Function at 0x467eb0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x6c
mov eax, dword [0x686bb0]
xor eax, esp
mov dword [esp + 0x68], eax
mov eax, ecx
mov ecx, dword [ebp + 8]
push ebx
push esi
push edi
mov edi, dword [eax + 4]
xor ebx, ebx
mov dword [esp + 0x54], ecx
mov ecx, eax
mov dword [esp + 0x10], edi
xor edi, edi
mov dword [esp + 0x28], eax
call fcn.00467b90
mov esi, eax
mov eax, dword [esp + 0x54]
mov dword [eax], ebx
test esi, esi
js 0x4688e4
mov edx, dword [esp + 0x10]
mov eax, 0x100
cwde
movzx ecx, byte [esi + edx]
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + edx + 1]
add cx, ax
movzx ecx, cx
mov dword [esp + 0x1c], ecx
test cx, cx
jle 0x4683c8
mov edi, dword [esp + 0x10]
lea eax, [edx + 0xa]
mov dword [esp + 0x18], ebx
add eax, esi
mov dword [esp + 0x44], ebx
add edx, 0xa
movsx ebx, cx
add edi, 0xc
mov dword [esp + 0x40], eax
lea ecx, [esi + ebx*2]
add ecx, edx
lea edx, [ebx + ebx]
movzx eax, byte [ecx]
movzx ecx, byte [ecx + 1]
shl eax, 8
add eax, edi
add ecx, eax
mov eax, dword [esp + 0x40]
add ecx, edx
add esi, ecx
movzx ecx, byte [edx + eax - 2]
movzx eax, byte [edx + eax - 1]
shl ecx, 8
inc ecx
add eax, ecx
mov dword [esp + 0x30], eax
lea ecx, [edx + eax]
mov eax, dword [0x6d4050]
test eax, eax
je 0x467f84
inc dword [eax + 0x374]
push dword [0x6d4048]
lea eax, [ecx*8]
sub eax, ecx
add eax, eax
push eax
call fcn.004490d0
mov edi, eax
add esp, 8
mov dword [esp + 0x2c], edi
test edi, edi
je 0x4688e4
mov eax, dword [esp + 0x30]
xor dl, dl
mov dword [esp + 0x48], 0
test eax, eax
je 0x468372
lea ecx, [ebx*8]
sub ecx, ebx
add ecx, 3
lea ebx, [edi + ecx*4]
mov ecx, eax
mov dword [esp + 0x10], ecx
mov al, dl
nop dword [eax]
test dl, dl
jne 0x468008
mov al, byte [esi]
mov cl, al
mov byte [esp + 0xf], al
and cl, 8
je 0x467ff4
mov dl, byte [esi + 1]
xor eax, eax
test cl, cl
mov ecx, dword [esp + 0x10]
setne al
inc eax
add esi, eax
mov al, byte [esp + 0xf]
jmp 0x46800a
dec dl
mov byte [ebx], al
add ebx, 0xe
sub ecx, 1
mov dword [esp + 0x10], ecx
jne 0x467fe0
mov eax, dword [esp + 0x1c]
movsx ecx, ax
lea eax, [ecx*8]
sub eax, ecx
xor ebx, ebx
lea eax, [edi + eax*4]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x30]
mov edi, dword [esp + 0x24]
mov dword [esp + 0x10], eax
nop dword [eax]
mov dl, byte [edi + 0xc]
and dl, 0x10
test byte [edi + 0xc], 2
je 0x46805f
mov al, byte [esi]
inc esi
movzx ecx, al
mov eax, ecx
neg eax
test dl, dl
cmove ecx, eax
add ebx, ecx
jmp 0x468081
test dl, dl
jne 0x468081
movzx ecx, byte [esi]
mov eax, 0x100
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + 1]
add cx, ax
movsx eax, cx
add ebx, eax
add esi, 2
mov word [edi], bx
add edi, 0xe
sub dword [esp + 0x10], 1
jne 0x468040
mov eax, dword [esp + 0x1c]
movsx ecx, ax
lea eax, [ecx*8]
sub eax, ecx
lea eax, [eax*4 + 2]
add eax, dword [esp + 0x2c]
xor ebx, ebx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x30]
mov edi, dword [esp + 0x24]
mov dword [esp + 0x10], eax
nop dword [eax + eax]
mov dl, byte [edi + 0xa]
and dl, 0x20
test byte [edi + 0xa], 4
je 0x4680df
mov al, byte [esi]
inc esi
movzx ecx, al
mov eax, ecx
neg eax
test dl, dl
cmove ecx, eax
add ebx, ecx
jmp 0x468101
test dl, dl
jne 0x468101
movzx ecx, byte [esi]
mov eax, 0x100
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + 1]
add cx, ax
movsx eax, cx
add ebx, eax
add esi, 2
mov word [edi], bx
add edi, 0xe
sub dword [esp + 0x10], 1
jne 0x4680c0
mov eax, dword [esp + 0x1c]
xor edx, edx
mov edi, dword [esp + 0x2c]
xor ebx, ebx
movsx ecx, ax
mov dword [esp + 0x10], edx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x3c], edx
lea eax, [ecx*8]
mov dword [esp + 0x28], edx
sub eax, ecx
lea esi, [edi + eax*4]
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x38], ecx
mov cl, byte [esi + 0xc]
mov byte [esp + 0xf], cl
movzx ecx, word [esi]
mov dword [esp + 0x14], ecx
movzx ecx, word [esi + 2]
mov dword [esp + 0x70], ecx
mov ecx, dword [esp + 0x38]
cmp dword [esp + 0x48], ecx
jne 0x46823f
test ecx, ecx
je 0x468193
push dword [esp + 0x3c]
mov ecx, edi
push dword [esp + 0x2c]
push dword [esp + 0x18]
push dword [esp + 0x28]
push ebx
push eax
push dword [esp + 0x5c]
push dword [esp + 0x34]
call fcn.00467de0
add esp, 0x20
mov edx, eax
movzx eax, byte [esp + 0xf]
mov ecx, dword [esp + 0x14]
not eax
mov ebx, dword [esp + 0x70]
and eax, 1
mov dword [esp + 0x44], eax
je 0x4681f4
test byte [esi + 0x1a], 1
movsx eax, cx
movsx ecx, bx
movsx ebx, word [esi + 0x10]
mov dword [esp + 0x10], ecx
lea ecx, [esi + 0xe]
mov dword [esp + 0x24], ecx
movsx ecx, word [ecx]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
jne 0x4681ea
add ecx, eax
sar ecx, 1
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x70]
movsx eax, cx
mov ecx, dword [esp + 0x20]
add ebx, eax
sar ebx, 1
jmp 0x4681fe
inc dword [esp + 0x38]
mov esi, dword [esp + 0x24]
jmp 0x4681fe
movsx ecx, cx
mov dword [esp + 0x20], ecx
movsx ebx, bx
lea eax, [edx*8]
sub eax, edx
inc edx
mov word [edi + eax*2], cx
xor ecx, ecx
mov dword [edi + eax*2 + 4], ecx
mov byte [edi + eax*2 + 0xc], 1
mov word [edi + eax*2 + 2], bx
mov eax, dword [esp + 0x40]
mov dword [esp + 0x18], ecx
movzx ecx, byte [eax + 1]
movzx eax, byte [eax]
inc ecx
shl eax, 8
add eax, ecx
add dword [esp + 0x40], 2
mov dword [esp + 0x48], eax
jmp 0x468356
test byte [esp + 0xf], 1
jne 0x4682c4
cmp dword [esp + 0x18], 0
je 0x4682a1
lea ecx, [edx*8]
sub ecx, edx
inc edx
mov dword [esp + 0x18], ecx
mov byte [edi + ecx*2 + 0xc], 3
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x2c]
movsx eax, cx
add eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x18]
sar eax, 1
mov word [edi + ecx*2], ax
mov ecx, dword [esp + 0x70]
movsx eax, cx
mov ecx, dword [esp + 0x18]
add eax, dword [esp + 0x3c]
sar eax, 1
mov word [edi + ecx*2 + 2], ax
mov eax, dword [esp + 0x28]
mov word [edi + ecx*2 + 4], ax
mov eax, dword [esp + 0x3c]
mov word [edi + ecx*2 + 6], ax
mov ecx, dword [esp + 0x14]
movsx eax, cx
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x28], eax
movsx eax, cx
mov dword [esp + 0x3c], eax
mov dword [esp + 0x18], 1
jmp 0x468356
lea eax, [edx*8]
sub eax, edx
inc edx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x14]
movzx eax, ax
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x70]
movzx ecx, ax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x50], ecx
test eax, eax
je 0x468308
mov ecx, dword [esp + 0x3c]
movzx ecx, cx
mov dword [esp + 0x70], ecx
mov ecx, dword [esp + 0x28]
movzx ecx, cx
mov dword [esp + 0x14], ecx
jmp 0x468318
mov dword [esp + 0x70], 0
mov dword [esp + 0x14], 0
mov ecx, dword [esp + 0x24]
test eax, eax
mov dword [esp + 0x18], 0
setne al
add al, 2
mov byte [edi + ecx*2 + 0xc], al
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x4c]
mov word [edi + eax*2], cx
mov ecx, dword [esp + 0x50]
mov word [edi + eax*2 + 2], cx
mov ecx, dword [esp + 0x14]
mov word [edi + eax*2 + 4], cx
mov ecx, dword [esp + 0x70]
mov word [edi + eax*2 + 6], cx
mov ecx, dword [esp + 0x38]
add esi, 0xe
mov eax, dword [esp + 0x20]
inc ecx
mov dword [esp + 0x38], ecx
cmp ecx, dword [esp + 0x30]
jl 0x468145
jmp 0x468388
xor edx, edx
xor ebx, ebx
mov dword [esp + 0x10], edx
xor eax, eax
mov dword [esp + 0x1c], edx
mov dword [esp + 0x3c], edx
mov dword [esp + 0x28], edx
push dword [esp + 0x3c]
mov ecx, edi
push dword [esp + 0x2c]
push dword [esp + 0x18]
push dword [esp + 0x28]
push ebx
push eax
push dword [esp + 0x5c]
push dword [esp + 0x34]
call fcn.00467de0
add esp, 0x20
mov ebx, eax
mov eax, dword [esp + 0x54]
mov dword [eax], edi
mov eax, ebx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.005f7bd4
mov esp, ebp
pop ebp
ret
cmp cx, 0xffff
jne 0x4683ae
add esi, 0xa
xor ebx, ebx
add esi, edx
mov dword [esp + 0x2c], ebx
xor edi, edi
mov al, byte [esi + 2]
xorps xmm1, xmm1
movzx edx, byte [esi + 1]
movaps xmm0, xmmword [0x677340]
movss xmm4, dword [0x676f68]
mov byte [esp + 0xf], al
mov al, byte [esi + 3]
add esi, 4
mov dword [esp + 0x70], 0
movss dword [esp + 0x44], xmm1
movss dword [esp + 0x30], xmm1
mov dword [esp + 0x18], edx
mov byte [esp + 0x37], al
movups xmmword [esp + 0x58], xmm0
test dl, 2
je 0x4684ac
lea eax, [esi + 1]
mov dword [esp + 0x50], eax
test dl, 1
je 0x468485
mov al, byte [esi + 2]
lea edx, [esi + 3]
mov bl, byte [esi]
add esi, 4
movzx ecx, al
mov eax, 0x100
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [edx]
mov edx, dword [esp + 0x18]
add cx, ax
movsx eax, cx
mov dword [esp + 0x4c], eax
mov eax, 0x100
movzx ecx, bl
mov ebx, dword [esp + 0x2c]
cwde
movsx ecx, cx
imul ecx, eax
mov eax, dword [esp + 0x50]
movzx eax, byte [eax]
add cx, ax
mov eax, dword [esp + 0x4c]
movsx ecx, cx
jmp 0x468492
mov cl, byte [esi]
mov esi, eax
movsx ecx, cl
mov al, byte [esi]
inc esi
movsx eax, al
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x30], xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x44], xmm0
test dl, 8
je 0x4684ef
movzx ecx, byte [esi]
mov eax, 0x100
cwde
xorps xmm3, xmm3
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + 1]
movss dword [esp + 0x20], xmm1
add cx, ax
add esi, 2
movsx eax, cx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm4
movss dword [esp + 0x14], xmm0
movaps xmm2, xmm0
jmp 0x468622
test dl, 0x40
je 0x468553
movzx ecx, byte [esi]
mov edx, 0x100
movsx ecx, cx
xorps xmm3, xmm3
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 1]
movss dword [esp + 0x20], xmm1
add cx, ax
movsx eax, cx
movzx ecx, byte [esi + 2]
movsx ecx, cx
movd xmm2, eax
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 3]
cvtdq2ps xmm2, xmm2
add cx, ax
add esi, 4
movsx eax, cx
mulss xmm2, xmm4
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm4
movss dword [esp + 0x14], xmm0
jmp 0x468622
test dl, dl
jns 0x4685fe
movzx ecx, byte [esi]
mov edx, 0x100
movsx ecx, cx
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 1]
add cx, ax
movsx eax, cx
movzx ecx, byte [esi + 2]
movsx ecx, cx
movd xmm2, eax
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 3]
cvtdq2ps xmm2, xmm2
add cx, ax
movsx eax, cx
movzx ecx, byte [esi + 4]
movsx ecx, cx
mulss xmm2, xmm4
movd xmm3, eax
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 5]
cvtdq2ps xmm3, xmm3
add cx, ax
movsx eax, cx
movss dword [esp + 0x1c], xmm2
movzx ecx, byte [esi + 6]
movsx ecx, cx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 7]
mulss xmm0, xmm4
mulss xmm3, xmm4
add cx, ax
add esi, 8
movsx eax, cx
movss dword [esp + 0x20], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm4
movss dword [esp + 0x14], xmm0
jmp 0x468628
movss xmm0, dword [esp + 0x64]
movss xmm3, dword [esp + 0x5c]
movss xmm2, dword [esp + 0x58]
movss dword [esp + 0x14], xmm0
movss xmm0, dword [esp + 0x60]
movss dword [esp + 0x20], xmm0
movss dword [esp + 0x1c], xmm2
movaps xmm1, xmm3
movss dword [esp + 0x10], xmm3
movaps xmm0, xmm2
mulss xmm1, xmm3
mulss xmm0, xmm2
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x468652
sqrtsd xmm0, xmm0
jmp 0x468657
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
movss xmm1, dword [esp + 0x14]
cvtsd2ss xmm0, xmm0
mulss xmm1, xmm1
movss dword [esp + 0x24], xmm0
movss xmm0, dword [esp + 0x20]
mulss xmm0, xmm0
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x46868b
sqrtsd xmm0, xmm0
jmp 0x468690
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
movzx edx, byte [esp + 0xf]
lea eax, [esp + 0x70]
mov ecx, dword [esp + 0x28]
cvtsd2ss xmm0, xmm0
push eax
movzx eax, byte [esp + 0x3b]
shl edx, 8
add edx, eax
movss dword [esp + 0x4c], xmm0
call fcn.00469d80
add esp, 4
mov dword [esp + 0x40], eax
test eax, eax
jle 0x46888c
movss xmm4, dword [esp + 0x14]
xor edx, edx
movss xmm5, dword [esp + 0x1c]
mov ebx, eax
movss xmm6, dword [esp + 0x20]
movss xmm7, dword [esp + 0x10]
mov ecx, dword [esp + 0x70]
xorps xmm3, xmm3
xorps xmm2, xmm2
movsx eax, word [ecx + edx + 2]
cvtsi2ss xmm3, eax
movsx eax, word [ecx + edx]
cvtsi2ss xmm2, eax
movaps xmm0, xmm3
mulss xmm3, xmm4
movaps xmm1, xmm2
mulss xmm0, xmm6
mulss xmm1, xmm5
mulss xmm2, xmm7
addss xmm1, xmm0
addss xmm2, xmm3
xorps xmm3, xmm3
addss xmm1, dword [esp + 0x44]
addss xmm2, dword [esp + 0x30]
mulss xmm1, dword [esp + 0x24]
mulss xmm2, dword [esp + 0x48]
cvttss2si eax, xmm1
mov word [ecx + edx], ax
cvttss2si eax, xmm2
xorps xmm2, xmm2
mov word [ecx + edx + 2], ax
movsx eax, word [ecx + edx + 6]
cvtsi2ss xmm3, eax
movsx eax, word [ecx + edx + 4]
cvtsi2ss xmm2, eax
movaps xmm0, xmm3
mulss xmm3, xmm4
movaps xmm1, xmm2
mulss xmm0, xmm6
mulss xmm1, xmm5
mulss xmm2, xmm7
addss xmm1, xmm0
addss xmm2, xmm3
addss xmm1, dword [esp + 0x44]
addss xmm2, dword [esp + 0x30]
mulss xmm1, dword [esp + 0x24]
mulss xmm2, dword [esp + 0x48]
cvttss2si eax, xmm1
mov word [ecx + edx + 4], ax
cvttss2si eax, xmm2
mov word [ecx + edx + 6], ax
add edx, 0xe
sub ebx, 1
jne 0x4686e2
mov eax, dword [0x6d4050]
mov ebx, dword [esp + 0x2c]
test eax, eax
je 0x4687c3
inc dword [eax + 0x374]
mov ecx, dword [esp + 0x40]
push dword [0x6d4048]
add ecx, ebx
mov dword [esp + 0x50], ecx
lea eax, [ecx*8]
sub eax, ecx
add eax, eax
push eax
call fcn.004490d0
add esp, 8
mov dword [esp + 0x50], eax
test eax, eax
je 0x46889c
test ebx, ebx
jle 0x46880d
lea ecx, [ebx*8]
sub ecx, ebx
add ecx, ecx
push ecx
push edi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov ecx, dword [esp + 0x40]
lea eax, [ecx*8]
sub eax, ecx
add eax, eax
push eax
push dword [esp + 0x74]
lea eax, [ebx*8]
sub eax, ebx
mov ebx, dword [esp + 0x58]
lea eax, [ebx + eax*2]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
test edi, edi
je 0x46885c
mov eax, dword [0x6d4050]
test eax, eax
je 0x46884d
dec dword [eax + 0x374]
push dword [0x6d4048]
push edi
call fcn.004490f0
add esp, 8
mov ecx, dword [esp + 0x70]
mov edi, ebx
test ecx, ecx
je 0x468875
mov eax, dword [0x6d4050]
test eax, eax
je 0x468875
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
mov ebx, dword [esp + 0x54]
add esp, 8
mov dword [esp + 0x2c], ebx
test byte [esp + 0x18], 0x20
je 0x4683ae
jmp 0x4683db
test edi, edi
je 0x4688be
mov eax, dword [0x6d4050]
test eax, eax
je 0x4688af
dec dword [eax + 0x374]
push dword [0x6d4048]
push edi
call fcn.004490f0
add esp, 8
mov ecx, dword [esp + 0x70]
test ecx, ecx
je 0x4688e4
mov eax, dword [0x6d4050]
test eax, eax
je 0x4688d5
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov ecx, dword [esp + 0x74]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.005f7bd4
mov esp, ebp
pop ebp
ret