Function at 0x71b961b0
Capabilities:
Enumerate pe sections
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x48
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], 0x71b97fb0
mov edx, dword fs:[0]
mov dword [ebp - 0x18], edx
mov dword fs:[0], eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x40], 0x26
mov dword [ebp - 0x10], 0
lea eax, [ebp - 0x40]
mov dword [esp], eax
mov dword [esp + 4], 0x71bb9664
call fcn.71b99809
jmp 0x71b9621c
nop dword [eax]
push ebp
sub esp, 0x10
add ebp, 0xc
mov dword [ebp - 0x1c], esp
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
add eax, 0x18
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
add eax, ecx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x30], 0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 6]
cmp eax, ecx
jge 0x71b963c4
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x20000000
cmp eax, 0
setne al
and al, 1
movzx eax, al
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x40000000
cmp eax, 0
setne al
and al, 1
movzx eax, al
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x80000000
cmp eax, 0
setne al
and al, 1
movzx eax, al
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x2000000
cmp eax, 0
je 0x71b962e7
mov eax, dword [0x71bbe2e8]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ecx + 0x10]
mov edx, dword [ebp - 0x20]
mov edx, dword [edx + 8]
mov dword [ebp - 0x10], 1
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x4000
call eax
sub esp, 0xc
jmp 0x71b963ad
mov eax, dword [ebp - 0x3c]
lea ecx, [0x71bb4630]
shl eax, 4
add ecx, eax
mov eax, dword [ebp - 0x38]
shl eax, 3
add ecx, eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ecx + eax*4]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x4000000
cmp eax, 0
je 0x71b96321
mov eax, dword [ebp - 0x2c]
or eax, 0x200
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jne 0x71b9636a
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x40
cmp eax, 0
je 0x71b9634b
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x28], eax
jmp 0x71b96368
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x80
cmp eax, 0
je 0x71b96366
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x28], eax
jmp 0x71b96368
jmp 0x71b9636a
cmp dword [ebp - 0x28], 0
jbe 0x71b963ab
mov eax, dword [0x71bbe2ec]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x20]
mov edx, dword [edx + 0x10]
mov esi, dword [ebp - 0x20]
mov esi, dword [esi + 8]
mov dword [ebp - 0x10], 1
lea edi, [ebp - 0x44]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edi
call eax
sub esp, 0x10
cmp eax, 0
jne 0x71b963a9
jmp 0x71b963a9
jmp 0x71b963ab
jmp 0x71b963ad
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x20]
add eax, 0x28
mov dword [ebp - 0x20], eax
jmp 0x71b96247
mov eax, 0x71b96203
add esp, 0x10
pop ebp
ret