Function at 0x10071800
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword [esp + 4]
sub esp, 0x58
push esi
push 0x56
lea eax, [esp + 8]
push eax
xor esi, esi
push esi
push 0x322f534f
push ecx
call dword [0x4010b4]
cmp eax, 0x56
je 0x1007182c
cmp eax, 0x4e
jne 0x10071aa4
movzx ax, byte [esp + 5]
mov ah, byte [esp + 4]
cmp ax, si
mov word [esp + 4], ax
jne 0x10071848
mov dword [esp + 0x52], esi
mov dword [esp + 0x56], esi
movzx ax, byte [esp + 9]
mov ah, byte [esp + 8]
movzx cx, byte [esp + 0xb]
mov ch, byte [esp + 0xa]
movzx dx, byte [esp + 7]
mov dh, byte [esp + 6]
mov word [esp + 8], ax
movzx ax, byte [esp + 0xf]
mov ah, byte [esp + 0xe]
mov word [esp + 0xa], cx
movzx cx, byte [esp + 0x11]
mov ch, byte [esp + 0x10]
mov word [esp + 6], dx
movzx dx, byte [esp + 0xd]
mov dh, byte [esp + 0xc]
mov word [esp + 0xe], ax
movzx ax, byte [esp + 0x15]
mov ah, byte [esp + 0x14]
mov word [esp + 0x10], cx
movzx cx, byte [esp + 0x17]
mov ch, byte [esp + 0x16]
mov word [esp + 0xc], dx
movzx dx, byte [esp + 0x13]
mov dh, byte [esp + 0x12]
mov word [esp + 0x14], ax
movzx ax, byte [esp + 0x1b]
mov ah, byte [esp + 0x1a]
mov word [esp + 0x16], cx
movzx cx, byte [esp + 0x1d]
mov ch, byte [esp + 0x1c]
mov word [esp + 0x12], dx
movzx dx, byte [esp + 0x19]
mov dh, byte [esp + 0x18]
mov word [esp + 0x1a], ax
movzx ax, byte [esp + 0x21]
mov ah, byte [esp + 0x20]
mov word [esp + 0x1c], cx
movzx cx, byte [esp + 0x23]
mov ch, byte [esp + 0x22]
mov word [esp + 0x18], dx
movzx dx, byte [esp + 0x1f]
mov dh, byte [esp + 0x1e]
mov word [esp + 0x20], ax
movzx ax, byte [esp + 0x45]
mov ah, byte [esp + 0x44]
mov word [esp + 0x22], cx
movzx cx, byte [esp + 0x47]
mov ch, byte [esp + 0x46]
mov word [esp + 0x1e], dx
movzx dx, byte [esp + 0x43]
mov dh, byte [esp + 0x42]
mov word [esp + 0x44], ax
movzx ax, byte [esp + 0x4b]
mov ah, byte [esp + 0x4a]
mov word [esp + 0x46], cx
movzx cx, byte [esp + 0x4d]
mov ch, byte [esp + 0x4c]
mov word [esp + 0x42], dx
movzx dx, byte [esp + 0x49]
mov dh, byte [esp + 0x48]
mov word [esp + 0x4a], ax
movzx ax, byte [esp + 0x51]
mov ah, byte [esp + 0x50]
mov word [esp + 0x4c], cx
xor ecx, ecx
mov ch, byte [esp + 0x2e]
mov word [esp + 0x48], dx
movzx dx, byte [esp + 0x4f]
mov dh, byte [esp + 0x4e]
mov word [esp + 0x50], ax
mov cl, byte [esp + 0x2f]
mov eax, dword [esp + 0x2e]
shr eax, 0x10
push edi
mov word [esp + 0x52], dx
movzx edx, ah
shl ecx, 0x10
or ecx, edx
xor edx, edx
mov dh, al
movzx eax, dx
or ecx, eax
mov dword [esp + 0x32], ecx
xor ecx, ecx
mov ch, byte [esp + 0x36]
mov eax, dword [esp + 0x36]
shr eax, 0x10
movzx edx, ah
mov edi, dword [esp + 0x68]
mov cl, byte [esp + 0x37]
lea esi, [esp + 8]
shl ecx, 0x10
or ecx, edx
xor edx, edx
mov dh, al
movzx eax, dx
or ecx, eax
mov dword [esp + 0x36], ecx
xor ecx, ecx
mov ch, byte [esp + 0x3a]
mov eax, dword [esp + 0x3a]
shr eax, 0x10
movzx edx, ah
mov cl, byte [esp + 0x3b]
shl ecx, 0x10
or ecx, edx
xor edx, edx
mov dh, al
movzx eax, dx
or ecx, eax
mov dword [esp + 0x3a], ecx
mov eax, dword [esp + 0x3e]
xor ecx, ecx
mov ch, byte [esp + 0x3e]
shr eax, 0x10
movzx edx, ah
mov cl, byte [esp + 0x3f]
shl ecx, 0x10
or ecx, edx
xor edx, edx
mov dh, al
movzx eax, dx
or ecx, eax
mov eax, dword [esp + 0x56]
mov dword [esp + 0x3e], ecx
xor ecx, ecx
mov ch, byte [esp + 0x56]
shr eax, 0x10
movzx edx, ah
mov cl, byte [esp + 0x57]
shl ecx, 0x10
or ecx, edx
xor edx, edx
mov dh, al
movzx eax, dx
or ecx, eax
mov eax, dword [esp + 0x5a]
mov dword [esp + 0x56], ecx
xor ecx, ecx
mov ch, byte [esp + 0x5a]
shr eax, 0x10
movzx edx, ah
mov cl, byte [esp + 0x5b]
shl ecx, 0x10
or ecx, edx
xor edx, edx
mov dh, al
movzx eax, dx
or ecx, eax
mov dword [esp + 0x5a], ecx
mov ecx, 0x15
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop edi
mov eax, 1
pop esi
add esp, 0x58
ret 8
mov eax, esi
pop esi
add esp, 0x58
ret 8