Function at 0x71d0902f
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov eax, dword [ebp + 8]
or dword [ebp - 0xc], 0xffffffff
or dword [ebp - 8], 0xffffffff
push ebx
mov dl, byte [eax]
xor ebx, ebx
push esi
mov esi, ecx
mov byte [ebp - 1], bl
mov ecx, dword [ebp + 0x14]
push edi
test cl, 0x10
je 0x71d09081
cmp dword [ebp + 0x18], ebx
jne 0x71d09081
mov edi, dword [esi + 0x1468]
mov dword [ebp - 0xc], edi
mov edi, dword [esi + 0x146c]
mov byte [ebp - 1], 1
mov dword [ebp - 8], edi
and ecx, 0xffffffef
mov dword [ebp + 0x14], ecx
cmp dl, 0x20
jne 0x71d1477b
mov edx, dword [eax + 0x28]
mov edi, dword [eax + 0x24]
mov eax, dword [eax + 0x10]
shr eax, 5
and eax, 0xffffff01
mov dword [ebp - 0x14], edx
cmp byte [edx], 7
mov dword [ebp - 0x10], eax
jne 0x71d1eb3a
cmp byte [edi], 0x20
je 0x71d1ebbf
push ecx
push dword [ebp + 0x10]
mov ecx, esi
push 2
push edi
call fcn.71cfb146
mov ebx, eax
mov eax, dword [ebp + 8]
mov byte [eax + 7], bl
mov edx, dword [eax + 0x14]
mov edi, dword [eax + 0x18]
movzx ecx, byte [eax + 7]
mov eax, edx
or eax, edi
je 0x71d090ed
test ecx, ecx
jne 0x71d1285d
cmp byte [ebp - 1], 0
je 0x71d09143
mov eax, dword [ebp - 0xc]
and eax, dword [ebp - 8]
cmp eax, 0xffffffff
je 0x71d60961
mov ecx, dword [ebp - 0xc]
mov edi, dword [esi + 0x146c]
mov eax, dword [ebp - 8]
cmp dword [esi + 0x1468], ecx
jne 0x71d0ac73
cmp edi, eax
jne 0x71d0ac73
mov dword [esi + 0x1468], ecx
mov ecx, dword [ebp - 8]
mov dword [esi + 0x146c], ecx
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret 0x14
mov edx, dword [esi + 0x1478]
cmp edx, 0xffffffff
je 0x71d09131
not eax
not ecx
and ecx, dword [esi + 0x1468]
and eax, edi
push eax
push ecx
push edx
mov ecx, esi
call fcn.71d167b2
mov ecx, dword [ebp - 0xc]
jmp 0x71d09131
push edi
push edx
push ecx
mov ecx, esi
call fcn.71d0387a
jmp 0x71d090ed
cmp dl, 0x4a
je 0x71d491d2
cmp dl, 7
je 0x71d090d5
push ecx
push dword [ebp + 0x10]
push 2
push eax
mov ecx, esi
call fcn.71cfb146
mov ebx, eax
mov eax, dword [ebp + 8]
jmp 0x71d090d5
cmp byte [edx], 0x2a
je 0x71d36b1d
mov ebx, edx
test ebx, ebx
je 0x71d1eb5b
cmp byte [ebx], 0xc
je 0x71d36b15
cmp byte [ebx], 7
je 0x71d090bf
cmp byte [edi], 0x2a
jne 0x71d1eb77
mov eax, dword [edi + 0x28]
cmp byte [eax], 7
jne 0x71d1eb77
cmp dword [eax + 0x24], 0
je 0x71d1eb77
cmp dword [eax + 0x24], 3
jg 0x71d1eb77
mov edi, dword [edi + 0x24]
cmp byte [ebp - 0x10], 0
jne 0x71d60929
movzx eax, byte [edx + 6]
or eax, ecx
mov ecx, esi
push eax
push dword [ebp + 0x10]
push 2
push edi
call fcn.71cfb146
push dword [ebp + 0x14]
mov ebx, eax
mov ecx, esi
or eax, dword [ebp + 0x10]
push eax
push 2
push dword [ebp - 0x14]
call fcn.71cfb146
cmp ebx, eax
je 0x71d241d8
or ebx, eax
jmp 0x71d090cf
mov eax, dword [edi + 0x10]
mov edx, dword [edi + 0x28]
mov edi, dword [edi + 0x24]
shr eax, 5
and al, 1
mov dword [ebp - 0x14], edx
mov byte [ebp - 0x10], al
jmp 0x71d1eb3a
test ebx, ebx
je 0x71d1ebb8
push ebx
push 2
push 8
mov ecx, esi
call fcn.71d016ec
jmp 0x71d1ebb8
mov ebx, dword [ebx + 0x24]
jmp 0x71d1eb52
mov eax, dword [edx + 0x28]
cmp byte [eax], 7
jne 0x71d1eb45
mov ebx, dword [edx + 0x24]
jmp 0x71d1eb45
push ecx
push dword [ebp + 0x10]
push ebx
jmp 0x71d14793
movzx eax, byte [edi + 6]
or eax, ecx
mov ecx, esi
push eax
push dword [ebp + 0x10]
push 2
push edx
call fcn.71cfb146
push dword [ebp + 0x14]
mov dword [ebp - 0x14], eax
mov ecx, esi
or eax, dword [ebp + 0x10]
push eax
push 2
push edi
call fcn.71cfb146
mov ebx, eax
mov eax, dword [ebp - 0x14]
jmp 0x71d1ebb0
call fcn.71d51586
jmp 0x71d0910b