Function at 0x101536e0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x88
mov eax, dword [0x1041f700]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0xc]
push ebx
push esi
push edi
movzx eax, byte [ecx + 7]
cdq
mov ebx, eax
mov esi, dword [ebp + 8]
movzx eax, byte [ecx + 6]
mov edi, edx
shld edi, ebx, 8
cdq
or edi, edx
shl ebx, 8
or ebx, eax
movzx eax, byte [ecx + 5]
shld edi, ebx, 8
cdq
or edi, edx
shl ebx, 8
or ebx, eax
movzx eax, byte [ecx + 4]
shld edi, ebx, 8
cdq
or edi, edx
shl ebx, 8
or ebx, eax
movzx eax, byte [ecx + 3]
shld edi, ebx, 8
cdq
or edi, edx
shl ebx, 8
or ebx, eax
movzx eax, byte [ecx + 2]
shld edi, ebx, 8
cdq
or edi, edx
shl ebx, 8
or ebx, eax
movzx eax, byte [ecx + 1]
cdq
shld edi, ebx, 8
or edi, edx
shl ebx, 8
or ebx, eax
movzx eax, byte [ecx]
cdq
shld edi, ebx, 8
or edi, edx
shl ebx, 8
or ebx, eax
mov dword [ebp - 0x6c], edi
movzx eax, byte [ecx + 0xf]
cdq
mov dword [ebp - 0x40], edi
mov edi, eax
mov eax, edx
mov dword [ebp - 0x44], ebx
shld eax, edi, 8
mov dword [ebp - 0x58], eax
movzx eax, byte [ecx + 0xe]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x58]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x58], eax
movzx eax, byte [ecx + 0xd]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x58]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x58], eax
movzx eax, byte [ecx + 0xc]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x58]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x58], eax
movzx eax, byte [ecx + 0xb]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x58]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x58], eax
movzx eax, byte [ecx + 0xa]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x58]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x58], eax
movzx eax, byte [ecx + 9]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x58]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x58], eax
movzx eax, byte [ecx + 8]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x58]
or eax, edx
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x38], eax
movzx eax, byte [ecx + 0x17]
cdq
mov dword [ebp - 0x3c], edi
mov edi, eax
mov eax, edx
shld eax, edi, 8
mov dword [ebp - 0x5c], eax
movzx eax, byte [ecx + 0x16]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x5c]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x5c], eax
movzx eax, byte [ecx + 0x15]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x5c]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x5c], eax
movzx eax, byte [ecx + 0x14]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x5c]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x5c], eax
movzx eax, byte [ecx + 0x13]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x5c]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x5c], eax
movzx eax, byte [ecx + 0x12]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x5c]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x5c], eax
movzx eax, byte [ecx + 0x11]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x5c]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x5c], eax
movzx eax, byte [ecx + 0x10]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x5c]
or eax, edx
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x30], eax
movzx eax, byte [ecx + 0x1f]
cdq
mov dword [ebp - 0x34], edi
mov edi, eax
mov eax, edx
shld eax, edi, 8
mov dword [ebp - 0x50], eax
movzx eax, byte [ecx + 0x1e]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x50]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x50], eax
movzx eax, byte [ecx + 0x1d]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x50]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x50], eax
movzx eax, byte [ecx + 0x1c]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x50]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x50], eax
movzx eax, byte [ecx + 0x1b]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x50]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x50], eax
movzx eax, byte [ecx + 0x1a]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x50]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x50], eax
movzx eax, byte [ecx + 0x19]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x50]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x50], eax
movzx eax, byte [ecx + 0x18]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x84], edi
or eax, edx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x28], eax
movzx eax, byte [ecx + 0x27]
cdq
mov dword [ebp - 0x2c], edi
mov edi, eax
mov eax, edx
shld eax, edi, 8
mov dword [ebp - 0x54], eax
movzx eax, byte [ecx + 0x26]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x54]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x54], eax
movzx eax, byte [ecx + 0x25]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x54]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x54], eax
movzx eax, byte [ecx + 0x24]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x54]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x54], eax
movzx eax, byte [ecx + 0x23]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x54]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x54], eax
movzx eax, byte [ecx + 0x22]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x54]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x54], eax
movzx eax, byte [ecx + 0x21]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x54]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x54], eax
movzx eax, byte [ecx + 0x20]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x54]
or eax, edx
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x20], eax
movzx eax, byte [ecx + 0x2f]
cdq
mov dword [ebp - 0x24], edi
mov edi, eax
mov eax, edx
shld eax, edi, 8
mov dword [ebp - 0x48], eax
movzx eax, byte [ecx + 0x2e]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x48]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x48], eax
movzx eax, byte [ecx + 0x2d]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x48]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x48], eax
movzx eax, byte [ecx + 0x2c]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x48]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x48], eax
movzx eax, byte [ecx + 0x2b]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x48]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x48], eax
movzx eax, byte [ecx + 0x2a]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x48]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x48], eax
movzx eax, byte [ecx + 0x29]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x48]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x48], eax
movzx eax, byte [ecx + 0x28]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x48]
or eax, edx
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x18], eax
movzx eax, byte [ecx + 0x37]
cdq
mov dword [ebp - 0x1c], edi
mov edi, eax
mov eax, edx
shld eax, edi, 8
mov dword [ebp - 0x4c], eax
movzx eax, byte [ecx + 0x36]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x4c]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x4c], eax
movzx eax, byte [ecx + 0x35]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x4c]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x4c], eax
movzx eax, byte [ecx + 0x34]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x4c]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x4c], eax
shl edi, 8
movzx eax, byte [ecx + 0x33]
cdq
or edi, eax
mov eax, dword [ebp - 0x4c]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x4c], eax
movzx eax, byte [ecx + 0x32]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x4c]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x4c], eax
movzx eax, byte [ecx + 0x31]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x4c]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x4c], eax
movzx eax, byte [ecx + 0x30]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x4c]
or eax, edx
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], eax
movzx eax, byte [ecx + 0x3f]
cdq
mov dword [ebp - 0x14], edi
mov edi, eax
mov eax, edx
shld eax, edi, 8
mov dword [ebp - 0x60], eax
movzx eax, byte [ecx + 0x3e]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x60]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x60], eax
movzx eax, byte [ecx + 0x3d]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x60]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x60], eax
movzx eax, byte [ecx + 0x3c]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x60]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x60], eax
movzx eax, byte [ecx + 0x3b]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x60]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x60], eax
movzx eax, byte [ecx + 0x3a]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x60]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x60], eax
movzx eax, byte [ecx + 0x39]
shl edi, 8
cdq
or edi, eax
mov eax, dword [ebp - 0x60]
or eax, edx
shld eax, edi, 8
mov dword [ebp - 0x60], eax
movzx eax, byte [ecx + 0x38]
cdq
shl edi, 8
or edi, eax
mov eax, dword [ebp - 0x60]
or eax, edx
mov dword [ebp - 0xc], edi
mov dword [ebp - 0x80], edi
lea edi, [esi + 0x88]
mov dword [ebp - 0x60], eax
mov dword [ebp - 8], eax
lea eax, [ebp - 0x44]
push edi
push eax
lea eax, [esi + 0x48]
push eax
call fcn.10153420
mov eax, dword [edi]
add esp, 0xc
mov ecx, dword [ebp + 0x10]
mov edx, dword [edi + 4]
add ecx, eax
mov dword [ebp - 0x64], eax
mov eax, 0
adc eax, edx
mov dword [edi], ecx
mov dword [edi + 4], eax
mov eax, ecx
mov ecx, dword [edi + 4]
cmp ecx, edx
jb 0x10153c97
ja 0x10153c8c
cmp eax, dword [ebp - 0x64]
jb 0x10153c97
test ecx, ecx
ja 0x10153cb9
jb 0x10153c97
cmp eax, dword [ebp + 0x10]
jae 0x10153cb9
mov edx, 1
lea ecx, [esi + 0x90]
add dword [ecx], 1
mov eax, dword [ecx]
adc dword [ecx + 4], 0
or eax, dword [ecx + 4]
jne 0x10153cb9
inc edx
add ecx, 8
cmp edx, 8
jl 0x10153ca2
add dword [esi + 0xc8], ebx
xorps xmm0, xmm0
mov eax, dword [ebp - 0x6c]
adc dword [esi + 0xcc], eax
mov edx, dword [esi + 0xc8]
mov ecx, dword [esi + 0xcc]
movlpd qword [ebp - 0x68], xmm0
cmp edx, ebx
jne 0x10153cec
cmp ecx, eax
jne 0x10153cee
mov edx, dword [ebp - 0x64]
mov ebx, dword [ebp - 0x68]
jmp 0x10153d02
cmp ecx, eax
ja 0x10153cfd
jb 0x10153cf6
cmp edx, ebx
jae 0x10153cfd
mov eax, 1
jmp 0x10153cff
xor eax, eax
cdq
mov ebx, eax
mov eax, dword [ebp - 0x88]
mov edi, eax
mov ecx, dword [ebp - 0x58]
add edi, ebx
adc ecx, edx
add dword [esi + 0xd0], edi
adc dword [esi + 0xd4], ecx
mov edi, dword [esi + 0xd4]
mov ecx, dword [ebp - 0x58]
cmp dword [esi + 0xd0], eax
jne 0x10153d32
cmp edi, ecx
je 0x10153d4c
cmp edi, ecx
ja 0x10153d47
jb 0x10153d40
cmp dword [esi + 0xd0], eax
jae 0x10153d47
mov eax, 1
jmp 0x10153d49
xor eax, eax
cdq
mov ebx, eax
mov edi, dword [ebp - 0x74]
mov ecx, edi
mov eax, dword [ebp - 0x5c]
add ecx, ebx
adc eax, edx
add dword [esi + 0xd8], ecx
adc dword [esi + 0xdc], eax
mov ecx, dword [esi + 0xdc]
mov eax, dword [ebp - 0x5c]
cmp dword [esi + 0xd8], edi
jne 0x10153d79
cmp ecx, eax
je 0x10153d93
cmp ecx, eax
ja 0x10153d8e
jb 0x10153d87
cmp dword [esi + 0xd8], edi
jae 0x10153d8e
mov eax, 1
jmp 0x10153d90
xor eax, eax
cdq
mov ebx, eax
mov edi, dword [ebp - 0x84]
mov ecx, edi
mov eax, dword [ebp - 0x50]
add ecx, ebx
adc eax, edx
add dword [esi + 0xe0], ecx
adc dword [esi + 0xe4], eax
mov ecx, dword [esi + 0xe4]
mov eax, dword [ebp - 0x50]
cmp dword [esi + 0xe0], edi
jne 0x10153dc3
cmp ecx, eax
je 0x10153ddd
cmp ecx, eax
ja 0x10153dd8
jb 0x10153dd1
cmp dword [esi + 0xe0], edi
jae 0x10153dd8
mov eax, 1
jmp 0x10153dda
xor eax, eax
cdq
mov ebx, eax
mov edi, dword [ebp - 0x7c]
mov ecx, edi
mov eax, dword [ebp - 0x54]
add ecx, ebx
adc eax, edx
add dword [esi + 0xe8], ecx
adc dword [esi + 0xec], eax
mov ecx, dword [esi + 0xec]
mov eax, dword [ebp - 0x54]
cmp dword [esi + 0xe8], edi
jne 0x10153e0a
cmp ecx, eax
je 0x10153e24
cmp ecx, eax
ja 0x10153e1f
jb 0x10153e18
cmp dword [esi + 0xe8], edi
jae 0x10153e1f
mov eax, 1
jmp 0x10153e21
xor eax, eax
cdq
mov ebx, eax
mov edi, dword [ebp - 0x70]
mov ecx, edi
mov eax, dword [ebp - 0x48]
add ecx, ebx
adc eax, edx
add dword [esi + 0xf0], ecx
adc dword [esi + 0xf4], eax
mov ecx, dword [esi + 0xf4]
mov eax, dword [ebp - 0x48]
cmp dword [esi + 0xf0], edi
jne 0x10153e51
cmp ecx, eax
je 0x10153e6b
cmp ecx, eax
ja 0x10153e66
jb 0x10153e5f
cmp dword [esi + 0xf0], edi
jae 0x10153e66
mov eax, 1
jmp 0x10153e68
xor eax, eax
cdq
mov ebx, eax
mov edi, dword [ebp - 0x78]
mov ecx, edi
mov eax, dword [ebp - 0x4c]
add ecx, ebx
adc eax, edx
add dword [esi + 0xf8], ecx
mov ecx, dword [esi + 0xf8]
adc dword [esi + 0xfc], eax
mov eax, dword [esi + 0xfc]
cmp ecx, edi
jne 0x10153e98
cmp eax, dword [ebp - 0x4c]
je 0x10153eaf
cmp eax, dword [ebp - 0x4c]
ja 0x10153eaa
jb 0x10153ea3
cmp ecx, edi
jae 0x10153eaa
mov eax, 1
jmp 0x10153eac
xor eax, eax
cdq
mov ebx, eax
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x60]
add eax, ebx
pop edi
adc ecx, edx
add dword [esi + 0x100], eax
adc dword [esi + 0x104], ecx
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.101c7f5c
mov esp, ebp
pop ebp
ret