Function at 0x560ce0
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x56160f
sub esp, 0x6c
lea eax, [0x695a60]
mov dword [esp], eax
call fcn.0040be50
mov eax, dword [esp + 4]
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0x70]
mov edx, dword [ecx + 0x10]
mov ebx, dword [esp + 0x74]
mov dword [esp], ebx
mov dword [esp + 8], 0x10
mov dword [esp + 0xc], 0x10
call edx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
test eax, eax
jne 0x56111d
nop
nop
mov eax, dword [esp + 0x58]
movzx ecx, byte [eax + 7]
movzx edx, byte [eax + 6]
shl edx, 8
or ecx, edx
movzx edx, byte [eax + 5]
shl edx, 0x10
or ecx, edx
movzx edx, byte [eax + 4]
shl edx, 0x18
or edx, ecx
movzx ecx, byte [eax + 0xf]
movzx ebx, byte [eax + 0xe]
shl ebx, 8
or ecx, ebx
movzx ebx, byte [eax + 0xd]
shl ebx, 0x10
or ecx, ebx
movzx ebx, byte [eax + 0xc]
shl ebx, 0x18
or ebx, ecx
cmp edx, 0x20000000
ja 0x560d97
cmp ebx, 0x20000000
jbe 0x560deb
lea eax, [0x6a9700]
mov dword [esp], eax
call fcn.0040be50
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x22
lea ecx, [0x6fda9d]
mov dword [eax], ecx
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
lea ecx, [0x785138]
mov dword [esp + 0x84], ecx
mov dword [esp + 0x88], eax
add esp, 0x6c
ret
cmp ebx, 0x1c
jb 0x5610e4
mov dword [esp + 0x2c], edx
mov dword [esp + 0x28], ebx
mov ecx, dword [esp + 0x70]
mov ebx, dword [ecx + 0x14]
mov ebp, dword [esp + 0x74]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 0x10
mov dword [esp + 0x14], 0
lea esi, [edx + 0x18]
mov dword [esp + 0x10], esi
call ebx
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
test eax, eax
jne 0x5610b7
mov eax, dword [esp + 0x58]
movzx ecx, byte [eax + 1]
movzx edx, byte [eax]
shl edx, 8
or ecx, edx
movsx edx, cx
cmp edx, 0x1c
setb bl
mov ebp, edx
sar edx, 0x1f
test edx, edx
xchg esi, ebx
sete bl
xchg esi, ebx
xchg edi, ebx
setl bl
xchg edi, ebx
and esi, ebx
or edi, esi
xchg edi, eax
test al, al
xchg edi, eax
jne 0x560e89
movsx ebx, cx
lea esi, [ebx + 2]
mov edi, dword [esp + 0x28]
cmp edi, esi
jae 0x560ec2
mov eax, dword [0x1e849b8]
mov ecx, dword [0x1e849bc]
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], ecx
add esp, 0x6c
ret
mov word [esp + 0x26], cx
mov dword [esp + 0x50], ebx
mov ecx, dword [esp + 0x2c]
add ebp, ecx
mov dword [esp + 0x4c], ebp
adc edx, 0
mov dword [esp + 0x48], edx
mov ebx, dword [esp + 0x70]
mov esi, dword [ebx + 0x14]
mov edi, dword [esp + 0x74]
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], 2
mov dword [esp + 0xc], 0x10
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ebp
call esi
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
test eax, eax
jne 0x56108a
mov eax, dword [esp + 0x58]
movzx ecx, byte [eax + 1]
movzx eax, byte [eax]
shl eax, 8
or ecx, eax
movzx eax, cx
cmp eax, 0xffff
je 0x561051
inc eax
mov ecx, eax
shl eax, 3
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x50]
sub edx, ebx
add edx, 0xfffffffe
cmp eax, edx
ja 0x561018
mov dword [esp + 0x44], ecx
mov eax, dword [esp + 0x4c]
add eax, 2
mov dword [esp + 0x50], eax
mov edx, dword [esp + 0x48]
adc edx, 0
mov dword [esp + 0x48], edx
lea ebx, [0x69be80]
mov dword [esp], ebx
shl ecx, 3
mov dword [esp + 0x30], ecx
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.0044bce0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x70]
mov edx, dword [ecx + 0x14]
mov ebx, dword [esp + 0x74]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov ebp, dword [esp + 0x30]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebp
mov esi, dword [esp + 0x48]
mov dword [esp + 0x14], esi
mov esi, dword [esp + 0x50]
mov dword [esp + 0x10], esi
call edx
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
test eax, eax
jne 0x560feb
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x54]
mov ecx, dword [esp + 0x30]
xor eax, eax
xor ebp, ebp
xor esi, esi
jmp 0x561159
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], ecx
mov dword [esp + 0x88], edx
add esp, 0x6c
ret
mov eax, dword [0x1e849b8]
mov ecx, dword [0x1e849bc]
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], ecx
add esp, 0x6c
ret
mov eax, dword [0x1e849b8]
mov ecx, dword [0x1e849bc]
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], ecx
add esp, 0x6c
ret
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], ecx
mov dword [esp + 0x88], edx
add esp, 0x6c
ret
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], ecx
mov dword [esp + 0x88], edx
add esp, 0x6c
ret
mov eax, dword [0x1e849b8]
mov ecx, dword [0x1e849bc]
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], ecx
add esp, 0x6c
ret
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], ecx
mov dword [esp + 0x88], edx
add esp, 0x6c
ret
mov edi, dword [esp + 0x40]
lea eax, [edi + 1]
mov edi, dword [esp + 0x44]
mov esi, edx
mov edx, edi
mov dword [esp + 0x34], ebp
cmp eax, edx
jge 0x5612b1
mov edi, eax
shl eax, 3
cmp eax, ecx
ja 0x561609
sub ecx, eax
mov dword [esp + 0x3c], ecx
neg ecx
sar ecx, 0x1f
and ecx, eax
mov edx, dword [esp + 0x3c]
cmp edx, 3
jbe 0x5615fd
mov dword [esp + 0x40], edi
movzx edi, byte [ecx + ebx + 3]
movzx ebp, byte [ecx + ebx + 2]
shl ebp, 8
or edi, ebp
movzx ebp, byte [ecx + ebx + 1]
shl ebp, 0x10
or edi, ebp
movzx ebp, byte [ecx + ebx]
shl ebp, 0x18
or ebp, edi
cmp ebp, 0x73666e74
je 0x5611c6
mov ecx, dword [esp + 0x30]
mov ebp, dword [esp + 0x34]
mov edx, esi
jmp 0x56114a
lea ebp, [eax + 4]
mov ecx, dword [esp + 0x30]
cmp ecx, ebp
jb 0x5615f6
lea esi, [edx - 4]
mov edi, esi
xchg esi, ebx
neg ebx
xchg esi, ebx
sar esi, 0x1f
and ebp, esi
cmp edi, 1
jbe 0x5615ea
movzx esi, byte [ebp + ebx + 1]
movzx ebp, byte [ebp + ebx]
shl ebp, 8
or esi, ebp
movsx ebp, si
test ebp, ebp
jl 0x561278
add eax, 6
cmp ecx, eax
jb 0x5615e5
add edx, 0xfffffffa
mov esi, edx
neg edx
sar edx, 0x1f
and eax, edx
cmp esi, 1
jbe 0x5615d9
movzx edx, byte [eax + ebx + 1]
movzx esi, byte [eax + ebx]
shl esi, 8
or edx, esi
movsx edx, dx
test edx, edx
jl 0x56123f
inc ebp
jmp 0x56114a
mov eax, dword [0x1e849b8]
mov ecx, dword [0x1e849bc]
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], ecx
add esp, 0x6c
ret
mov eax, dword [0x1e849b8]
mov ecx, dword [0x1e849bc]
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], ecx
add esp, 0x6c
ret
test ebp, ebp
je 0x561492
cmp ebp, 0x800
jg 0x5613e7
movzx eax, word [esp + 0x26]
movsx eax, ax
add eax, esi
lea ecx, [ebp + ebp*2]
mov edx, dword [esp + 0x28]
cmp edx, eax
jb 0x5612e4
shl ecx, 2
sub edx, eax
cmp ecx, edx
jbe 0x56131d
mov eax, dword [0x1e849b8]
mov ecx, dword [0x1e849bc]
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], ecx
add esp, 0x6c
ret
mov dword [esp + 0x44], eax
mov dword [esp + 0x38], ecx
lea eax, [0x69be80]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.0044bce0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 0x70]
mov ecx, dword [ecx + 0x14]
mov edx, dword [esp + 0x74]
mov dword [esp], edx
mov dword [esp + 4], eax
mov edx, dword [esp + 0x38]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edx
mov dword [esp + 0x14], 0
mov ebx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x44]
add ebx, ebp
mov dword [esp + 0x10], ebx
call ecx
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
test eax, eax
jne 0x5613ba
lea eax, [0x69be00]
mov dword [esp], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.0044bce0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x38]
xor ebp, ebp
jmp 0x5614d3
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], ecx
mov dword [esp + 0x88], edx
add esp, 0x6c
ret
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
mov dword [esp], ebp
call fcn.00409720
mov eax, dword [esp + 4]
lea ecx, [0x69b600]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], ecx
lea eax, [0x7846f0]
mov dword [esp + 0x68], eax
lea eax, [0x707607]
mov dword [esp], eax
mov dword [esp + 4], 0x43
lea eax, [esp + 0x5c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004cde70
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], ecx
add esp, 0x6c
ret
mov eax, dword [0x1e849b8]
mov ecx, dword [0x1e849bc]
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], ecx
add esp, 0x6c
ret
mov dword [eax + ebp*4], ebx
inc ebp
mov ebx, dword [esp + 0x38]
cmp ebp, ecx
jge 0x561594
lea esi, [ebp + ebp*2]
shl esi, 2
lea edi, [esi + 4]
cmp ebx, edi
jb 0x5615d0
sub ebx, esi
add ebx, 0xfffffffc
mov esi, ebx
neg ebx
sar ebx, 0x1f
and edi, ebx
cmp esi, 3
jbe 0x5615c4
movzx ebx, byte [edi + edx + 3]
movzx esi, byte [edi + edx + 2]
shl esi, 8
or ebx, esi
movzx esi, byte [edi + edx + 1]
shl esi, 0x10
or ebx, esi
movzx esi, byte [edi + edx]
shl esi, 0x18
or esi, ebx
and esi, 0xffffff
lea ebx, [esi + 0x104]
cmp ebx, 0x20000000
ja 0x561540
cmp ebp, ecx
jb 0x5614cb
jmp 0x5615bd
lea eax, [0x6a9700]
mov dword [esp], eax
call fcn.0040be50
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x22
lea ecx, [0x6fda9d]
mov dword [eax], ecx
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
lea ecx, [0x785138]
mov dword [esp + 0x84], ecx
mov dword [esp + 0x88], eax
add esp, 0x6c
ret
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x80], ecx
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
add esp, 0x6c
ret
mov eax, ebp
call fcn.00465e00
mov eax, 3
mov ecx, esi
call fcn.00465e00
mov eax, edi
mov ecx, ebx
call fcn.00465e60
mov eax, 1
mov ecx, esi
call fcn.00465e00
call fcn.00465e60
mov eax, 1
mov ecx, edi
call fcn.00465e00
mov eax, ebp
call fcn.00465e60
mov eax, 3
mov ecx, edx
call fcn.00465e00
call fcn.00465e60
nop
call fcn.004649b0
jmp fcn.00560ce0