Function at 0x6c3d10
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x10
mov ebx, dword [ecx]
mov eax, dword [ecx + 4]
sub eax, ebx
sar eax, 3
imul esi, eax, 0xaaaaaaab
inc esi
mov dword [esp], ecx
mov eax, dword [ecx + 8]
sub eax, ebx
sar eax, 3
imul eax, eax, 0xaaaaaaab
mov edi, eax
shr edi, 1
mov ecx, 0xaaaaaaa
mov edx, 0xaaaaaaa
sub edx, edi
add edi, eax
cmp edi, esi
mov dword [esp + 0xc], esi
cmovbe edi, esi
cmp eax, edx
cmova edi, ecx
cmp edi, 0xaaaaaab
jae 0x6c423b
mov ecx, edi
lea eax, [edi*8]
lea eax, [eax + eax*2]
cmp edi, 0xab
mov dword [esp + 8], edi
jb 0x6c3da2
cmp ecx, 0xaaaaaaa
je 0x6c4240
add eax, 0x23
push eax
call fcn.0071993d
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x6c3db3
test ecx, ecx
je 0x6c3db1
push eax
call fcn.0071993d
add esp, 4
jmp 0x6c3db3
xor eax, eax
nop
mov edx, dword [esp + 0x28]
mov ebp, dword [esp + 0x24]
mov edi, ebp
sub edi, ebx
lea ecx, [eax + edi]
mov dword [esp + 4], ecx
mov dword [eax + edi + 0x10], 0
mov dword [eax + edi + 0x14], 0
movzx ebx, byte [edx]
mov byte [eax + edi], bl
movzx ebx, byte [edx + 1]
mov byte [eax + edi + 1], bl
movzx ebx, byte [edx + 2]
mov byte [eax + edi + 2], bl
movzx ebx, byte [edx + 3]
mov byte [eax + edi + 3], bl
movzx ebx, byte [edx + 4]
mov byte [eax + edi + 4], bl
movzx ebx, byte [edx + 5]
mov byte [eax + edi + 5], bl
movzx ebx, byte [edx + 6]
mov byte [eax + edi + 6], bl
movzx ebx, byte [edx + 7]
mov byte [eax + edi + 7], bl
movzx ebx, byte [edx + 8]
mov byte [eax + edi + 8], bl
movzx ebx, byte [edx + 9]
mov byte [eax + edi + 9], bl
movzx ebx, byte [edx + 0xa]
mov byte [eax + edi + 0xa], bl
movzx ebx, byte [edx + 0xb]
mov byte [eax + edi + 0xb], bl
movzx ebx, byte [edx + 0xc]
mov byte [eax + edi + 0xc], bl
movzx ebx, byte [edx + 0xd]
mov byte [eax + edi + 0xd], bl
movzx ebx, byte [edx + 0xe]
mov byte [eax + edi + 0xe], bl
movzx ebx, byte [edx + 0xf]
mov byte [eax + edi + 0xf], bl
movzx ebx, byte [edx + 0x10]
mov byte [eax + edi + 0x10], bl
movzx ebx, byte [edx + 0x11]
mov byte [eax + edi + 0x11], bl
movzx ebx, byte [edx + 0x12]
mov byte [eax + edi + 0x12], bl
movzx ebx, byte [edx + 0x13]
mov byte [eax + edi + 0x13], bl
movzx ebx, byte [edx + 0x14]
mov byte [eax + edi + 0x14], bl
movzx ebx, byte [edx + 0x15]
mov byte [eax + edi + 0x15], bl
movzx ebx, byte [edx + 0x16]
mov byte [eax + edi + 0x16], bl
movzx ebx, byte [edx + 0x17]
mov byte [eax + edi + 0x17], bl
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0xf
mov byte [edx], 0
mov ecx, dword [esp]
mov edx, dword [ecx]
mov esi, dword [ecx + 4]
cmp esi, ebp
je 0x6c4102
cmp edx, ebp
je 0x6c3fdb
nop
test byte [0x889bde], 1
jne 0x6c3fdb
xor ebx, ebx
nop
mov dword [eax + ebx + 0x10], 0
mov dword [eax + ebx + 0x14], 0
movzx ecx, byte [edx + ebx]
mov byte [eax + ebx], cl
movzx ecx, byte [edx + ebx + 1]
mov byte [eax + ebx + 1], cl
movzx ecx, byte [edx + ebx + 2]
mov byte [eax + ebx + 2], cl
movzx ecx, byte [edx + ebx + 3]
mov byte [eax + ebx + 3], cl
movzx ecx, byte [edx + ebx + 4]
mov byte [eax + ebx + 4], cl
movzx ecx, byte [edx + ebx + 5]
mov byte [eax + ebx + 5], cl
movzx ecx, byte [edx + ebx + 6]
mov byte [eax + ebx + 6], cl
movzx ecx, byte [edx + ebx + 7]
mov byte [eax + ebx + 7], cl
movzx ecx, byte [edx + ebx + 8]
mov byte [eax + ebx + 8], cl
movzx ecx, byte [edx + ebx + 9]
mov byte [eax + ebx + 9], cl
movzx ecx, byte [edx + ebx + 0xa]
mov byte [eax + ebx + 0xa], cl
movzx ecx, byte [edx + ebx + 0xb]
mov byte [eax + ebx + 0xb], cl
movzx ecx, byte [edx + ebx + 0xc]
mov byte [eax + ebx + 0xc], cl
movzx ecx, byte [edx + ebx + 0xd]
mov byte [eax + ebx + 0xd], cl
movzx ecx, byte [edx + ebx + 0xe]
mov byte [eax + ebx + 0xe], cl
movzx ecx, byte [edx + ebx + 0xf]
mov byte [eax + ebx + 0xf], cl
movzx ecx, byte [edx + ebx + 0x10]
mov byte [eax + ebx + 0x10], cl
movzx ecx, byte [edx + ebx + 0x11]
mov byte [eax + ebx + 0x11], cl
movzx ecx, byte [edx + ebx + 0x12]
mov byte [eax + ebx + 0x12], cl
movzx ecx, byte [edx + ebx + 0x13]
mov byte [eax + ebx + 0x13], cl
movzx ecx, byte [edx + ebx + 0x14]
mov byte [eax + ebx + 0x14], cl
movzx ecx, byte [edx + ebx + 0x15]
mov byte [eax + ebx + 0x15], cl
movzx ecx, byte [edx + ebx + 0x16]
mov byte [eax + ebx + 0x16], cl
movzx ecx, byte [edx + ebx + 0x17]
mov byte [eax + ebx + 0x17], cl
mov dword [edx + ebx + 0x10], 0
mov dword [edx + ebx + 0x14], 0xf
mov byte [edx + ebx], 0
lea ecx, [edx + ebx]
add ecx, 0x18
add ebx, 0x18
cmp ecx, ebp
jne 0x6c3ed0
mov ecx, dword [esp]
mov edx, dword [ecx + 4]
cmp edx, ebp
je 0x6c421b
add edi, eax
add edi, 0x2f
xor ebx, ebx
mov dword [edi + ebx - 7], 0
mov dword [edi + ebx - 3], 0
movzx ecx, byte [ebp + ebx]
mov byte [edi + ebx - 0x17], cl
movzx ecx, byte [ebp + ebx + 1]
mov byte [edi + ebx - 0x16], cl
movzx ecx, byte [ebp + ebx + 2]
mov byte [edi + ebx - 0x15], cl
movzx ecx, byte [ebp + ebx + 3]
mov byte [edi + ebx - 0x14], cl
movzx ecx, byte [ebp + ebx + 4]
mov byte [edi + ebx - 0x13], cl
movzx ecx, byte [ebp + ebx + 5]
mov byte [edi + ebx - 0x12], cl
movzx ecx, byte [ebp + ebx + 6]
mov byte [edi + ebx - 0x11], cl
movzx ecx, byte [ebp + ebx + 7]
mov byte [edi + ebx - 0x10], cl
movzx ecx, byte [ebp + ebx + 8]
mov byte [edi + ebx - 0xf], cl
movzx ecx, byte [ebp + ebx + 9]
mov byte [edi + ebx - 0xe], cl
movzx ecx, byte [ebp + ebx + 0xa]
mov byte [edi + ebx - 0xd], cl
movzx ecx, byte [ebp + ebx + 0xb]
mov byte [edi + ebx - 0xc], cl
movzx ecx, byte [ebp + ebx + 0xc]
mov byte [edi + ebx - 0xb], cl
movzx ecx, byte [ebp + ebx + 0xd]
mov byte [edi + ebx - 0xa], cl
movzx ecx, byte [ebp + ebx + 0xe]
mov byte [edi + ebx - 9], cl
movzx ecx, byte [ebp + ebx + 0xf]
mov byte [edi + ebx - 8], cl
movzx ecx, byte [ebp + ebx + 0x10]
mov byte [edi + ebx - 7], cl
movzx ecx, byte [ebp + ebx + 0x11]
mov byte [edi + ebx - 6], cl
movzx ecx, byte [ebp + ebx + 0x12]
mov byte [edi + ebx - 5], cl
movzx ecx, byte [ebp + ebx + 0x13]
mov byte [edi + ebx - 4], cl
movzx ecx, byte [ebp + ebx + 0x14]
mov byte [edi + ebx - 3], cl
movzx ecx, byte [ebp + ebx + 0x15]
mov byte [edi + ebx - 2], cl
movzx ecx, byte [ebp + ebx + 0x16]
mov byte [edi + ebx - 1], cl
movzx ecx, byte [ebp + ebx + 0x17]
mov byte [edi + ebx], cl
mov dword [ebp + ebx + 0x10], 0
mov dword [ebp + ebx + 0x14], 0xf
mov byte [ebp + ebx], 0
lea ecx, [ebx + ebp]
add ecx, 0x18
add ebx, 0x18
cmp ecx, edx
jne 0x6c3ff0
jmp 0x6c421b
cmp edx, esi
je 0x6c421b
xor ecx, ecx
nop dword [eax]
mov dword [eax + ecx + 0x10], 0
mov dword [eax + ecx + 0x14], 0
movzx ebx, byte [edx + ecx]
mov byte [eax + ecx], bl
movzx ebx, byte [edx + ecx + 1]
mov byte [eax + ecx + 1], bl
movzx ebx, byte [edx + ecx + 2]
mov byte [eax + ecx + 2], bl
movzx ebx, byte [edx + ecx + 3]
mov byte [eax + ecx + 3], bl
movzx ebx, byte [edx + ecx + 4]
mov byte [eax + ecx + 4], bl
movzx ebx, byte [edx + ecx + 5]
mov byte [eax + ecx + 5], bl
movzx ebx, byte [edx + ecx + 6]
mov byte [eax + ecx + 6], bl
movzx ebx, byte [edx + ecx + 7]
mov byte [eax + ecx + 7], bl
movzx ebx, byte [edx + ecx + 8]
mov byte [eax + ecx + 8], bl
movzx ebx, byte [edx + ecx + 9]
mov byte [eax + ecx + 9], bl
movzx ebx, byte [edx + ecx + 0xa]
mov byte [eax + ecx + 0xa], bl
movzx ebx, byte [edx + ecx + 0xb]
mov byte [eax + ecx + 0xb], bl
movzx ebx, byte [edx + ecx + 0xc]
mov byte [eax + ecx + 0xc], bl
movzx ebx, byte [edx + ecx + 0xd]
mov byte [eax + ecx + 0xd], bl
movzx ebx, byte [edx + ecx + 0xe]
mov byte [eax + ecx + 0xe], bl
movzx ebx, byte [edx + ecx + 0xf]
mov byte [eax + ecx + 0xf], bl
movzx ebx, byte [edx + ecx + 0x10]
mov byte [eax + ecx + 0x10], bl
movzx ebx, byte [edx + ecx + 0x11]
mov byte [eax + ecx + 0x11], bl
movzx ebx, byte [edx + ecx + 0x12]
mov byte [eax + ecx + 0x12], bl
movzx ebx, byte [edx + ecx + 0x13]
mov byte [eax + ecx + 0x13], bl
movzx ebx, byte [edx + ecx + 0x14]
mov byte [eax + ecx + 0x14], bl
movzx ebx, byte [edx + ecx + 0x15]
mov byte [eax + ecx + 0x15], bl
movzx ebx, byte [edx + ecx + 0x16]
mov byte [eax + ecx + 0x16], bl
movzx ebx, byte [edx + ecx + 0x17]
mov byte [eax + ecx + 0x17], bl
mov dword [edx + ecx + 0x10], 0
mov dword [edx + ecx + 0x14], 0xf
mov byte [edx + ecx], 0
lea edi, [edx + ecx]
add edi, 0x18
add ecx, 0x18
cmp edi, esi
jne 0x6c4110
nop
mov ecx, dword [esp]
push dword [esp + 8]
push dword [esp + 0x10]
push eax
call fcn.006c43c0
mov eax, dword [esp + 4]
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret 8
call fcn.00455870
call fcn.00455870
int3