Function at 0xa5d2f4
Capabilities:
Enumerate pe sections
Inspect section memory permissions

Disassembly:
push 2
jmp 0x9a1745
push ebx
push eax
jmp 0xa46f60
add ecx, dword [esi]
shr eax, 0xc
jmp 0x71bb10
dec dword [esp + 0x10]
jmp 0xa35b9d
push ecx
jmp 0x95e00a
jmp 0x967333
mov dword [esp + 0x18], edx
je 0xa5b9ff
cmp dword [edi + 0xa0], 0
jmp 0xa6fb4a
mov edi, dword [ebx + 0x3c]
movsx esi, dx
movzx ecx, word [edi + ebx + 0x14]
add si, 0xbe1
mov si, 0x56fb
lea edi, [edi + ebx]
sub esi, 0x3dc8053e
xor edx, edx
not esi
lea esi, [ecx + edi + 0x18]
test di, 0x10cb
clc
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], esi
clc
mov dword [esp + 0x10], 0
clc
cmp dx, word [edi + 6]
jmp 0x941f92
jbe 0x945653
test al, 1
jmp 0xa4ed83
add edi, 2
jmp 0x69deca
mov esp, ebp
bswap bp
pop ebp
jmp 0xa7448e
mov dword [esp + 0x20], eax
jmp 0xa19054
jne 0xa5b9fc
xor ecx, ecx
test edx, 0x18a65a07
mov dword [esp + 0x14], ecx
cmp sp, cx
jmp 0xa46999
dec eax
lea ecx, [ecx + ebx]
cmp eax, 9
jmp 0xa8c875
call fcn.0091f503
test eax, eax
jne 0xa4c6c6
mov ebx, dword [ebp + 0x10]
movsx edx, bp
mov edx, dword [esp + 0x7c]
jmp 0x65d6da
jae 0xa8f050
add esi, 0x10
jmp 0x6b2a57
jne 0x6b7295
mov eax, 0xc000007b
mov esi, ebp
pop edi
pop esi
not bx
movzx ebx, ax
seto bl
pop ebx
jmp 0x6e3846
push edx
mov edx, dword [eax]
jmp 0x97b90a
je 0xa5b9fc
lea esp, [esp]
test cx, di
mov esi, dword [edi + 0xa0]
shl al, cl
sal ah, 0x87
sub ah, 0x18
add esi, ecx
mov eax, dword [esi + ebx + 4]
add esi, ebx
test eax, eax
je 0xa5b9fc
cmp eax, 8
jmp 0x6c1dca
mov ebx, dword [esi - 8]
shl eax, cl
mov edi, dword [esi - 4]
add edi, dword [ebp + 0x10]
movsx eax, dx
xchg ah, ah
mov eax, dword [esi]
push ebx
push 0
push edi
jmp 0xa18fe8
mov eax, dword [ebp + 0xc]
call fcn.0097a973
test al, al
jmp 0xa0f160
add ecx, dword [esi + 4]
stc
test si, si
mov dword [esp + 0x14], ecx
cmc
cmp edi, 0x62e57efc
test sp, 0x54f2
cmp ecx, dword [edi + 0xa4]
jmp 0xa5b9f6
push edx
jmp 0x657b7c
inc eax
cmc
lea esi, [esi + 0x28]
test dh, dh
cmp bp, 0x2b30
mov dword [esp + 0x10], eax
cmp edi, 0x7b3e0e0f
clc
cmp eax, edx
jmp 0xa8f03c
je 0x945653
mov ecx, dword [esp + 0x1c]
mov dl, 0xe7
mov ax, bp
mov eax, dword [esp + 0x10]
cmovbe edx, esp
mov dx, bp
cdq
movzx edx, word [ecx + 6]
jmp 0xa0d843
mov dword [esp + 0x24], ebx
jmp 0x6fc665
call fcn.0066ea80
add esp, 0xc
mov ah, ah
lea eax, [esp + 0x18]
cmc
test si, cx
cmp ebx, dword [esp + 0x14]
jmp 0xa6f3d7
push eax
mov ecx, 0x23ca1da8
mov eax, esi
mov ecx, edi
jmp 0x91b42e
jne 0xa4eda6
mov edi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
jmp 0x97ca9e
call fcn.0097a973
test al, al
jmp 0x94564d
test eax, eax
jmp 0x960a49
push eax
movsx eax, bx
mov ah, 0xdf
cwde
push edi
bswap ax
mov eax, esi
jmp 0xa3a03a
jne 0x945653
add eax, 0xfffffff8
cmp ecx, 0x24696b53
shr eax, 1
je 0x97ca9e
lea edi, [esi + 8]
shrd ecx, esp, 0x20
stc
mov dword [esp + 0x10], eax
movzx eax, word [edi]
and cx, cx
add cl, 6
and ch, 0x7c
mov ecx, eax
test dx, di
cmc
and ecx, 0xfff
jmp 0x694e54
jb 0x960a59
mov dword [edi + 0x34], ebx
mov edx, dword [edi + 0x54]
movzx ecx, bp
lea ecx, [esp + 0x24]
push ecx
jmp 0x65617d
push ebp
bsr eax, ecx
sar al, 0xab
mov ebp, esp
test eax, esi
sar ecx, 0xea
and esp, 0xfffffff8
lahf
sub esp, 0x114
movsx eax, si
push ebx
bswap cx
mov cx, si
push esi
setp ah
movzx eax, dx
jmp 0xa88ea1
jb 0xa6f3e8
lea eax, [esp + 0x14]
xchg cx, dx
movsx dx, cl
mov ecx, dword [esi + 4]
mov edx, ebp
mov edx, dword [ebp + 8]
jmp 0xa73ff4
je 0xa5b9fc
mov eax, dword [edi + 0xa4]
cmc
test eax, eax
je 0xa5b9fc
test byte [edi + 0x16], 1
jmp 0x70258c
push edi
push 0
jmp 0x6a34ed
ret 0xc
mov esi, dword [ebp + 0xc]
push edi
mov ecx, esp
mov edi, dword [ebp + 8]
xchg cx, cx
lea eax, [esp + 0x28]
jmp 0xa234f8
ja 0x6e1241
movzx eax, byte [eax + 0x66800c]
push dword [eax*4 + 0xa1df20]
ret
jb 0x967333
mov ebx, dword [ebp + 0x10]
shl dl, 0x28
mov edi, ecx
shld edx, ebp, 0xdf
sbb edx, esp
mov edx, ebx
sub edx, dword [edi + 0x34]
jmp 0x6b6617