Function at 0x6e2ed0
Capabilities:
Enumerate pe sections

Disassembly:
push 0xffffffffffffffff
push 0x88d218
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x30
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x1c], ecx
mov eax, dword [esp + 0x50]
mov dword [esp + 0x48], 0
mov eax, dword [eax - 8]
test eax, eax
je 0x6e36cc
cmp eax, 0xa
jne 0x6e36cc
push 0x9b5220
lea ecx, [esp + 0x18]
call fcn.00831f5f
push 0x9b5220
lea ecx, [esp + 0x14]
mov byte [esp + 0x4c], 1
call fcn.00831f5f
mov ecx, dword [esp + 0x50]
mov byte [esp + 0x48], 2
mov ax, word [ecx]
lea ecx, [esp + 0x14]
push eax
call fcn.00825673
mov edx, dword [esp + 0x14]
push 0
push edx
call fcn.007440f4
add esp, 8
call fcn.005fd254
mov edi, eax
mov eax, dword [esp + 0x50]
lea ecx, [esp + 0x14]
mov ax, word [eax + 2]
push eax
call fcn.00825673
mov ecx, dword [esp + 0x14]
push 0
push ecx
call fcn.007440f4
add esp, 8
call fcn.005fd254
cmp di, 6
mov dword [esp + 0x34], eax
ja 0x6e36b0
cmp ax, 6
ja 0x6e36b0
cmp di, ax
ja 0x6e36b0
mov eax, dword [esp + 0x50]
mov cx, word [eax + 0xa]
mov dx, word [eax + 8]
mov si, word [eax + 6]
mov ax, word [eax + 4]
and ecx, 0xffff
and edx, 0xffff
push ecx
and esi, 0xffff
push edx
and eax, 0xffff
push esi
push eax
lea edx, [esp + 0x20]
push 0x995bcc
push edx
call fcn.00826097
mov eax, dword [esp + 0x28]
push 0
push eax
call fcn.007440f4
add esp, 0x20
call fcn.005fd254
mov ebx, eax
mov esi, 0x64
mov ecx, ebx
mov dword [esp + 0x20], ebx
and ecx, 0xffff
mov eax, ecx
cdq
idiv esi
cmp edx, 0x3b
jg 0x6e36b0
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
cmp edx, 0x17
jg 0x6e36b0
mov eax, dword [esp + 0x50]
mov cx, word [eax + 0x12]
mov dx, word [eax + 0x10]
mov si, word [eax + 0xe]
mov ax, word [eax + 0xc]
and ecx, 0xffff
and edx, 0xffff
push ecx
and esi, 0xffff
push edx
and eax, 0xffff
push esi
push eax
lea edx, [esp + 0x20]
push 0x995bcc
push edx
call fcn.00826097
mov eax, dword [esp + 0x28]
push 0
push eax
call fcn.007440f4
add esp, 0x20
call fcn.005fd254
mov esi, eax
mov ebp, 0x64
mov ecx, esi
mov dword [esp + 0x24], esi
and ecx, 0xffff
mov eax, ecx
cdq
idiv ebp
cmp edx, 0x3b
jg 0x6e36b0
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
cmp edx, 0x17
jg 0x6e36b0
cmp bx, si
ja 0x6e36b0
mov eax, dword [esp + 0x34]
and edi, 0xffff
and eax, 0xffff
mov dword [esp + 0x28], edi
cmp edi, eax
mov dword [esp + 0x3c], eax
jg 0x6e367c
mov edx, dword [esp + 0x28]
lea eax, [edx + edx*4]
lea ecx, [edx + eax*2]
mov eax, dword [esp + 0x1c]
lea ebx, [eax + ecx*4]
mov dword [esp + 0x34], ebx
mov eax, dword [ebx + 0x10]
test eax, eax
jne 0x6e3162
lea esi, [ebx + 0x14]
push 0xffffffffffffffff
push 0
mov ecx, esi
call fcn.006e3930
lea edi, [ebx + 0x28]
push 0xffffffffffffffff
push 0
mov ecx, edi
call fcn.006e3930
mov ebp, dword [esi + 8]
push 0xffffffffffffffff
lea ecx, [ebp + 1]
push ecx
mov ecx, esi
call fcn.006e3930
mov edx, dword [esi + 4]
mov ax, word [esp + 0x20]
push 0xffffffffffffffff
mov word [edx + ebp*2], ax
mov esi, dword [edi + 8]
lea ecx, [esi + 1]
push ecx
mov ecx, edi
call fcn.006e3930
mov edx, dword [edi + 4]
mov ax, word [esp + 0x24]
mov word [edx + esi*2], ax
mov dword [ebx + 0x10], 1
jmp 0x6e3667
mov ecx, dword [ebx + 0x1c]
mov eax, dword [ebx + 0x30]
cmp ecx, eax
mov dword [esp + 0x2c], ecx
jne 0x6e36b0
xor edi, edi
test ecx, ecx
jle 0x6e318e
mov eax, dword [ebx + 0x18]
mov esi, dword [esp + 0x20]
cmp si, word [eax]
jb 0x6e318e
inc edi
add eax, 2
cmp edi, ecx
jl 0x6e3181
xor ebp, ebp
test ecx, ecx
mov dword [esp + 0x18], ebp
jle 0x6e31b0
mov eax, dword [ebx + 0x18]
mov esi, dword [esp + 0x24]
cmp si, word [eax]
jb 0x6e31ac
inc ebp
add eax, 2
cmp ebp, ecx
jl 0x6e319f
mov dword [esp + 0x18], ebp
dec ecx
test ecx, ecx
jl 0x6e31d9
mov esi, dword [esp + 0x1c]
lea eax, [edx + edx*4 + 5]
lea eax, [edx + eax*2 + 1]
mov eax, dword [esi + eax*4]
lea esi, [eax + ecx*2]
mov ax, word [esp + 0x20]
cmp ax, word [esi]
ja 0x6e31d9
dec ecx
sub esi, 2
test ecx, ecx
jge 0x6e31c7
mov eax, dword [esp + 0x2c]
dec eax
test eax, eax
mov dword [esp + 0x30], eax
jl 0x6e3212
mov ebp, dword [esp + 0x1c]
lea esi, [edx + edx*4 + 5]
lea esi, [edx + esi*2 + 1]
mov esi, dword [ebp + esi*4]
mov ebp, dword [esp + 0x24]
lea esi, [esi + eax*2]
cmp bp, word [esi]
ja 0x6e320a
dec eax
sub esi, 2
test eax, eax
jge 0x6e31fd
mov ebp, dword [esp + 0x18]
mov dword [esp + 0x30], eax
cmp edi, ebp
jne 0x6e336f
cmp ecx, eax
jne 0x6e336f
inc ecx
cmp edi, ecx
jne 0x6e3322
cmp edi, dword [esp + 0x2c]
je 0x6e332c
mov eax, dword [ebx + 0x1c]
lea esi, [ebx + 0x14]
cmp edi, eax
mov dword [esp + 0x34], eax
jl 0x6e3252
lea eax, [edi + 1]
push 0xffffffffffffffff
push eax
mov ecx, esi
call fcn.006e3930
jmp 0x6e3295
mov ecx, dword [esp + 0x34]
push 0xffffffffffffffff
inc ecx
push ecx
mov ecx, esi
call fcn.006e3930
mov edx, edi
mov eax, dword [esi + 4]
neg edx
shl edx, 0x1f
sub edx, edi
lea ebp, [edi + edi]
add edx, dword [esp + 0x34]
lea ecx, [edi + 1]
shl edx, 1
push edx
lea edx, [eax + ebp]
lea eax, [eax + ecx*2]
push edx
push eax
call fcn.005fcc10
mov eax, dword [esi + 4]
add esp, 0xc
add ebp, eax
mov word [ebp], 0
mov edx, dword [esp + 0x20]
xor ecx, ecx
lea eax, [edi + edi]
mov ebp, dword [esi + 4]
add eax, 2
mov word [eax + ebp - 2], dx
mov ebp, ecx
dec ecx
test ebp, ebp
jne 0x6e329e
mov ebp, dword [ebx + 0x30]
lea esi, [ebx + 0x28]
cmp edi, ebp
push 0xffffffffffffffff
jl 0x6e32c9
lea eax, [edi + 1]
mov ecx, esi
push eax
call fcn.006e3930
jmp 0x6e3307
lea ecx, [ebp + 1]
push ecx
mov ecx, esi
call fcn.006e3930
mov edx, edi
mov eax, dword [esi + 4]
neg edx
shl edx, 0x1f
sub edx, edi
add edx, ebp
lea ebp, [edi + edi]
shl edx, 1
lea ecx, [eax + ebp]
push edx
push ecx
lea ecx, [edi + 1]
lea edx, [eax + ecx*2]
push edx
call fcn.005fcc10
mov ecx, dword [esi + 4]
mov eax, ebp
add esp, 0xc
add eax, ecx
mov word [eax], 0
xor ecx, ecx
lea eax, [edi + edi]
mov edx, dword [esi + 4]
mov bp, word [esp + 0x24]
mov word [eax + edx], bp
add eax, 2
mov edx, ecx
dec ecx
test edx, edx
jne 0x6e330c
cmp edi, dword [esp + 0x2c]
jne 0x6e35e9
mov edi, dword [ebx + 0x1c]
lea esi, [ebx + 0x14]
push 0xffffffffffffffff
mov ecx, esi
lea eax, [edi + 1]
push eax
call fcn.006e3930
mov ecx, dword [esi + 4]
mov dx, word [esp + 0x20]
lea esi, [ebx + 0x28]
push 0xffffffffffffffff
mov word [ecx + edi*2], dx
mov ecx, esi
mov edi, dword [esi + 8]
lea eax, [edi + 1]
push eax
call fcn.006e3930
mov ecx, dword [esi + 4]
mov dx, word [esp + 0x24]
mov word [ecx + edi*2], dx
jmp 0x6e35e9
inc ecx
cmp edi, ecx
mov dword [esp + 0x38], ecx
jne 0x6e34ca
inc eax
cmp ebp, eax
mov dword [esp + 0x2c], eax
jne 0x6e341c
mov eax, dword [ebx + 0x18]
mov cx, word [esp + 0x20]
lea esi, [edi + 1]
mov word [eax + edi*2], cx
lea eax, [edx + edx*4 + 5]
cmp esi, ebp
lea ecx, [edx + eax*2 + 1]
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + ecx*4]
mov cx, word [esp + 0x24]
mov word [eax + edi*2], cx
jge 0x6e341c
mov ecx, dword [esp + 0x1c]
lea edx, [esi + esi*4]
lea eax, [esi + edx*2]
lea ebp, [ecx + eax*4 + 0x1c]
mov eax, dword [ebp]
sub eax, esi
dec eax
je 0x6e33e2
mov ecx, dword [ebp - 4]
lea edx, [eax + eax]
push edx
lea eax, [ecx + esi*2 + 2]
lea ecx, [ecx + esi*2]
push eax
push ecx
call fcn.005fcc10
add esp, 0xc
mov eax, dword [ebp]
dec eax
mov dword [ebp], eax
mov eax, dword [ebp + 0x14]
sub eax, esi
dec eax
je 0x6e3409
mov ecx, dword [ebp + 0x10]
lea edx, [eax + eax]
push edx
lea eax, [ecx + esi*2 + 2]
lea ecx, [ecx + esi*2]
push eax
push ecx
call fcn.005fcc10
add esp, 0xc
mov eax, dword [ebp + 0x14]
add ebp, 0x2c
dec eax
inc esi
mov dword [ebp - 0x18], eax
mov eax, dword [esp + 0x18]
cmp esi, eax
jl 0x6e33c2
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x2c]
dec edx
cmp edx, eax
jne 0x6e34ca
mov eax, dword [ebx + 0x18]
mov cx, word [esp + 0x20]
lea ebp, [edi + 1]
mov word [eax + edi*2], cx
mov eax, dword [esp + 0x18]
cmp ebp, eax
jge 0x6e34ca
lea edx, [ebp - 1]
lea eax, [ebp + ebp*4]
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x1c]
lea ecx, [ebp + eax*2]
lea ebx, [ebp + ebp + 2]
lea esi, [edx + ecx*4 + 0x1c]
mov eax, dword [esi]
sub eax, ebp
dec eax
je 0x6e3481
mov ecx, dword [esi - 4]
add eax, eax
push eax
lea edx, [ecx + ebx]
lea eax, [ecx + ebx - 2]
push edx
push eax
call fcn.005fcc10
add esp, 0xc
mov eax, dword [esi]
mov edx, dword [esp + 0x2c]
dec eax
mov dword [esi], eax
mov eax, dword [esi + 0x14]
sub eax, edx
dec eax
je 0x6e34ab
mov ecx, dword [esi + 0x10]
lea edx, [eax + eax]
push edx
lea eax, [ecx + ebx - 2]
lea ecx, [ecx + ebx - 4]
push eax
push ecx
call fcn.005fcc10
add esp, 0xc
mov edx, dword [esi + 0x14]
mov eax, dword [esp + 0x18]
dec edx
inc ebp
mov dword [esi + 0x14], edx
mov edx, dword [esp + 0x2c]
add ebx, 2
inc edx
add esi, 0x2c
cmp ebp, eax
mov dword [esp + 0x2c], edx
jl 0x6e3463
mov eax, dword [esp + 0x38]
lea edx, [edi - 1]
cmp edx, eax
jne 0x6e35e5
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x18]
lea ecx, [eax + 1]
cmp ebx, ecx
mov dword [esp + 0x2c], ecx
jne 0x6e3573
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x1c]
cmp edi, ebx
mov ebp, edi
lea edx, [eax + eax*4 + 5]
lea eax, [eax + edx*2 + 1]
mov edx, dword [esi + eax*4]
mov ax, word [esp + 0x24]
mov word [edx + edi*2 - 2], ax
jge 0x6e3573
lea ecx, [edi + edi*4]
lea edx, [edi + ecx*2]
lea esi, [esi + edx*4 + 0x1c]
mov eax, dword [esi]
sub eax, ebp
dec eax
je 0x6e353b
mov ecx, dword [esi - 4]
add eax, eax
push eax
lea edx, [ecx + ebp*2 + 2]
lea eax, [ecx + ebp*2]
push edx
push eax
call fcn.005fcc10
add esp, 0xc
mov eax, dword [esi]
dec eax
mov dword [esi], eax
mov eax, dword [esi + 0x14]
sub eax, ebp
dec eax
je 0x6e3560
mov ecx, dword [esi + 0x10]
lea edx, [eax + eax]
push edx
lea eax, [ecx + ebp*2 + 2]
lea ecx, [ecx + ebp*2]
push eax
push ecx
call fcn.005fcc10
add esp, 0xc
mov eax, dword [esi + 0x14]
add esi, 0x2c
dec eax
inc ebp
mov dword [esi - 0x18], eax
cmp ebp, ebx
jl 0x6e351d
mov ecx, dword [esp + 0x2c]
lea edx, [ebx - 1]
cmp edx, ecx
jne 0x6e35e5
cmp edi, ebx
jge 0x6e35e5
mov edx, dword [esp + 0x1c]
lea eax, [edi + edi*4]
lea ebp, [edi + edi + 2]
lea ecx, [edi + eax*2]
lea esi, [edx + ecx*4 + 0x1c]
mov eax, dword [esi]
sub eax, edi
dec eax
je 0x6e35ae
mov ecx, dword [esi - 4]
add eax, eax
push eax
lea edx, [ecx + ebp]
lea eax, [ecx + ebp - 2]
push edx
push eax
call fcn.005fcc10
add esp, 0xc
mov edx, dword [esi]
dec edx
mov dword [esi], edx
mov eax, dword [esi + 0x14]
sub eax, edi
je 0x6e35d3
mov ecx, dword [esi + 0x10]
lea edx, [eax + eax]
push edx
lea eax, [ecx + ebp - 2]
lea ecx, [ecx + ebp - 4]
push eax
push ecx
call fcn.005fcc10
add esp, 0xc
mov ecx, dword [esi + 0x14]
add ebp, 2
dec ecx
inc edi
mov dword [esi + 0x14], ecx
add esi, 0x2c
cmp edi, ebx
jl 0x6e3590
mov ebx, dword [esp + 0x34]
mov esi, dword [ebx + 0x1c]
dec esi
test esi, esi
jle 0x6e3667
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x1c]
lea edi, [esi - 1]
lea edx, [eax + eax*4 + 5]
lea eax, [eax + edx*2 + 1]
lea ebp, [ecx + eax*4]
mov edx, dword [ebx + 0x18]
mov ecx, dword [ebp]
mov ax, word [edx + esi*2]
cmp ax, word [ecx + esi*2 - 2]
jne 0x6e3661
mov eax, dword [ebx + 0x1c]
sub eax, esi
dec eax
je 0x6e3637
mov ecx, edx
lea edx, [eax + eax]
push edx
lea eax, [ecx + esi*2 + 2]
lea ecx, [ecx + esi*2]
push eax
push ecx
call fcn.005fcc10
add esp, 0xc
mov eax, dword [ebx + 0x1c]
dec eax
mov dword [ebx + 0x1c], eax
mov eax, dword [ebx + 0x30]
sub eax, edi
dec eax
je 0x6e365e
mov ecx, dword [ebx + 0x2c]
lea edx, [eax + eax]
push edx
lea eax, [ecx + esi*2]
lea ecx, [ecx + esi*2 - 2]
push eax
push ecx
call fcn.005fcc10
add esp, 0xc
dec dword [ebx + 0x30]
dec esi
dec edi
test esi, esi
jg 0x6e3607
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x3c]
inc eax
cmp eax, ecx
mov dword [esp + 0x28], eax
jle 0x6e30e6
lea ecx, [esp + 0x10]
mov byte [esp + 0x48], 1
call fcn.00831eeb
lea ecx, [esp + 0x14]
mov byte [esp + 0x48], 0
call fcn.00831eeb
lea ecx, [esp + 0x50]
mov dword [esp + 0x48], 0xffffffff
call fcn.00831eeb
mov eax, 1
jmp 0x6e36df
lea ecx, [esp + 0x10]
mov byte [esp + 0x48], 1
call fcn.00831eeb
lea ecx, [esp + 0x14]
mov byte [esp + 0x48], 0
call fcn.00831eeb
lea ecx, [esp + 0x50]
mov dword [esp + 0x48], 0xffffffff
call fcn.00831eeb
xor eax, eax
mov ecx, dword [esp + 0x40]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x3c
ret 4