Function at 0x6b9070
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x28]
cmp eax, dword [ecx + 8]
jbe 0x6b9928
sub esp, 0xa8
mov eax, dword [esp + 0xac]
cmp dword [eax + 0x10], 0xffff
jg 0x6b98c1
cmp dword [eax + 0x1c], 0xffff
jg 0x6b987f
cmp dword [eax + 0x28], 0xffff
jg 0x6b983d
cmp dword [eax + 0x34], 0xffff
jg 0x6b97fb
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
movzx ecx, word [eax]
movzx edx, word [eax + 4]
shl edx, 0xb
movzx ebx, word [eax + 0xa]
or ebx, edx
movzx edx, byte [eax + 9]
test dl, dl
je 0x6b910a
or ebx, 0x80
movzx edx, byte [eax + 8]
test dl, dl
je 0x6b9118
or ebx, 0x100
movzx edx, byte [eax + 7]
test dl, dl
je 0x6b9126
or ebx, 0x200
movzx edx, byte [eax + 6]
test dl, dl
je 0x6b9134
or ebx, 0x400
movzx edx, byte [eax + 2]
test dl, dl
je 0x6b9142
or ebx, 0xffff8000
mov word [esp + 0x84], cx
mov word [esp + 0x86], bx
mov ecx, dword [eax + 0x10]
mov word [esp + 0x88], cx
mov ecx, dword [eax + 0x1c]
mov word [esp + 0x8a], cx
mov ecx, dword [eax + 0x28]
mov word [esp + 0x8c], cx
mov ecx, dword [eax + 0x34]
mov word [esp + 0x8e], cx
lea ecx, [esp + 0x84]
mov dword [esp], ecx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0xb8]
mov dword [esp + 0xc], edx
call fcn.006b5080
mov eax, dword [esp + 0x14]
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x30], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x90], edx
call fcn.0040b960
mov eax, dword [esp]
mov dword [esp + 0xa4], eax
mov ecx, dword [esp + 0xac]
mov edx, dword [ecx + 0x10]
mov dword [esp + 0x60], edx
mov ebx, dword [esp + 0xb4]
mov ebp, dword [esp + 0x90]
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0x30]
mov dword [esp + 0x7c], eax
xor eax, eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x7c]
jmp 0x6b9249
mov ebx, dword [esp + 0x38]
inc ebx
mov ebp, dword [esp + 0xac]
mov esi, dword [esp + 0xb4]
mov edi, dword [esp + 0xa4]
mov dword [esp + 0x38], ebx
mov edi, edx
mov esi, ecx
mov ebp, eax
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0xb4]
mov ebx, dword [esp + 0x38]
cmp ebx, edx
jge 0x6b9367
mov dword [esp + 0x5c], edi
mov edx, dword [ecx + 0x10]
mov edi, dword [ecx + 0xc]
cmp ebx, edx
jae 0x6b991e
mov ecx, ebx
shl ebx, 8
lea edx, [ebx + ecx*4]
add edx, edi
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov edx, dword [esp + 0x5c]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0xb4]
mov dword [esp + 0x14], edx
call fcn.006bba50
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
test ebx, ebx
je 0x6b920c
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x98], ebp
lea eax, [0x919d80]
mov dword [esp], eax
call fcn.0040ae10
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x10
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x6b935a
lea ecx, [0x98b942]
mov dword [edi], ecx
mov ecx, dword [esp + 0x4c]
mov dword [edi + 8], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x6b9341
mov eax, dword [esp + 0x98]
mov dword [edi + 0xc], eax
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
lea eax, [0xa4de40]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], edi
add esp, 0xa8
ret
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0x98]
call fcn.00456fe0
mov edi, edx
jmp 0x6b9305
lea eax, [0x98b942]
call fcn.00456fe0
jmp 0x6b92ea
mov edx, dword [ecx + 0x1c]
mov dword [esp + 0x60], edx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 0x74], eax
xor eax, eax
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x74]
jmp 0x6b93c2
mov ebx, dword [esp + 0x3c]
inc ebx
mov ebp, dword [esp + 0xac]
mov esi, dword [esp + 0xb4]
mov edi, dword [esp + 0xa4]
mov dword [esp + 0x3c], ebx
mov edi, edx
mov esi, ecx
mov ebp, eax
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0xb4]
mov ebx, dword [esp + 0x3c]
cmp ebx, edx
jge 0x6b94de
mov dword [esp + 0x58], edi
mov edx, dword [ecx + 0x1c]
mov edi, dword [ecx + 0x18]
cmp ebx, edx
jae 0x6b9915
imul ecx, ebx, 0x114
add ecx, edi
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov ecx, dword [esp + 0x58]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x14], ecx
call fcn.006b59c0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
test ebx, ebx
je 0x6b9385
mov dword [esp + 0x48], ebx
mov dword [esp + 0x9c], ebp
lea eax, [0x919d80]
mov dword [esp], eax
call fcn.0040ae10
mov edi, dword [esp + 4]
mov dword [edi + 4], 0xe
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x6b94d1
lea ecx, [0x98a0c6]
mov dword [edi], ecx
mov ecx, dword [esp + 0x48]
mov dword [edi + 8], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x6b94b8
mov eax, dword [esp + 0x9c]
mov dword [edi + 0xc], eax
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
lea eax, [0xa4de40]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], edi
add esp, 0xa8
ret
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0x9c]
call fcn.00456fe0
mov edi, edx
jmp 0x6b947c
lea eax, [0x98a0c6]
call fcn.00456fe0
jmp 0x6b9461
mov edx, dword [ecx + 0x28]
mov dword [esp + 0x60], edx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 0x6c], eax
xor eax, eax
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x6c]
jmp 0x6b9539
mov ebx, dword [esp + 0x34]
inc ebx
mov ebp, dword [esp + 0xac]
mov esi, dword [esp + 0xb4]
mov edi, dword [esp + 0xa4]
mov dword [esp + 0x34], ebx
mov edi, edx
mov esi, ecx
mov ebp, eax
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0xb4]
mov ebx, dword [esp + 0x34]
cmp ebx, edx
jge 0x6b9655
mov dword [esp + 0x54], edi
mov edx, dword [ecx + 0x28]
mov edi, dword [ecx + 0x24]
cmp ebx, edx
jae 0x6b990c
imul ecx, ebx, 0x114
add ecx, edi
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov ecx, dword [esp + 0x54]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x14], ecx
call fcn.006b59c0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
test ebx, ebx
je 0x6b94fc
mov dword [esp + 0x44], ebx
mov dword [esp + 0xa0], ebp
lea eax, [0x919d80]
mov dword [esp], eax
call fcn.0040ae10
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x11
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x6b9648
lea ecx, [0x98c4cd]
mov dword [edi], ecx
mov ecx, dword [esp + 0x44]
mov dword [edi + 8], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x6b962f
mov eax, dword [esp + 0xa0]
mov dword [edi + 0xc], eax
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
lea eax, [0xa4de40]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], edi
add esp, 0xa8
ret
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0xa0]
call fcn.00456fe0
mov edi, edx
jmp 0x6b95f3
lea eax, [0x98c4cd]
call fcn.00456fe0
jmp 0x6b95d8
mov edx, dword [ecx + 0x34]
mov dword [esp + 0x60], edx
mov ebx, dword [esp + 0xb4]
mov dword [esp + 0x64], eax
xor eax, eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x64]
jmp 0x6b96ad
mov ebx, dword [esp + 0x40]
inc ebx
mov ebp, dword [esp + 0x60]
mov esi, dword [esp + 0xb4]
mov edi, dword [esp + 0xa4]
mov dword [esp + 0x40], ebx
mov ebp, eax
mov edi, edx
mov esi, ecx
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0x60]
mov ebx, dword [esp + 0xb4]
mov ebx, dword [esp + 0x40]
cmp ebx, edx
jge 0x6b97c9
mov dword [esp + 0x30], edi
mov edx, dword [ecx + 0x34]
mov edi, dword [ecx + 0x30]
cmp ebx, edx
jae 0x6b9903
imul ecx, ebx, 0x114
add ecx, edi
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
mov ecx, dword [esp + 0x30]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x14], ecx
call fcn.006b59c0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
test ebx, ebx
je 0x6b9673
mov dword [esp + 0x50], ebx
mov dword [esp + 0x94], ebp
lea eax, [0x919d80]
mov dword [esp], eax
call fcn.0040ae10
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x12
mov eax, dword [0xdd7ec0]
test eax, eax
jne 0x6b97bc
lea ecx, [0x98d171]
mov dword [edi], ecx
mov ecx, dword [esp + 0x50]
mov dword [edi + 8], ecx
mov ecx, dword [0xdd7ec0]
test ecx, ecx
jne 0x6b97a3
mov eax, dword [esp + 0x94]
mov dword [edi + 0xc], eax
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
lea eax, [0xa4de40]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], edi
add esp, 0xa8
ret
lea ecx, [edi + 0xc]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0x94]
call fcn.00456fe0
mov edi, edx
jmp 0x6b9767
lea eax, [0x98d171]
call fcn.00456fe0
jmp 0x6b974c
mov dword [esp + 0xbc], ebp
mov dword [esp + 0xc0], esi
mov dword [esp + 0xc4], edi
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
add esp, 0xa8
ret
mov eax, dword [0xdc2f5c]
mov ecx, dword [0xdc2f58]
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xcc], eax
add esp, 0xa8
ret
mov eax, dword [0xdc2f6c]
mov ecx, dword [0xdc2f68]
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xcc], eax
add esp, 0xa8
ret
mov eax, dword [0xdc2f60]
mov ecx, dword [0xdc2f64]
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], ecx
add esp, 0xa8
ret
mov eax, dword [0xdc2f7c]
mov ecx, dword [0xdc2f78]
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xcc], eax
add esp, 0xa8
ret
mov eax, ebx
mov ecx, edx
call fcn.00457060
mov eax, ebx
mov ecx, edx
call fcn.00457060
mov eax, ebx
mov ecx, edx
call fcn.00457060
mov eax, ebx
mov ecx, edx
call fcn.00457060
nop
call fcn.004557a0
jmp fcn.006b9070