
test ecx, ecx
je 0x5628a5
mov edx, dword [ecx + 4]
mov ebx, 0xffffffe2
cmp edx, eax
jne 0x56328e
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 4]
mov ecx, 0x18
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 8]
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov ecx, 7
xor edx, edx
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov eax, dword [esi + 0xc]
xor edx, edx
test eax, eax
je 0x56291a
mov edx, dword [eax + 4]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov eax, dword [esi + 0xc]
test eax, eax
je 0x562970
mov eax, dword [eax + 4]
mov dword [ebp - 0x30], eax
xor edi, edi
mov eax, dword [ebp - 0x30]
cmp edi, eax
je 0x562970
mov eax, dword [esi + 0xc]
mov edx, edi
call fcn.00425c8e
movzx ecx, byte [esi + 8]
mov edx, dword [eax]
mov eax, dword [ebp - 0x2c]
call fcn.004b1a80
mov eax, dword [esi + 0x10]
mov edx, edi
call fcn.00425c8e
movzx ecx, byte [esi + 8]
mov edx, dword [eax]
mov eax, dword [ebp - 0x2c]
call fcn.004b1a80
inc edi
jmp 0x562936
mov eax, dword [esi + 0x14]
xor edi, edi
test eax, eax
je 0x562990
cmp byte [esi + 8], 0
je 0x562989
mov dword [esp], eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
jmp 0x56298e
call fcn.0042ff58
mov edi, eax
mov edx, 0xff
cmp edi, edx
cmovbe edx, edi
mov dword [ebp - 0x30], edi
mov ecx, 8
cmp edx, 0xff
jne 0x5629cc
mov edx, 0xff
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
sub dword [ebp - 0x30], 0xff
mov edx, 0xff
cmp dword [ebp - 0x30], edx
cmovbe edx, dword [ebp - 0x30]
jmp 0x56299d
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov eax, 2
cmp byte [esi + 8], 0
je 0x5629e4
mov eax, 1
imul edi, eax
mov ecx, edi
mov edx, dword [esi + 0x14]
mov eax, dword [ebp - 0x2c]
call fcn.00427720
jmp 0x56328e
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi + 1]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 2]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 3]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 4]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 5]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 6]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 7]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
jmp 0x56328e
mov edx, esi
mov eax, dword [ebp - 0x2c]
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004b1b61
lea edx, [ebp - 0x20]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi + 1]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, word [esi + 2]
mov ecx, 0x10
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov eax, dword [esi]
not eax
test eax, 0xffffff00
jne 0x562b78
movzx edx, word [esi + 0xc]
mov ecx, 0x10
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
lea edx, [esi + 0xe]
mov ecx, 0x10
mov eax, dword [ebp - 0x2c]
call fcn.00427720
movzx edx, byte [esi + 0x1e]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
cmp byte [esi + 0x1e], 0
je 0x562b54
movzx edx, byte [esi + 0x1f]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
xor eax, eax
mov dword [ebp - 0x1c], eax
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0x20]
call fcn.00425f4e
mov edx, eax
test eax, eax
je 0x56328e
mov eax, dword [ebp - 0x2c]
call fcn.004b68ab
jmp 0x562b59
mov edx, dword [esi + 4]
cmp word [esi + 2], 0
jne 0x562ba3
test edx, edx
je 0x562bb3
mov dword [esp], edx
mov dword [ebp - 0x30], edx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov ecx, eax
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
call fcn.00427720
jmp 0x56328e
mov ecx, dword [esi + 8]
mov eax, dword [ebp - 0x2c]
call fcn.00427720
jmp 0x56328e
mov ebx, 0xffffffe2
jmp 0x56328e
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi + 1]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
cmp byte [esi + 1], 0xff
jne 0x56328e
movzx edx, word [esi + 2]
mov ecx, 0x10
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, word [esi + 4]
mov ecx, 0x10
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
jmp 0x56328e
lea edx, [ebp - 0x20]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 4]
mov ecx, 0x18
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 8]
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov ecx, 7
xor edx, edx
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov eax, dword [esi + 0xc]
xor edx, edx
test eax, eax
je 0x562c93
mov edx, dword [eax + 4]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
xor edi, edi
mov dword [ebp - 0x1c], edi
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 0xc]
call fcn.00425f4e
test eax, eax
je 0x56328e
movzx ecx, byte [esi + 8]
mov edx, dword [eax]
mov eax, dword [ebp - 0x2c]
call fcn.004b1a80
jmp 0x562ca5
mov edx, esi
mov eax, dword [ebp - 0x2c]
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004b1c56
lea edx, [ebp - 0x20]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
mov eax, dword [esi + 4]
xor edx, edx
test eax, eax
je 0x562d11
mov edx, dword [eax + 4]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
xor ecx, ecx
mov dword [ebp - 0x1c], ecx
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 4]
call fcn.00425f4e
mov edi, eax
test eax, eax
je 0x56328e
mov ecx, 0x18
mov edx, dword [edi]
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [edi + 4]
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov ecx, 7
xor edx, edx
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov eax, dword [edi + 8]
mov dword [esp], eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov edx, eax
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx ecx, byte [edi + 4]
mov edx, dword [edi + 8]
mov eax, dword [ebp - 0x2c]
call fcn.004b1a80
jmp 0x562d23
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi + 1]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
jmp 0x56328e
lea edx, [ebp - 0x20]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi + 1]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
cmp byte [esi + 1], 0
je 0x562e1e
xor ebx, ebx
jmp 0x56328e
xor edx, edx
mov dword [ebp - 0x1c], edx
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 4]
call fcn.00425f4e
mov edi, eax
test eax, eax
je 0x562e17
cmp dword [ebp - 0x2c], 0
je 0x562ed0
mov eax, edi
call fcn.0055fd7c
test eax, eax
je 0x562e53
mov ebx, 0xffffffe1
jmp 0x56328e
mov ecx, dword [edi + 4]
movzx edx, byte [edi]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
mov al, byte [edi]
cmp al, 4
ja 0x562e80
dec eax
cmp al, 3
ja case.default.0x562e79
movzx eax, al
jmp dword [eax*4 + 0x601bb0]
cmp al, 0x42
je case.0x562e79.0
ja 0x562e8c
cmp al, 0x41
je case.0x562e79.0
jmp 0x562ebd
cmp al, 0x43
je case.0x562e79.0
inc al
je case.default.0x562e79
jmp 0x562ebd
movss xmm0, dword [edi + 8]
mov eax, dword [ebp - 0x2c]
call fcn.004263e8
jmp 0x562e23
mov edx, dword [edi + 8]
mov ecx, 0x20
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
jmp 0x562e23
mov ecx, dword [edi + 8]
mov edx, dword [edi + 0xc]
mov eax, dword [ebp - 0x2c]
call fcn.00427720
jmp 0x562e23
or ebx, 0xffffffff
jmp 0x56328e
mov edx, esi
mov eax, dword [ebp - 0x2c]
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004b1be9
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 4]
mov ecx, 0x20
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov eax, dword [ebp - 0x2c]
call fcn.00427720
jmp 0x56328e
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 4]
mov ecx, 0x18
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [esi + 8]
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov ecx, 7
xor edx, edx
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx ecx, byte [esi + 8]
mov edx, dword [esi + 0xc]
mov eax, dword [ebp - 0x2c]
call fcn.004b1a80
movzx ecx, byte [esi + 8]
mov edx, dword [esi + 0x10]
mov eax, dword [ebp - 0x2c]
call fcn.004b1a80
jmp 0x56328e
lea edx, [ebp - 0x20]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi + 1]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov eax, dword [esi + 4]
xor edx, edx
test eax, eax
je 0x563000
mov edx, dword [eax + 4]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
xor eax, eax
mov dword [ebp - 0x1c], eax
lea edx, [ebp - 0x1c]
mov eax, dword [esi + 4]
call fcn.00425f4e
mov edi, eax
test eax, eax
je 0x56328e
movzx edx, byte [edi]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [edi + 4]
mov ecx, 0x20
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
jmp 0x563012
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 4]
mov ecx, 0x18
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [esi + 8]
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004b1a80
mov edx, dword [esi + 0xc]
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004b1a80
jmp 0x56328e
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 4]
mov eax, dword [ebp - 0x2c]
call fcn.004b0ed9
mov ebx, eax
jmp 0x56328e
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
lea edx, [esi + 1]
mov ecx, 0x10
mov eax, dword [ebp - 0x2c]
call fcn.00427720
xor edx, edx
cmp dword [esi + 0x14], 0
setne dl
mov ecx, 1
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov ecx, 1
xor edx, edx
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov ecx, 6
xor edx, edx
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov edx, dword [esi + 0x14]
test edx, edx
jne 0x56316e
mov edi, dword [esi + 0x15c]
test edi, edi
jne 0x56319e
jmp 0x56328e
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
lea edx, [esi + 0x18]
xor edi, edi
cmp edi, dword [esi + 0x14]
jae 0x56315f
mov ecx, 0x10
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x2c]
call fcn.00427720
inc edi
mov edx, dword [ebp - 0x30]
add edx, 0x10
jmp 0x563180
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov esi, eax
test eax, eax
je 0x56328e
and eax, 0x7f
mov byte [ebp - 0x30], al
movzx edx, al
cmp esi, 0x7f
jbe 0x563234
mov eax, esi
shr eax, 7
or eax, 0xffffff80
mov byte [ebp - 0x31], al
movzx edx, al
cmp esi, 0x3fff
jbe 0x563223
mov eax, esi
shr eax, 0xe
or eax, 0xffffff80
mov byte [ebp - 0x32], al
movzx edx, al
cmp esi, 0x1fffff
jbe 0x563212
cmp esi, 0xfffffff
ja 0x56328e
mov edx, esi
shr edx, 0x15
or edx, 0xffffff80
movzx edx, dl
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [ebp - 0x32]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [ebp - 0x31]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
movzx edx, byte [ebp - 0x30]
mov ecx, 8
mov eax, dword [ebp - 0x2c]
call fcn.004262ac
mov ecx, esi
mov edx, edi
mov eax, dword [ebp - 0x2c]
call fcn.00427720
jmp 0x56328e
add eax, 0x40
xor ebx, ebx
cmp al, 6
jbe 0x56328e
lea edx, [ebp - 0x1c]
mov eax, esi
call fcn.00561402
mov ebx, eax
test eax, eax
jne 0x56328e
movzx edx, byte [esi]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
call fcn.004b0dbf
mov ebx, eax
test eax, eax
jne 0x56328e
mov edx, dword [esi + 8]
test edx, edx
je 0x56328e
mov ecx, dword [esi + 4]
mov eax, dword [ebp - 0x2c]
call fcn.00427720
mov eax, ebx
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
ret