Function at 0x10070a20
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x10
push ebx
mov ebx, dword [ecx + 0x28]
push ebp
mov ebp, dword [ecx + 0x20]
push esi
push edi
mov edi, dword [ecx + 0x24]
add edi, dword [ecx + 0x1c]
cmp dword [esp + 0x2c], 0x64
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], edi
ja 0x10070e38
test ebp, ebp
je case.0x10070b32.6
nop word [eax + eax]
movzx esi, byte [edi]
movzx eax, byte [edi + 1]
shl esi, 8
or esi, eax
cmp edx, esi
jb 0x10070a71
movzx ecx, byte [edi + 2]
movzx eax, byte [edi + 3]
shl ecx, 8
or ecx, eax
cmp edx, ecx
jbe 0x10070a95
add edi, 8
sub ebp, 1
jne 0x10070a50
cmp dword [esp + 0x2c], 0
mov eax, 0x9d
pop edi
pop esi
mov ecx, 0x15
pop ebp
cmovne eax, ecx
pop ebx
add esp, 0x10
ret 0x10
movzx ecx, byte [edi + 4]
movzx eax, byte [edi + 5]
mov ebp, dword [esp + 0x18]
shl ecx, 8
or ecx, eax
movzx eax, byte [edi + 6]
shl ecx, 8
or ecx, eax
movzx eax, byte [edi + 7]
shl ecx, 8
or ecx, eax
mov eax, ebx
sub eax, ebp
cmp ecx, eax
ja 0x10070e38
add ebp, ecx
lea eax, [ebp + 8]
cmp eax, ebx
ja case.0x10070b32.6
movzx edi, byte [ebp + 2]
movzx eax, byte [ebp + 3]
movzx ecx, byte [ebp]
shl edi, 8
or edi, eax
shl ecx, 8
lea eax, [ebp + 8]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], eax
mov edi, eax
movzx eax, byte [ebp + 4]
shl eax, 8
mov dword [esp + 0x10], eax
movzx eax, byte [edi - 3]
or dword [esp + 0x10], eax
shl dword [esp + 0x10], 8
movzx eax, byte [edi - 2]
or dword [esp + 0x10], eax
shl dword [esp + 0x10], 8
movzx eax, byte [edi - 1]
or dword [esp + 0x10], eax
movzx eax, byte [ebp + 1]
or ecx, eax
dec ecx
cmp ecx, 0x12
ja case.0x10070b32.6
movzx eax, byte [ecx + 0x10070e60]
jmp dword [eax*4 + 0x10070e48]
sub edx, esi
lea ecx, [edi + edx*4]
lea esi, [ecx + 8]
cmp esi, ebx
ja case.0x10070b32.6
movzx edx, byte [ecx]
movzx eax, byte [ecx + 1]
shl edx, 8
or edx, eax
movzx eax, byte [ecx + 2]
shl edx, 8
or edx, eax
movzx eax, byte [ecx + 3]
movzx ecx, byte [esi - 4]
shl edx, 8
or edx, eax
shl ecx, 8
movzx eax, byte [esi - 3]
or ecx, eax
movzx eax, byte [esi - 2]
shl ecx, 8
or ecx, eax
movzx eax, byte [esi - 1]
shl ecx, 8
or ecx, eax
cmp edx, ecx
je case.0x10070b32.6
jmp 0x10070dfd
lea eax, [edi + 0xc]
cmp eax, ebx
ja case.0x10070b32.6
movzx ecx, byte [ebp + 8]
movzx eax, byte [edi + 1]
mov ebp, dword [esp + 0x14]
shl ecx, 8
or ecx, eax
movzx eax, byte [edi + 2]
shl ecx, 8
mov ebp, dword [ebp + 0xc]
or ecx, eax
movzx eax, byte [edi + 3]
shl ecx, 8
or ecx, eax
lea eax, [edi + 9]
mov dword [esp + 0x18], eax
cmp eax, ebx
ja case.0x10070b32.6
movzx eax, byte [edi + 4]
mov word [ebp], ax
movzx eax, byte [edi + 5]
mov word [ebp + 2], ax
movsx eax, byte [edi + 6]
mov word [ebp + 4], ax
movsx eax, byte [edi + 7]
mov word [ebp + 6], ax
movzx eax, byte [edi + 8]
mov edi, dword [esp + 0x18]
mov word [ebp + 8], ax
lea eax, [edi + 3]
cmp eax, ebx
ja case.0x10070b32.6
movsx eax, byte [edi]
sub edx, esi
mov ebx, dword [esp + 0x14]
mov word [ebp + 0xa], ax
movsx eax, byte [edi + 1]
mov word [ebp + 0xc], ax
movzx eax, byte [edi + 2]
imul edx, ecx
mov word [ebp + 0xe], ax
mov byte [ebx + 0x10], 1
add ecx, edx
jmp 0x10070e01
sub edx, esi
lea eax, [edi + edx*2]
lea esi, [eax + 4]
cmp esi, ebx
ja case.0x10070b32.6
movzx edx, byte [eax]
movzx eax, byte [eax + 1]
movzx ecx, byte [esi - 2]
shl edx, 8
or edx, eax
jmp 0x10070b7d
lea esi, [edi + 4]
cmp esi, ebx
ja case.0x10070b32.6
mov eax, dword [esp + 0x18]
movzx edi, byte [eax]
movzx eax, byte [esi - 3]
shl edi, 8
or edi, eax
movzx eax, byte [esi - 2]
shl edi, 8
or edi, eax
movzx eax, byte [esi - 1]
shl edi, 8
or edi, eax
lea eax, [esi + 4]
cmp eax, ebx
ja case.0x10070b32.6
sub ebx, esi
sar ebx, 2
dec ebx
cmp edi, ebx
ja case.0x10070b32.6
xor ebx, ebx
test edi, edi
je case.0x10070b32.6
nop word [eax + eax]
movzx ecx, byte [esi]
movzx eax, byte [esi + 1]
shl ecx, 8
or ecx, eax
cmp ecx, edx
je 0x10070ccd
inc ebx
add esi, 4
cmp ebx, edi
jb 0x10070cb0
jmp case.0x10070b32.6
movzx edx, byte [esi + 2]
movzx eax, byte [esi + 3]
movzx ecx, byte [esi + 7]
shl edx, 8
or edx, eax
movzx eax, byte [esi + 6]
shl eax, 8
or ecx, eax
cmp ebx, edi
jae case.0x10070b32.6
jmp 0x10070dfd
lea eax, [edi + 0x10]
cmp eax, ebx
ja case.0x10070b32.6
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
movzx ebp, byte [eax]
movzx eax, byte [edi + 1]
mov ecx, dword [esi + 0xc]
shl ebp, 8
or ebp, eax
movzx eax, byte [edi + 2]
shl ebp, 8
or ebp, eax
movzx eax, byte [edi + 3]
shl ebp, 8
or ebp, eax
lea eax, [edi + 9]
mov dword [esp + 0x18], eax
cmp eax, ebx
ja case.0x10070b32.6
movzx eax, byte [edi + 4]
mov word [ecx], ax
movzx eax, byte [edi + 5]
mov word [ecx + 2], ax
movsx eax, byte [edi + 6]
mov word [ecx + 4], ax
movsx eax, byte [edi + 7]
mov word [ecx + 6], ax
movzx eax, byte [edi + 8]
mov edi, dword [esp + 0x18]
mov word [ecx + 8], ax
lea eax, [edi + 3]
cmp eax, ebx
ja case.0x10070b32.6
movsx eax, byte [edi]
mov word [ecx + 0xa], ax
movsx eax, byte [edi + 1]
mov word [ecx + 0xc], ax
movzx eax, byte [edi + 2]
mov word [ecx + 0xe], ax
lea eax, [edi + 3]
mov byte [esi + 0x10], 1
lea ecx, [eax + 4]
movzx esi, byte [eax]
lea edi, [ecx - 1]
movzx eax, byte [ecx - 3]
sub ebx, ecx
shl esi, 8
or esi, eax
sar ebx, 1
movzx eax, byte [ecx - 2]
shl esi, 8
or esi, eax
movzx eax, byte [edi]
shl esi, 8
or esi, eax
mov dword [esp + 0x18], esi
cmp esi, ebx
ja case.0x10070b32.6
mov ebx, dword [esp + 0x18]
xor esi, esi
test ebx, ebx
je case.0x10070b32.6
nop dword [eax]
movzx ecx, byte [edi + 1]
lea edi, [edi + 2]
movzx eax, byte [edi]
shl ecx, 8
or ecx, eax
cmp ecx, edx
je 0x10070ded
inc esi
cmp esi, ebx
jb 0x10070dd0
jmp case.0x10070b32.6
cmp esi, ebx
jae case.0x10070b32.6
mov edx, esi
imul edx, ebp
lea ecx, [edx + ebp]
mov ebx, dword [esp + 0x14]
cmp edx, ecx
ja case.0x10070b32.6
push dword [esp + 0x30]
mov eax, dword [esp + 0x14]
sub ecx, edx
push dword [esp + 0x30]
add eax, edx
mov edx, dword [esp + 0x24]
push dword [esp + 0x30]
push dword [esp + 0x30]
push ecx
push eax
mov ecx, ebx
call fcn.10070770
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 0x10
pop edi
pop esi
pop ebp
mov eax, 8
pop ebx
add esp, 0x10
ret 0x10