Function at 0x10006bec
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], eax
mov esi, 0x10009534
mov edi, 0x10009614
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3c]
add eax, dword [ebp - 4]
mov dword [0x1000960c], eax
mov eax, dword [ebp - 4]
call fcn.10006b70
mov dword [0x10009530], eax
mov eax, dword [0x10009530]
call fcn.10001150
mov dword [0x10009610], eax
xor edx, edx
push ebp
push 0x10006e91
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x10009610]
mov dword [0x10009608], eax
mov eax, dword [0x1000960c]
mov eax, dword [eax + 0x54]
mov dword [0x1000952c], eax
mov eax, dword [0x1000960c]
add eax, 0x18
mov edx, dword [0x1000960c]
movzx edx, word [edx + 0x14]
add eax, edx
mov dword [edi], eax
mov eax, dword [0x1000960c]
movzx ebx, word [eax + 6]
dec ebx
test ebx, ebx
jb 0x10006c9e
inc ebx
mov dword [esi], 0
mov eax, dword [esi]
lea eax, [eax + eax*4]
mov edx, dword [edi]
mov eax, dword [edx + eax*8 + 0x14]
cmp eax, dword [0x1000952c]
jae 0x10006c99
mov edx, dword [esi]
lea edx, [edx + edx*4]
mov ecx, dword [edi]
mov dword [0x1000952c], eax
inc dword [esi]
dec ebx
jne 0x10006c7a
mov ecx, dword [0x1000952c]
mov edx, dword [ebp - 4]
mov eax, dword [0x10009608]
call fcn.10002ba4
mov eax, dword [0x1000960c]
mov edx, dword [eax + 0x38]
mov eax, dword [0x1000960c]
mov eax, dword [eax + 0x54]
call fcn.10006b50
add eax, dword [0x10009608]
mov dword [0x10009608], eax
mov eax, dword [0x1000960c]
movzx ebx, word [eax + 6]
dec ebx
test ebx, ebx
jb 0x10006da2
inc ebx
mov dword [esi], 0
mov eax, dword [esi]
lea eax, [eax + eax*4]
mov edx, dword [edi]
cmp dword [edx + eax*8 + 0x10], 0
jbe 0x10006d67
mov edx, dword [esi]
lea edx, [edx + edx*4]
mov ecx, dword [edi]
mov edx, dword [ecx + edx*8 + 0x10]
mov dword [0x10009538], edx
mov edx, dword [edi]
mov edx, dword [edx + eax*8 + 8]
cmp edx, dword [0x10009538]
jae 0x10006d28
mov edx, dword [esi]
lea edx, [edx + edx*4]
mov ecx, dword [edi]
mov edx, dword [ecx + edx*8 + 8]
mov dword [0x10009538], edx
mov edx, dword [edi]
mov edx, dword [edx + eax*8 + 0x14]
add edx, dword [ebp - 4]
mov ecx, dword [0x10009538]
mov eax, dword [0x10009608]
call fcn.10002ba4
mov eax, dword [esi]
lea eax, [eax + eax*4]
mov edx, dword [edi]
mov eax, dword [edx + eax*8 + 8]
mov edx, dword [0x1000960c]
mov edx, dword [edx + 0x38]
call fcn.10006b50
add eax, dword [0x10009608]
mov dword [0x10009608], eax
jmp 0x10006d99
mov eax, dword [esi]
lea eax, [eax + eax*4]
mov edx, dword [edi]
cmp dword [edx + eax*8 + 8], 0
je 0x10006d99
mov eax, dword [esi]
lea eax, [eax + eax*4]
mov edx, dword [edi]
mov eax, dword [edx + eax*8 + 8]
mov edx, dword [0x1000960c]
mov edx, dword [edx + 0x38]
call fcn.10006b50
add eax, dword [0x10009608]
mov dword [0x10009608], eax
inc dword [esi]
dec ebx
jne 0x10006cea
mov dword [0x1000953c], 0x10007
push 0x1000953c
mov eax, dword [0x1000961c]
push eax
call fcn.10002abc
push 0x10009528
push 4
push 0x10009524
mov eax, dword [0x100095e0]
add eax, 8
push eax
mov eax, dword [0x10009618]
push eax
call fcn.10002af4
push 0x40
push 0x3000
mov eax, dword [0x10009530]
push eax
mov eax, dword [0x1000960c]
mov eax, dword [eax + 0x34]
push eax
mov eax, dword [0x10009618]
push eax
call fcn.10002b3c
push 0x10009528
mov eax, dword [0x10009530]
push eax
mov eax, dword [0x10009610]
push eax
mov eax, dword [0x1000960c]
mov eax, dword [eax + 0x34]
push eax
mov eax, dword [0x10009618]
push eax
call fcn.10002b54
push 0x10009528
push 4
mov eax, dword [0x1000960c]
add eax, 0x34
push eax
mov eax, dword [0x100095e0]
add eax, 8
push eax
mov eax, dword [0x10009618]
push eax
call fcn.10002b54
mov eax, dword [0x1000960c]
mov eax, dword [eax + 0x34]
mov edx, dword [0x1000960c]
add eax, dword [edx + 0x28]
mov dword [0x100095ec], eax
push 0x1000953c
mov eax, dword [0x1000961c]
push eax
call fcn.10002b24
mov eax, dword [0x1000961c]
push eax
call fcn.10002b04
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x10006e98
mov eax, dword [0x10009610]
push eax
call fcn.100027e8
pop ecx
ret