Function at 0x668c70
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x668f81
sub esp, 0x58
mov ebx, dword [esp + 0x5c]
mov ebp, dword [ebx]
mov esi, ebp
mov eax, ebx
movzx ebx, word [esi + 0x14]
lea ebx, [ebx + ebp + 0x18]
test byte [ebx], al
movzx ecx, word [esi + 6]
cmp ecx, 0xffff
ja 0x668f76
mov dword [esp + 0x30], ecx
lea edi, [esp + 0x34]
mov edx, eax
xor eax, eax
call fcn.00456d5b
mov ecx, dword [esp + 0x30]
test ecx, ecx
jbe 0x668f6d
mov ebp, dword [ebx + 8]
mov dword [esp + 0x34], ebp
mov ebp, dword [edx]
nop
mov ebp, dword [ebp + 0x38]
xchg ebp, ebx
neg ebx
xchg ebp, ebx
and ebp, dword [esp + 0x34]
mov dword [esp + 0x38], ebp
mov ebp, dword [ebx + 0x10]
test ebp, ebp
jne 0x668d0f
mov ebp, dword [ebx + 0x24]
test ebp, 0x40
je 0x668cfe
mov esi, dword [edx]
mov ebp, dword [esi + 0x20]
jmp 0x668d0f
test ebp, 0x80
je 0x668d0d
mov esi, dword [edx]
mov ebp, dword [esi + 0x24]
jmp 0x668d0f
xor ebp, ebp
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x3c], ebp
nop
mov dword [ebx + 8], ebp
mov ebp, dword [ebx + 0x24]
mov dword [esp + 0x40], ebp
mov eax, 1
jmp 0x668d2e
inc eax
mov edx, dword [esp + 0x5c]
mov ebp, dword [edx]
cmp word [ebp + 6], ax
jbe 0x668ecc
movzx esi, ax
cmp ecx, esi
jbe 0x668f66
mov dword [esp + 0x48], ebp
lea esi, [esi + esi*4]
nop
mov edi, dword [ebp + 0x38]
lea edx, [ebx + esi*8 + 8]
mov ebp, dword [edx]
mov dword [esp + 0x28], ebp
xchg edi, ebx
neg ebx
xchg edi, ebx
and edi, ebp
lea ebp, [ebx + esi*8 + 0x10]
mov ebp, dword [ebp]
test ebp, ebp
jne 0x668da4
lea ebp, [ebx + esi*8 + 0x24]
mov ebp, dword [ebp]
test ebp, 0x40
je 0x668d8b
mov ebx, dword [esp + 0x48]
mov ebx, dword [ebx + 0x20]
mov ebp, ebx
mov ebx, dword [esp + 0x4c]
jmp 0x668da4
test ebp, 0x80
je 0x668da2
mov ebx, dword [esp + 0x48]
mov ebx, dword [ebx + 0x24]
mov ebp, ebx
mov ebx, dword [esp + 0x4c]
jmp 0x668da4
xor ebp, ebp
nop
mov dword [edx], ebp
cmp dword [esp + 0x38], edi
je 0x668db9
mov edx, dword [esp + 0x34]
add edx, dword [esp + 0x3c]
cmp edx, edi
jbe 0x668dfe
lea edx, [ebx + esi*8 + 0x24]
mov edx, dword [edx]
test edx, 0x2000000
je 0x668dd3
mov esi, dword [esp + 0x40]
test esi, 0x2000000
jne 0x668de5
mov esi, dword [esp + 0x40]
or edx, esi
and edx, 0xfdffffff
mov dword [esp + 0x40], edx
jmp 0x668deb
or edx, esi
mov dword [esp + 0x40], edx
mov edx, dword [esp + 0x28]
add edx, ebp
sub edx, dword [esp + 0x34]
mov dword [esp + 0x3c], edx
jmp 0x668d29
mov word [esp + 0x1e], ax
mov dword [esp + 0x24], edi
mov dword [esp + 0x20], ebp
mov dword [esp + 0x2c], esi
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
lea ecx, [esp + 0x34]
mov dword [esp + 4], ecx
call fcn.00668a30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
test eax, eax
jne 0x668e6b
mov edx, dword [esp + 0x28]
mov dword [esp + 0x34], edx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x38], edx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x3c], edx
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x4c]
lea edx, [ebx + edx*8 + 0x24]
mov edx, dword [edx]
mov dword [esp + 0x40], edx
movzx eax, word [esp + 0x1e]
mov ecx, dword [esp + 0x30]
jmp 0x668d29
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
test ecx, ecx
je 0x668e82
mov ecx, dword [ecx + 4]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], edx
lea eax, [0x7720ac]
mov dword [esp], eax
mov dword [esp + 4], 0x1c
lea eax, [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004a4ad0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], ecx
add esp, 0x58
ret
mov byte [esp + 0x44], 1
mov dword [esp], edx
lea eax, [esp + 0x34]
mov dword [esp + 4], eax
call fcn.00668a30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
test edx, edx
je 0x668f52
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
test eax, eax
je 0x668f08
mov eax, dword [eax + 4]
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], ecx
lea eax, [0x7720ac]
mov dword [esp], eax
mov dword [esp + 4], 0x1c
lea eax, [esp + 0x50]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004a4ad0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], ecx
add esp, 0x58
ret
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
add esp, 0x58
ret
mov eax, esi
call fcn.00456b40
xor eax, eax
mov ecx, eax
call fcn.00456b40
mov edx, 0xffff
call fcn.00456b60
nop
call fcn.00455690
jmp fcn.00668c70