Function at 0x70e1ee60
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, dword [ebp + 0x14]
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
xor edi, edi
mov dword [eax], edi
lea eax, [ebp - 0x10]
push eax
push 1
push 0x11
push 0xffffffffffffffff
push edi
push esi
call fcn.70d46cc1
cmp eax, edi
jne 0x70e1f29d
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 0x10]
add ecx, eax
xor edx, edx
mov dh, byte [ecx + 0x28]
mov dword [ebp - 0x1c], ecx
mov dl, byte [ecx + 0x29]
cmp dx, word [ebp + 0xc]
ja 0x70e1f296
xor edx, edx
mov dh, byte [ecx + 0x2a]
mov dl, byte [ecx + 0x2b]
cmp dx, word [ebp + 0xc]
jb 0x70e1f296
movzx esi, byte [ecx + 0xa]
xor edx, edx
mov dh, byte [ecx + 8]
mov dl, byte [ecx + 9]
shl edx, 8
or edx, esi
movzx esi, byte [ecx + 0xb]
shl edx, 8
or edx, esi
movzx esi, byte [ecx + 2]
mov dword [ebp - 0xc], edx
xor edx, edx
mov dh, byte [ecx]
mov dl, byte [ecx + 1]
movzx ecx, byte [ecx + 3]
shl edx, 8
or edx, esi
shl edx, 8
or ecx, edx
cmp dword [ebp - 0xc], edi
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], ecx
jbe 0x70e1f28d
mov edx, dword [ebp + 0x28]
mov esi, dword [ebp + 0x14]
cmp dword [esi], 0
jne 0x70e1f28d
xor ebx, ebx
mov bh, byte [ecx + eax]
mov bl, byte [eax + ecx + 1]
mov esi, ebx
cmp si, word [ebp + 0xc]
mov dword [ebp + 0x10], esi
ja 0x70e1f27a
xor ebx, ebx
mov bh, byte [eax + ecx + 2]
mov bl, byte [eax + ecx + 3]
cmp bx, word [ebp + 0xc]
jb 0x70e1f27a
xor ebx, ebx
mov bh, byte [eax + ecx + 4]
movzx edi, byte [eax + ecx + 6]
mov bl, byte [eax + ecx + 5]
movzx ecx, byte [eax + ecx + 7]
shl ebx, 8
or ebx, edi
shl ebx, 8
or ebx, ecx
add ebx, dword [ebp - 0x14]
mov ecx, ebx
xor ebx, ebx
mov bh, byte [eax + ecx + 2]
movzx edi, byte [eax + ecx + 6]
mov bl, byte [eax + ecx + 3]
mov dword [ebp - 0x18], ebx
xor ebx, ebx
mov bh, byte [eax + ecx + 4]
mov bl, byte [eax + ecx + 5]
shl ebx, 8
or ebx, edi
movzx edi, byte [eax + ecx + 7]
shl ebx, 8
or edi, ebx
xor ebx, ebx
mov bh, byte [ecx + eax]
mov dword [ebp - 0x10], edi
mov bl, byte [eax + ecx + 1]
dec ebx
je 0x70e1f1a2
dec ebx
je 0x70e1f151
dec ebx
je 0x70e1f11f
dec ebx
je 0x70e1f076
dec ebx
jne 0x70e1f28d
movzx esi, byte [ecx + eax + 0xa]
xor edx, edx
mov dh, byte [ecx + eax + 8]
mov dl, byte [ecx + eax + 9]
shl edx, 8
or edx, esi
movzx esi, byte [ecx + eax + 0xb]
shl edx, 8
or edx, esi
mov esi, dword [ebp + 0x20]
mov dword [ebp - 0x10], edx
lea edx, [ecx + 0xc]
mov dword [esi], edx
mov edx, dword [ebp + 0x1c]
mov word [edx], 1
mov edx, dword [ebp + 0x18]
mov word [edx], 3
movzx ebx, byte [ecx + eax + 0x16]
xor edx, edx
mov dh, byte [ecx + eax + 0x14]
xor esi, esi
add ecx, 0x18
mov dword [ebp - 8], esi
mov dl, byte [ecx + eax - 3]
shl edx, 8
or edx, ebx
movzx ebx, byte [ecx + eax - 1]
shl edx, 8
or edx, ebx
dec edx
mov dword [ebp + 0x10], edx
xor edx, edx
mov dh, byte [ecx + eax]
mov dl, byte [eax + ecx + 1]
cmp dx, word [ebp + 0xc]
je 0x70e1f064
mov esi, dword [ebp + 0x10]
jmp 0x70e1f050
jae 0x70e1f036
mov dword [ebp - 8], esi
jmp 0x70e1f039
mov dword [ebp + 0x10], esi
mov esi, dword [ebp + 0x10]
mov edx, dword [ebp - 8]
mov ebx, esi
sub ebx, edx
cmp ebx, 2
jb 0x70e1f28d
add esi, edx
shr esi, 1
xor ebx, ebx
lea edx, [ecx + esi*2]
mov bh, byte [edx + eax]
mov bl, byte [eax + edx + 1]
mov edx, ebx
cmp dx, word [ebp + 0xc]
jne 0x70e1f02f
mov ebx, dword [ebp - 0x10]
mov edx, dword [ebp + 0x28]
imul esi, ebx
add edi, esi
mov dword [edx], edi
jmp 0x70e1f208
movzx esi, byte [ecx + eax + 0xa]
xor edx, edx
mov dh, byte [ecx + eax + 8]
and dword [ebp - 8], 0
mov bx, word [ebp + 0xc]
add ecx, 0xc
mov dl, byte [ecx + eax - 3]
shl edx, 8
or edx, esi
movzx esi, byte [ecx + eax - 1]
shl edx, 8
or edx, esi
dec edx
mov dword [ebp + 0x10], edx
xor edx, edx
mov dh, byte [ecx + eax]
mov esi, ecx
mov dl, byte [eax + ecx + 1]
cmp dx, bx
je 0x70e1f0ed
mov edi, dword [ebp + 0x10]
jmp 0x70e1f0d9
jae 0x70e1f0bf
mov dword [ebp - 8], edi
jmp 0x70e1f0c2
mov dword [ebp + 0x10], edi
mov edi, dword [ebp + 0x10]
mov edx, dword [ebp - 8]
mov esi, edi
sub esi, edx
cmp esi, 2
jb 0x70e1f28d
add edi, edx
shr edi, 1
xor edx, edx
lea esi, [ecx + edi*4]
mov dh, byte [esi + eax]
mov dl, byte [eax + esi + 1]
cmp dx, bx
jne 0x70e1f0b8
mov edi, dword [ebp - 0x10]
xor ebx, ebx
mov bh, byte [eax + esi + 2]
mov edx, dword [ebp + 0x28]
mov bl, byte [eax + esi + 3]
mov dword [ebp + 0x10], ebx
xor ebx, ebx
mov bh, byte [eax + esi + 6]
mov bl, byte [eax + esi + 7]
mov esi, dword [ebp + 0x20]
sub ebx, dword [ebp + 0x10]
add edi, dword [ebp + 0x10]
mov dword [esi], edi
mov esi, dword [ebp + 0x1c]
mov word [esi], 2
jmp 0x70e1f208
movzx ebx, word [ebp + 0xc]
movzx esi, si
sub ebx, esi
lea ecx, [ecx + ebx*2 + 8]
xor ebx, ebx
mov bh, byte [ecx + eax]
inc ecx
inc ecx
mov bl, byte [eax + ecx - 1]
mov esi, ebx
xor ebx, ebx
mov bh, byte [ecx + eax]
mov bl, byte [eax + ecx + 1]
sub ebx, esi
je 0x70e1f28d
add edi, esi
jmp 0x70e1f1fb
movzx esi, byte [ecx + eax + 0xa]
xor ebx, ebx
mov bh, byte [ecx + eax + 8]
mov bl, byte [ecx + eax + 9]
shl ebx, 8
or ebx, esi
movzx esi, byte [ecx + eax + 0xb]
shl ebx, 8
or ebx, esi
movzx esi, word [ebp + 0x10]
mov dword [ebp - 0x10], ebx
movzx ebx, word [ebp + 0xc]
sub ebx, esi
mov esi, ebx
mov ebx, dword [ebp - 0x10]
imul esi, ebx
add edi, esi
mov esi, dword [ebp + 0x20]
add ecx, 0xc
mov dword [edx], edi
mov dword [esi], ecx
mov ecx, dword [ebp + 0x1c]
mov word [ecx], 1
mov ecx, dword [ebp + 0x18]
mov word [ecx], 3
jmp 0x70e1f208
movzx ebx, word [ebp + 0xc]
movzx esi, si
sub ebx, esi
lea ecx, [ecx + ebx*4 + 8]
movzx esi, byte [ecx + eax + 2]
xor ebx, ebx
mov bh, byte [ecx + eax]
add ecx, 4
mov bl, byte [eax + ecx - 3]
shl ebx, 8
or ebx, esi
movzx esi, byte [ecx + eax - 1]
shl ebx, 8
or ebx, esi
movzx esi, byte [ecx + eax + 2]
mov dword [ebp + 0x10], ebx
xor ebx, ebx
mov bh, byte [ecx + eax]
mov bl, byte [eax + ecx + 1]
movzx ecx, byte [eax + ecx + 3]
shl ebx, 8
or ebx, esi
shl ebx, 8
or ebx, ecx
sub ebx, dword [ebp + 0x10]
je 0x70e1f28d
add edi, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x20]
mov dword [ecx], edi
mov ecx, dword [ebp + 0x1c]
mov word [ecx], 2
mov esi, dword [ebp + 0x2c]
mov ecx, dword [ebp - 4]
mov dword [esi], ebx
mov esi, dword [ebp + 0x24]
mov ebx, dword [ebp - 0x18]
mov word [esi], bx
mov esi, dword [ebp - 0x1c]
movzx esi, byte [esi + 0x2f]
movzx ebx, bx
test ebx, ebx
jle 0x70e1f27a
cmp ebx, 2
jle 0x70e1f25d
cmp ebx, 5
je 0x70e1f271
jle 0x70e1f27a
cmp ebx, 7
jle 0x70e1f242
cmp ebx, 8
je 0x70e1f24f
cmp ebx, 9
jne 0x70e1f27a
mov esi, dword [ebp + 0x18]
mov word [esi], 3
add edi, 8
jmp 0x70e1f26f
xor ebx, ebx
cmp esi, 1
setne bl
inc ebx
add edi, 6
jmp 0x70e1f269
xor ebx, ebx
cmp esi, 1
setne bl
inc ebx
add edi, 5
mov esi, dword [ebp + 0x18]
mov word [esi], bx
mov dword [edx], edi
mov esi, dword [ebp + 0x14]
mov dword [esi], 1
dec dword [ebp - 0xc]
add ecx, 8
cmp dword [ebp - 0xc], 0
mov dword [ebp - 4], ecx
ja 0x70e1ef03
push eax
mov eax, dword [ebp + 8]
call dword [eax + 8]
jmp 0x70e1f29a
push eax
call dword [esi + 8]
pop ecx
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 0x28