Function at 0x10067fa2
Capabilities:
Inspect section memory permissions

Disassembly:
mov edi, edi
push ebx
mov ebx, ecx
xor eax, eax
push esi
mov esi, edx
cmp byte [ebx], al
je 0x10067fe1
push edi
mov edi, eax
push ebx
push dword [edi*4 + 0x10002740]
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x10067fce
inc edi
cmp edi, 0x33
jb 0x10067fb3
or edi, 0xffffffff
inc edi
cmp edi, 0x33
ja case.default.0x10067fd4
jmp dword [edi*4 + 0x100681d2]
or dword [esi], 1
xor eax, eax
pop edi
pop esi
pop ebx
ret
or dword [esi], 2
jmp case.default.0x10067fd4
or dword [esi], 4
jmp case.default.0x10067fd4
or dword [esi], 8
jmp case.default.0x10067fd4
or dword [esi], 0x10
jmp case.default.0x10067fd4
or dword [esi], 0x20
jmp case.default.0x10067fd4
or dword [esi], 0x40
jmp case.default.0x10067fd4
or dword [esi], 0x80
jmp case.default.0x10067fd4
or dword [esi], 0x100
jmp case.default.0x10067fd4
or dword [esi], 0x200
jmp case.default.0x10067fd4
or dword [esi], 0x400
jmp case.default.0x10067fd4
or dword [esi], 0x800
jmp case.default.0x10067fd4
or dword [esi], 0x1000
jmp case.default.0x10067fd4
or dword [esi], 0x2000
jmp case.default.0x10067fd4
or dword [esi], 0x4000
jmp case.default.0x10067fd4
or dword [esi], 0x8000
jmp case.default.0x10067fd4
or dword [esi], 0x10000
jmp case.default.0x10067fd4
or dword [esi], 0x20000
jmp case.default.0x10067fd4
or dword [esi], 0x40000
jmp case.default.0x10067fd4
or dword [esi], 0x80000
jmp case.default.0x10067fd4
or dword [esi], 0x100000
jmp case.default.0x10067fd4
or dword [esi], 0x200000
jmp case.default.0x10067fd4
or dword [esi], 0x400000
jmp case.default.0x10067fd4
or dword [esi], 0x800000
jmp case.default.0x10067fd4
or dword [esi], 0x1000000
jmp case.default.0x10067fd4
or dword [esi], 0x2000000
jmp case.default.0x10067fd4
or dword [esi], 0x4000000
jmp case.default.0x10067fd4
or dword [esi], 0x8000000
jmp case.default.0x10067fd4
or dword [esi], sym.WAB32.dll_Ordinal_20
jmp case.default.0x10067fd4
or dword [esi], 0x20000000
jmp case.default.0x10067fd4
or dword [esi], 0x40000000
jmp case.default.0x10067fd4
or dword [esi], 0x80000000
jmp case.default.0x10067fd4
or dword [esi + 4], 1
jmp case.default.0x10067fd4
or dword [esi + 4], 2
jmp case.default.0x10067fd4
or dword [esi + 4], 4
jmp case.default.0x10067fd4
or dword [esi + 4], 8
jmp case.default.0x10067fd4
or dword [esi + 4], 0x10
jmp case.default.0x10067fd4
or dword [esi + 4], 0x20
jmp case.default.0x10067fd4
or dword [esi + 4], 0x40
jmp case.default.0x10067fd4
or dword [esi + 4], 0x80
jmp case.default.0x10067fd4
or dword [esi + 4], 0x100
jmp case.default.0x10067fd4
or dword [esi + 4], 0x200
jmp case.default.0x10067fd4
or dword [esi + 4], 0x400
jmp case.default.0x10067fd4
or dword [esi + 4], 0x800
jmp case.default.0x10067fd4
or dword [esi + 4], 0x1000
jmp case.default.0x10067fd4
or dword [esi + 4], 0x2000
jmp case.default.0x10067fd4
or dword [esi + 4], 0x4000
jmp case.default.0x10067fd4
or dword [esi + 4], 0x8000
jmp case.default.0x10067fd4
or dword [esi + 4], 0x10000
jmp case.default.0x10067fd4
or dword [esi + 4], 0x20000
jmp case.default.0x10067fd4
or dword [esi + 4], 0x40000
jmp case.default.0x10067fd4
pop edi
mov edx, esi
mov ecx, ebx
pop esi
pop ebx
jmp fcn.10067f49