Function at 0x71ad902f
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov eax, dword [ebp + 8]
or dword [ebp - 0xc], 0xffffffff
or dword [ebp - 8], 0xffffffff
push ebx
mov dl, byte [eax]
xor ebx, ebx
push esi
mov esi, ecx
mov byte [ebp - 1], bl
mov ecx, dword [ebp + 0x14]
push edi
test cl, 0x10
je 0x71ad9081
cmp dword [ebp + 0x18], ebx
jne 0x71ad9081
mov edi, dword [esi + 0x1468]
mov dword [ebp - 0xc], edi
mov edi, dword [esi + 0x146c]
mov byte [ebp - 1], 1
mov dword [ebp - 8], edi
and ecx, 0xffffffef
mov dword [ebp + 0x14], ecx
cmp dl, 0x20
jne 0x71ae477b
mov edx, dword [eax + 0x28]
mov edi, dword [eax + 0x24]
mov eax, dword [eax + 0x10]
shr eax, 5
and eax, 0xffffff01
mov dword [ebp - 0x14], edx
cmp byte [edx], 7
mov dword [ebp - 0x10], eax
jne 0x71aeeb3a
cmp byte [edi], 0x20
je 0x71aeebbf
push ecx
push dword [ebp + 0x10]
mov ecx, esi
push 2
push edi
call fcn.71acb146
mov ebx, eax
mov eax, dword [ebp + 8]
mov byte [eax + 7], bl
mov edx, dword [eax + 0x14]
mov edi, dword [eax + 0x18]
movzx ecx, byte [eax + 7]
mov eax, edx
or eax, edi
je 0x71ad90ed
test ecx, ecx
jne 0x71ae285d
cmp byte [ebp - 1], 0
je 0x71ad9143
mov eax, dword [ebp - 0xc]
and eax, dword [ebp - 8]
cmp eax, 0xffffffff
je 0x71b30961
mov ecx, dword [ebp - 0xc]
mov edi, dword [esi + 0x146c]
mov eax, dword [ebp - 8]
cmp dword [esi + 0x1468], ecx
jne 0x71adac73
cmp edi, eax
jne 0x71adac73
mov dword [esi + 0x1468], ecx
mov ecx, dword [ebp - 8]
mov dword [esi + 0x146c], ecx
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret 0x14
mov edx, dword [esi + 0x1478]
cmp edx, 0xffffffff
je 0x71ad9131
not eax
not ecx
and ecx, dword [esi + 0x1468]
and eax, edi
push eax
push ecx
push edx
mov ecx, esi
call fcn.71ae67b2
mov ecx, dword [ebp - 0xc]
jmp 0x71ad9131
push edi
push edx
push ecx
mov ecx, esi
call fcn.71ad387a
jmp 0x71ad90ed
cmp dl, 0x4a
je 0x71b191d2
cmp dl, 7
je 0x71ad90d5
push ecx
push dword [ebp + 0x10]
push 2
push eax
mov ecx, esi
call fcn.71acb146
mov ebx, eax
mov eax, dword [ebp + 8]
jmp 0x71ad90d5
cmp byte [edx], 0x2a
je 0x71b06b1d
mov ebx, edx
test ebx, ebx
je 0x71aeeb5b
cmp byte [ebx], 0xc
je 0x71b06b15
cmp byte [ebx], 7
je 0x71ad90bf
cmp byte [edi], 0x2a
jne 0x71aeeb77
mov eax, dword [edi + 0x28]
cmp byte [eax], 7
jne 0x71aeeb77
cmp dword [eax + 0x24], 0
je 0x71aeeb77
cmp dword [eax + 0x24], 3
jg 0x71aeeb77
mov edi, dword [edi + 0x24]
cmp byte [ebp - 0x10], 0
jne 0x71b30929
movzx eax, byte [edx + 6]
or eax, ecx
mov ecx, esi
push eax
push dword [ebp + 0x10]
push 2
push edi
call fcn.71acb146
push dword [ebp + 0x14]
mov ebx, eax
mov ecx, esi
or eax, dword [ebp + 0x10]
push eax
push 2
push dword [ebp - 0x14]
call fcn.71acb146
cmp ebx, eax
je 0x71af41d8
or ebx, eax
jmp 0x71ad90cf
mov eax, dword [edi + 0x10]
mov edx, dword [edi + 0x28]
mov edi, dword [edi + 0x24]
shr eax, 5
and al, 1
mov dword [ebp - 0x14], edx
mov byte [ebp - 0x10], al
jmp 0x71aeeb3a
test ebx, ebx
je 0x71aeebb8
push ebx
push 2
push 8
mov ecx, esi
call fcn.71ad16ec
jmp 0x71aeebb8
mov ebx, dword [ebx + 0x24]
jmp 0x71aeeb52
mov eax, dword [edx + 0x28]
cmp byte [eax], 7
jne 0x71aeeb45
mov ebx, dword [edx + 0x24]
jmp 0x71aeeb45
push ecx
push dword [ebp + 0x10]
push ebx
jmp 0x71ae4793
movzx eax, byte [edi + 6]
or eax, ecx
mov ecx, esi
push eax
push dword [ebp + 0x10]
push 2
push edx
call fcn.71acb146
push dword [ebp + 0x14]
mov dword [ebp - 0x14], eax
mov ecx, esi
or eax, dword [ebp + 0x10]
push eax
push 2
push edi
call fcn.71acb146
mov ebx, eax
mov eax, dword [ebp - 0x14]
jmp 0x71aeebb0
call fcn.71b21586
jmp 0x71ad910b