Function at 0x57d5a0
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 8
mov eax, dword [esp + 0x14]
mov dx, word [eax]
push ebx
xor ecx, ecx
mov cx, word [eax + 6]
push esi
mov esi, dword [esp + 0x18]
mov word [esi], dx
mov dx, word [eax + 8]
mov word [esi + 2], dx
xor edx, edx
mov dx, cx
push edi
mov dword [esp + 0x20], ecx
mov dword [esi + 4], edx
mov edx, dword [eax + 8]
dec edx
cmp edx, 0xc
ja case.default.0x57d5db
jmp dword [edx*4 + 0x57db30]
mov dl, byte [eax + 0xf]
test dl, dl
mov edi, dword [esp + 0x18]
je 0x57d651
cmp cx, 0xfffd
jne 0x57d622
mov eax, dword [eax]
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x20]
push edx
push eax
push edi
call fcn.0056f690
mov ecx, dword [esp + 0x2c]
add esp, 0x10
mov dword [esi + 4], ecx
mov ecx, dword [esp + 0x18]
push ecx
push esi
push edi
call fcn.0057ded0
jmp 0x57db1c
lea edx, [esp + 0x18]
push edx
mov edx, dword [eax]
lea ecx, [esp + 0x24]
push ecx
push edx
push edi
call fcn.0056f690
mov ecx, dword [esp + 0x28]
movzx eax, word [esp + 0x30]
add esp, 0x10
push ecx
push esi
push edi
mov dword [esi + 4], eax
call fcn.0057ded0
jmp 0x57db1c
cmp cx, 1
jne 0x57d6c7
mov eax, dword [eax]
lea edx, [esp + 0x18]
push edx
push eax
push edi
call fcn.0056f690
add esp, 0xc
cmp word [edi + 0xe8], 0x4d4d
jne 0x57d6a4
movzx ecx, word [esi + 2]
mov edx, dword [edi + 0xf4]
movzx ebx, word [esp + 0x18]
shl ecx, 2
mov eax, dword [ecx + edx]
mov edx, dword [edi + 0xf0]
mov ecx, dword [edx + ecx]
and eax, ebx
shl eax, cl
pop edi
mov dword [esi + 8], eax
pop esi
mov eax, 1
pop ebx
add esp, 8
ret
movzx eax, word [esi + 2]
mov ecx, dword [edi + 0xf4]
movzx edx, word [esp + 0x18]
mov eax, dword [ecx + eax*4]
and eax, edx
mov dword [esi + 8], eax
pop edi
pop esi
mov eax, 1
pop ebx
add esp, 8
ret
mov edx, dword [eax]
lea ecx, [esp + 0x18]
push ecx
push edx
push edi
call fcn.0056f690
mov eax, dword [esp + 0x24]
push eax
push esi
push edi
call fcn.0057ded0
add esp, 0x18
jmp 0x57db1f
mov dl, byte [eax + 0xf]
test dl, dl
je 0x57d758
cmp cx, 0xfffd
mov edi, dword [esp + 0x18]
jne 0x57d729
mov eax, dword [eax]
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x20]
push edx
push eax
push edi
call fcn.0056f690
mov ecx, dword [esp + 0x2c]
add esp, 0x10
mov dword [esi + 4], ecx
mov ecx, dword [esp + 0x18]
push ecx
push esi
push edi
call fcn.0057df40
jmp 0x57db1c
lea edx, [esp + 0x18]
push edx
mov edx, dword [eax]
lea ecx, [esp + 0x24]
push ecx
push edx
push edi
call fcn.0056f690
mov ecx, dword [esp + 0x28]
movzx eax, word [esp + 0x30]
add esp, 0x10
push ecx
push esi
push edi
mov dword [esi + 4], eax
call fcn.0057df40
jmp 0x57db1c
cmp cx, 1
mov edx, dword [eax]
jne 0x57d77e
mov eax, dword [esp + 0x18]
add esi, 8
push esi
push edx
push eax
call fcn.0056f690
add esp, 0xc
pop edi
pop esi
mov eax, 1
pop ebx
add esp, 8
ret
mov edi, dword [esp + 0x18]
lea ecx, [esp + 0x18]
push ecx
push edx
push edi
call fcn.0056f690
mov eax, dword [esp + 0x24]
push eax
push esi
push edi
call fcn.0057df40
add esp, 0x18
jmp 0x57db1f
mov dl, byte [eax + 0xf]
test dl, dl
mov edi, dword [esp + 0x18]
je 0x57d811
cmp cx, 0xfffd
jne 0x57d7e2
mov eax, dword [eax]
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x20]
push edx
push eax
push edi
call fcn.0056f690
mov ecx, dword [esp + 0x2c]
add esp, 0x10
mov dword [esi + 4], ecx
mov ecx, dword [esp + 0x18]
push ecx
push esi
push edi
call fcn.0057df70
jmp 0x57db1c
lea edx, [esp + 0x18]
push edx
mov edx, dword [eax]
lea ecx, [esp + 0x24]
push ecx
push edx
push edi
call fcn.0056f690
mov ecx, dword [esp + 0x28]
movzx eax, word [esp + 0x30]
add esp, 0x10
push ecx
push esi
push edi
mov dword [esi + 4], eax
call fcn.0057df70
jmp 0x57db1c
cmp cx, 1
mov eax, dword [eax]
jne 0x57d839
lea edx, [esp + 0x18]
push edx
push eax
push edi
call fcn.0056f690
lea ecx, [esp + 0x24]
push ecx
push esi
push edi
call fcn.0057df70
add esp, 0x18
jmp 0x57db1f
lea edx, [esp + 0x18]
push edx
push eax
push edi
call fcn.0056f690
mov ecx, dword [esp + 0x24]
push ecx
push esi
push edi
call fcn.0057df70
add esp, 0x18
jmp 0x57db1f
mov dl, byte [eax + 0xf]
test dl, dl
mov edi, dword [esp + 0x18]
je 0x57d8c8
cmp cx, 0xfffd
jne 0x57d899
lea edx, [esp + 0x18]
push edx
mov edx, dword [eax]
lea ecx, [esp + 0x20]
push ecx
push edx
push edi
call fcn.0056f690
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
add esp, 0x10
push edx
push esi
push edi
mov dword [esi + 4], eax
call fcn.0057e0c0
jmp 0x57db1c
mov eax, dword [eax]
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x24]
push edx
push eax
push edi
call fcn.0056f690
mov edx, dword [esp + 0x28]
movzx ecx, word [esp + 0x30]
add esp, 0x10
push edx
push esi
push edi
mov dword [esi + 4], ecx
call fcn.0057e0c0
jmp 0x57db1c
cmp cx, 1
mov edx, dword [eax]
jne 0x57d8f0
lea ecx, [esp + 0x18]
push ecx
push edx
push edi
call fcn.0056f690
lea eax, [esp + 0x24]
push eax
push esi
push edi
call fcn.0057e0c0
add esp, 0x18
jmp 0x57db1f
lea ecx, [esp + 0x18]
push ecx
push edx
push edi
call fcn.0056f690
mov eax, dword [esp + 0x24]
push eax
push esi
push edi
call fcn.0057e0c0
add esp, 0x18
jmp 0x57db1f
mov dl, byte [eax + 0xf]
test dl, dl
mov edi, dword [esp + 0x18]
je 0x57d97f
cmp cx, 0xfffd
jne 0x57d950
mov eax, dword [eax]
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x20]
push edx
push eax
push edi
call fcn.0056f690
mov ecx, dword [esp + 0x2c]
add esp, 0x10
mov dword [esi + 4], ecx
mov ecx, dword [esp + 0x18]
push ecx
push esi
push edi
call fcn.0057e0f0
jmp 0x57db1c
lea edx, [esp + 0x18]
push edx
mov edx, dword [eax]
lea ecx, [esp + 0x24]
push ecx
push edx
push edi
call fcn.0056f690
mov ecx, dword [esp + 0x28]
movzx eax, word [esp + 0x30]
add esp, 0x10
push ecx
push esi
push edi
mov dword [esi + 4], eax
call fcn.0057e0f0
jmp 0x57db1c
cmp cx, 1
mov eax, dword [eax]
jne 0x57d9a7
lea edx, [esp + 0xc]
push edx
push eax
push edi
call fcn.0056f690
lea ecx, [esp + 0x18]
push ecx
push esi
push edi
call fcn.0057e0f0
add esp, 0x18
jmp 0x57db1f
lea edx, [esp + 0x18]
push edx
push eax
push edi
call fcn.0056f690
mov ecx, dword [esp + 0x24]
push ecx
push esi
push edi
call fcn.0057e0f0
add esp, 0x18
jmp 0x57db1f
mov cl, byte [eax + 0xf]
test cl, cl
mov ebx, dword [esp + 0x18]
je 0x57d9ea
lea edx, [esp + 0x18]
push edx
mov edx, dword [eax]
lea ecx, [esp + 0x24]
push ecx
push edx
push ebx
call fcn.0056f690
add esp, 0x10
jmp 0x57d9fb
mov edx, dword [eax]
lea ecx, [esp + 0x18]
push ecx
push edx
push ebx
call fcn.0056f690
add esp, 0xc
mov edx, dword [esp + 0x18]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
push edx
not ecx
push esi
mov dword [esi + 4], ecx
push ebx
jmp 0x57db17
mov dl, byte [eax + 0xf]
test dl, dl
mov edi, dword [esp + 0x18]
je 0x57da6c
cmp cx, 0xfffd
jne 0x57da49
mov eax, dword [eax]
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x20]
push edx
push eax
push edi
call fcn.0056f690
mov ecx, dword [esp + 0x2c]
mov dword [esi + 4], ecx
add esp, 0x10
jmp 0x57db10
lea edx, [esp + 0x18]
push edx
mov edx, dword [eax]
lea ecx, [esp + 0x24]
push ecx
push edx
push edi
call fcn.0056f690
movzx eax, word [esp + 0x30]
mov dword [esi + 4], eax
add esp, 0x10
jmp 0x57db10
cmp cx, 1
mov eax, dword [eax]
jne 0x57da86
lea edx, [esp + 0x18]
push edx
push eax
push edi
call fcn.0056f690
lea ecx, [esp + 0x24]
jmp 0x57da96
lea edx, [esp + 0x18]
push edx
push eax
push edi
call fcn.0056f690
mov ecx, dword [esp + 0x24]
push ecx
push esi
push edi
call fcn.0057de80
add esp, 0x18
test eax, eax
jne case.default.0x57d5db
pop edi
pop esi
pop ebx
add esp, 8
ret
cmp cx, 0xffff
mov edi, dword [esp + 0x18]
jne 0x57dadb
lea edx, [esp + 0x18]
push edx
mov edx, dword [eax]
lea ecx, [esp + 0x24]
push ecx
push edx
push edi
call fcn.0056f690
movzx eax, word [esp + 0x30]
add esp, 0x10
mov dword [esi + 4], eax
jmp 0x57db10
cmp cx, 0xfffd
mov eax, dword [eax]
jne 0x57db01
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x20]
push edx
push eax
push edi
call fcn.0056f690
mov ecx, dword [esp + 0x2c]
add esp, 0x10
mov dword [esi + 4], ecx
jmp 0x57db10
lea edx, [esp + 0x18]
push edx
push eax
push edi
call fcn.0056f690
add esp, 0xc
mov ecx, dword [esp + 0x18]
push ecx
push esi
push edi
call fcn.0057de80
add esp, 0xc
test eax, eax
jne case.default.0x57d5db
pop edi
pop esi
pop ebx
add esp, 8
ret