Function at 0x10156fd0
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x28
mov eax, dword [0x101df584]
xor eax, esp
mov dword [esp + 0x24], eax
push ebx
mov ebx, dword [esp + 0x30]
push ebp
push esi
mov esi, ecx
mov dword [esp + 0xc], ebx
mov eax, esi
mov ecx, 4
push edi
sub eax, dword [esi]
cmp cx, word [eax]
jae 0x1015702e
movzx eax, word [eax + 4]
lea ecx, [esi + eax]
test ax, ax
je 0x1015702e
mov edi, dword [ecx]
add edi, ecx
je 0x1015702e
push dword [edi]
mov ecx, ebx
call fcn.100418b0
xor edx, edx
cmp dword [edi], edx
jbe 0x1015702e
nop dword [eax + eax]
mov ecx, dword [ebx]
mov eax, dword [edi + edx*4 + 4]
mov dword [ecx + edx*4], eax
inc edx
cmp edx, dword [edi]
jb 0x10157020
mov eax, esi
mov ecx, 6
sub eax, dword [esi]
cmp cx, word [eax]
jae 0x1015704a
movzx eax, word [eax + 6]
test ax, ax
je 0x1015704a
mov al, byte [eax + esi]
jmp 0x1015704c
xor al, al
movsx eax, al
mov ecx, 8
mov dword [ebx + 0xc], eax
mov eax, esi
sub eax, dword [esi]
cmp cx, word [eax]
jae 0x1015706e
movzx eax, word [eax + 8]
test ax, ax
je 0x1015706e
mov eax, dword [eax + esi]
jmp 0x10157073
mov eax, 1
mov dword [ebx + 0x10], eax
mov ecx, 0xa
mov eax, esi
sub eax, dword [esi]
cmp cx, word [eax]
jae 0x101570ff
movzx eax, word [eax + 0xa]
lea ecx, [esi + eax]
test ax, ax
je 0x101570ff
mov edi, dword [ecx]
add edi, ecx
je 0x101570ff
mov eax, dword [ebx + 0x18]
mov ecx, eax
mov edx, dword [ebx + 0x14]
sub ecx, edx
mov ebp, dword [edi]
mov dword [esp + 0x18], eax
cmp ebp, ecx
jae 0x101570af
lea eax, [edx + ebp]
jmp 0x101570e1
jbe 0x101570e4
mov eax, dword [ebx + 0x1c]
sub eax, edx
cmp ebp, eax
jbe 0x101570ca
lea eax, [esp + 0x17]
push eax
push ebp
lea ecx, [ebx + 0x14]
call fcn.1014f7b0
jmp 0x101570e4
sub ebp, ecx
push ebp
push 0
push dword [esp + 0x20]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [esp + 0x24]
add esp, 0xc
add eax, ebp
mov dword [ebx + 0x18], eax
xor edx, edx
cmp dword [edi], edx
jbe 0x101570ff
nop word [eax + eax]
mov ecx, dword [ebx + 0x14]
mov al, byte [edi + edx + 4]
mov byte [edx + ecx], al
inc edx
cmp edx, dword [edi]
jb 0x101570f0
mov eax, esi
mov ecx, 0xc
sub eax, dword [esi]
cmp cx, word [eax]
jae 0x10157182
movzx eax, word [eax + 0xc]
lea ecx, [esi + eax]
test ax, ax
je 0x10157182
mov edi, dword [ecx]
add edi, ecx
je 0x10157182
mov eax, dword [ebx + 0x24]
mov ecx, eax
mov edx, dword [ebx + 0x20]
sub ecx, edx
mov ebp, dword [edi]
mov dword [esp + 0x18], eax
cmp ebp, ecx
jae 0x10157138
lea eax, [edx + ebp]
jmp 0x1015716a
jbe 0x1015716d
mov eax, dword [ebx + 0x28]
sub eax, edx
cmp ebp, eax
jbe 0x10157153
lea eax, [esp + 0x17]
push eax
push ebp
lea ecx, [ebx + 0x20]
call fcn.1014f7b0
jmp 0x1015716d
sub ebp, ecx
push ebp
push 0
push dword [esp + 0x20]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [esp + 0x24]
add esp, 0xc
add eax, ebp
mov dword [ebx + 0x24], eax
xor edx, edx
cmp dword [edi], edx
jbe 0x10157182
mov ecx, dword [ebx + 0x20]
mov al, byte [edi + edx + 4]
mov byte [edx + ecx], al
inc edx
cmp edx, dword [edi]
jb 0x10157173
mov ebp, dword [esp + 0x10]
mov eax, esi
sub eax, dword [esi]
mov ecx, 0xe
cmp cx, word [eax]
jae 0x101571c5
movzx eax, word [eax + 0xe]
lea ecx, [esi + eax]
test ax, ax
je 0x101571c5
mov edi, dword [ecx]
add edi, ecx
je 0x101571c5
push dword [edi]
lea ecx, [ebp + 0x2c]
call fcn.100418b0
xor edx, edx
cmp dword [edi], edx
jbe 0x101571c5
mov ecx, dword [ebp + 0x2c]
mov eax, dword [edi + edx*4 + 4]
mov dword [ecx + edx*4], eax
inc edx
cmp edx, dword [edi]
jb 0x101571b6
mov eax, esi
mov ecx, 0x10
sub eax, dword [esi]
cmp cx, word [eax]
jae 0x10157267
movzx eax, word [eax + 0x10]
lea ecx, [esi + eax]
test ax, ax
je 0x10157267
mov ebx, dword [ecx]
add ebx, ecx
je 0x10157267
mov eax, dword [ebp + 0x3c]
mov ecx, eax
mov edx, dword [ebp + 0x38]
sub ecx, edx
mov edi, dword [ebx]
sar ecx, 3
mov dword [esp + 0x18], eax
cmp edi, ecx
jae 0x10157209
lea eax, [edx + edi*8]
jmp 0x10157241
jbe 0x10157244
mov eax, dword [ebp + 0x40]
sub eax, edx
sar eax, 3
cmp edi, eax
jbe 0x10157227
lea eax, [esp + 0x17]
push eax
push edi
lea ecx, [ebp + 0x38]
call fcn.101502d0
jmp 0x10157244
sub edi, ecx
shl edi, 3
push edi
push 0
push dword [esp + 0x20]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [esp + 0x24]
add esp, 0xc
add eax, edi
mov dword [ebp + 0x3c], eax
xor edi, edi
cmp dword [ebx], edi
jbe 0x10157267
nop word [eax + eax]
mov eax, dword [ebp + 0x38]
mov ecx, dword [ebx + edi*8 + 4]
mov edx, dword [ebx + edi*8 + 8]
mov dword [eax + edi*8], ecx
mov dword [eax + edi*8 + 4], edx
inc edi
cmp edi, dword [ebx]
jb 0x10157250
mov ebp, dword [esp + 0x10]
mov eax, esi
sub eax, dword [esi]
mov ecx, 0x12
cmp cx, word [eax]
jae 0x101572b0
movzx eax, word [eax + 0x12]
lea ecx, [esi + eax]
test ax, ax
je 0x101572b0
mov ebx, dword [ecx]
add ebx, ecx
je 0x101572b0
push dword [ebx]
lea ecx, [ebp + 0x44]
call fcn.100a9900
xor edi, edi
cmp dword [ebx], edi
jbe 0x101572b0
mov ecx, dword [ebp + 0x44]
lea edx, [ebx + 4]
mov eax, dword [edx]
lea edx, [edx + 4]
mov dword [ecx], eax
lea ecx, [ecx + 4]
inc edi
cmp edi, dword [ebx]
jb 0x101572a1
mov eax, esi
mov ecx, 0x14
sub eax, dword [esi]
cmp cx, word [eax]
jae 0x101573a3
movzx eax, word [eax + 0x14]
lea ecx, [esi + eax]
test ax, ax
je 0x101573a3
mov ebx, dword [ecx]
add ebx, ecx
mov dword [esp + 0x18], ebx
je 0x101573a3
push dword [ebx]
lea esi, [ebp + 0x50]
mov ecx, esi
mov dword [esp + 0x14], esi
call fcn.10162160
xor edi, edi
cmp dword [ebx], edi
jbe 0x101573a3
xor ebp, ebp
add ebx, 4
nop
mov eax, dword [ebx]
lea ecx, [esp + 0x1c]
add eax, ebx
mov dword [esp + 0x2c], 0
xorps xmm0, xmm0
mov dword [esp + 0x30], 0
movups xmmword [esp + 0x1c], xmm0
push dword [eax]
add eax, 4
push eax
call fcn.10001380
mov esi, dword [esi]
lea eax, [esp + 0x1c]
add esi, ebp
cmp esi, eax
je 0x10157353
mov ecx, esi
call fcn.10001690
movups xmm0, xmmword [esp + 0x1c]
movups xmmword [esi], xmm0
movq xmm0, qword [esp + 0x2c]
movq qword [esi + 0x10], xmm0
jmp 0x10157385
mov ecx, dword [esp + 0x30]
cmp ecx, 0x10
jb 0x10157385
mov edx, dword [esp + 0x1c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1015737b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1015739d
push ecx
push edx
call fcn.10196271
add esp, 8
mov eax, dword [esp + 0x18]
inc edi
add ebx, 4
add ebp, 0x18
cmp edi, dword [eax]
jae 0x101573a3
mov esi, dword [esp + 0x10]
jmp 0x10157300
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov ecx, dword [esp + 0x34]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.1019627f
add esp, 0x28
ret 8