Function at 0x6b3822a4
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
mov dword [esp], eax
call fcn.6b392ee4
mov dword [ebp - 0x20], eax
mov eax, dword [0x6b39733c]
cmp dword [eax + 0xb4], 0
je 0x6b38230d
mov dword [esp + 4], 0x6b3960dc
mov dword [esp], 1
call dword [eax + 0x11c]
mov dword [ebp - 0x1c], eax
push edx
push edx
test eax, eax
jne 0x6b382314
mov eax, dword [0x6b39733c]
mov eax, dword [eax + 0x4ca]
mov eax, dword [eax + 0x34]
mov dword [esp], 1
mov dword [esp + 4], eax
call fcn.6b38eef4
jmp 0x6b3824af
mov dword [ebp - 0x1c], 0
xor esi, esi
mov eax, dword [ebx + 4]
cmp word [eax + 2], si
jbe 0x6b3823e2
movzx edi, si
mov edx, dword [ebx]
imul eax, edi, 0x28
lea eax, [edx + eax + 0x14]
cmp dword [eax + 0x10], 0
mov dword [ebx + 8], eax
jne 0x6b38233b
inc esi
jmp 0x6b382316
mov edx, dword [eax + 0x24]
mov eax, 1
mov ecx, edx
and ecx, 0xe0000000
je 0x6b3823a1
mov eax, 0x10
cmp ecx, 0x20000000
je 0x6b3823a1
mov eax, 2
cmp ecx, 0x40000000
je 0x6b3823a1
mov eax, 0x20
cmp ecx, 0x60000000
je 0x6b3823a1
mov eax, 8
cmp ecx, 0x80000000
je 0x6b3823a1
mov eax, pe_nt_image_headers32
cmp ecx, 0xa0000000
je 0x6b3823a1
cmp ecx, 0xc0000000
mov eax, 0x40
mov ecx, 4
cmove eax, ecx
bt edx, 0x1a
jae 0x6b3823aa
or ah, 2
mov edx, dword [ebx + 0x20]
mov dword [esp + 0x10], eax
lea edx, [edx + edi*8]
mov eax, dword [edx + 4]
mov dword [esp + 0xc], eax
mov eax, dword [edx]
mov dword [esp + 4], 0xffffffff
mov dword [esp + 8], eax
mov dword [esp], 2
call fcn.6b38e704
test eax, eax
jne 0x6b382338
jmp 0x6b3824af
mov eax, dword [ebx + 0x28]
test eax, eax
jne 0x6b3823ed
xor edi, edi
jmp 0x6b38241e
mov dword [esp + 0x10], 2
mov dword [esp + 0xc], eax
mov eax, dword [ebx + 0x24]
mov dword [esp + 4], 0xffffffff
mov dword [esp + 8], eax
mov dword [esp], 2
call fcn.6b38e704
test eax, eax
jne 0x6b3823e9
jmp 0x6b3824af
inc edi
mov eax, dword [ebx + 4]
mov edx, dword [eax + 0xc]
cmp edx, edi
jbe 0x6b382473
imul esi, edi, 0x12
mov ecx, dword [ebx + 0x10]
lea eax, [ecx + esi]
cmp dword [eax], 0
jne 0x6b382440
imul edx, edx, 0x12
add edx, dword [eax + 4]
mov eax, edx
add eax, ecx
cmp byte [eax], 0x5f
jne 0x6b382446
inc eax
mov ecx, dword [ebp - 0x20]
mov dword [esp], eax
mov dword [esp + 8], ecx
mov ecx, dword [ebp + 0xc]
mov dword [esp + 4], ecx
call fcn.6b38e374
test eax, eax
jne 0x6b38241d
add esi, dword [ebx + 0x10]
mov ecx, dword [ebx + 0x20]
movzx eax, word [esi + 0xc]
mov edx, dword [esi + 8]
add edx, dword [ecx + eax*8 - 8]
jne 0x6b3824b3
mov eax, dword [ebp + 0x18]
mov dword [esp], 0x14
mov dword [esp + 4], eax
call fcn.6b38ec74
mov dword [esp + 4], 2
mov dword [esp], eax
mov ebx, eax
call fcn.6b38ea00
mov eax, dword [ebp + 0xc]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.6b38eb28
mov dword [esp], ebx
call fcn.6b38ecfc
xor eax, eax
jmp 0x6b38251a
mov eax, dword [ebx + 4]
mov di, word [eax + 2]
xor eax, eax
jmp 0x6b3824c6
mov esi, dword [ecx + eax*8]
cmp esi, edx
jbe 0x6b3824cd
inc eax
cmp di, ax
ja 0x6b3824be
jmp 0x6b3824af
add esi, dword [ecx + eax*8 + 4]
cmp edx, esi
jae 0x6b3824c5
imul eax, eax, 0x28
mov ecx, dword [ebx]
lea eax, [ecx + eax + 0x14]
mov dword [ebx + 8], eax
test byte [eax + 0x27], 0x20
je 0x6b3824af
mov eax, dword [ebp + 0x14]
mov dword [esp], edx
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 4], eax
call fcn.6b382524
cmp dword [ebp - 0x1c], 0
je 0x6b382515
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov eax, dword [0x6b39733c]
call dword [eax + 0x120]
push eax
mov eax, 1
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret