Function at 0x10036100
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x6c
mov eax, dword [0x1004f014]
xor eax, esp
mov dword [esp + 0x68], eax
mov eax, ecx
mov ecx, dword [ebp + 8]
push ebx
push esi
mov dword [esp + 0x50], ecx
xor ebx, ebx
mov esi, dword [eax + 4]
mov ecx, eax
push edi
mov dword [esp + 0x10], esi
xor esi, esi
mov dword [esp + 0x50], eax
call fcn.10035de0
mov edi, eax
mov eax, dword [esp + 0x54]
mov dword [eax], ebx
test edi, edi
js 0x10036ad2
mov edx, dword [esp + 0x10]
mov eax, 0x100
cwde
movzx ecx, byte [edi + edx]
movsx ecx, cx
imul ecx, eax
movzx eax, byte [edi + edx + 1]
add cx, ax
movzx eax, cx
mov dword [esp + 0x14], eax
test ax, ax
jle 0x100365f8
cwde
lea esi, [edi + 0xc]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x40], ebx
lea ebx, [edx + 0xa]
add edx, 0xa
inc dword [0x1004f6c0]
lea ecx, [edi + eax*2]
add ebx, edi
add ecx, edx
mov dword [esp + 0x44], ebx
lea edx, [eax + eax]
movzx edi, byte [edx + ebx - 1]
movzx eax, byte [ecx]
movzx ecx, byte [ecx + 1]
shl eax, 8
add eax, dword [esp + 0x10]
add ecx, eax
add ecx, edx
add esi, ecx
movzx ecx, byte [edx + ebx - 2]
shl ecx, 8
inc ecx
add edi, ecx
mov dword [esp + 0x28], edi
lea ecx, [edx + edi]
lea eax, [ecx*8]
sub eax, ecx
add eax, eax
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ebx, eax
add esp, 4
mov dword [esp + 0x24], ebx
test ebx, ebx
je 0x10036ad2
xor dl, dl
mov dword [esp + 0x48], 0
test edi, edi
je 0x100365a2
mov ecx, dword [esp + 0x14]
movsx eax, cx
lea edi, [eax*8]
sub edi, eax
mov eax, dword [esp + 0x28]
add edi, 3
mov dword [esp + 0x10], eax
lea edi, [ebx + edi*4]
mov bl, dl
test dl, dl
jne 0x10036238
mov bl, byte [esi]
mov cl, bl
and cl, 8
je 0x10036228
mov dl, byte [esi + 1]
xor eax, eax
test cl, cl
setne al
inc eax
add esi, eax
mov eax, dword [esp + 0x10]
jmp 0x1003623a
dec dl
mov byte [edi], bl
add edi, 0xe
sub eax, 1
mov dword [esp + 0x10], eax
jne 0x10036218
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x24]
movsx ecx, ax
lea eax, [ecx*8]
sub eax, ecx
xor edi, edi
lea eax, [ebx + eax*4]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x28]
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x10], eax
mov dl, byte [ebx + 0xc]
and dl, 0x10
test byte [ebx + 0xc], 2
je 0x10036290
mov al, byte [esi]
inc esi
movzx ecx, al
mov eax, ecx
neg eax
test dl, dl
cmove ecx, eax
add edi, ecx
jmp 0x100362b2
test dl, dl
jne 0x100362b2
movzx ecx, byte [esi]
mov eax, 0x100
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + 1]
add cx, ax
movsx eax, cx
add edi, eax
add esi, 2
mov word [ebx], di
add ebx, 0xe
sub dword [esp + 0x10], 1
jne 0x10036271
mov eax, dword [esp + 0x14]
movsx ecx, ax
lea eax, [ecx*8]
sub eax, ecx
lea eax, [eax*4 + 2]
add eax, dword [esp + 0x24]
xor edi, edi
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x28]
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x10], eax
nop dword [eax]
mov dl, byte [ebx + 0xa]
and dl, 0x20
test byte [ebx + 0xa], 4
je 0x1003630f
mov al, byte [esi]
inc esi
movzx ecx, al
mov eax, ecx
neg eax
test dl, dl
cmove ecx, eax
add edi, ecx
jmp 0x10036331
test dl, dl
jne 0x10036331
movzx ecx, byte [esi]
mov eax, 0x100
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + 1]
add cx, ax
movsx eax, cx
add edi, eax
add esi, 2
mov word [ebx], di
add ebx, 0xe
sub dword [esp + 0x10], 1
jne 0x100362f0
mov eax, dword [esp + 0x14]
xor edx, edx
mov ebx, dword [esp + 0x24]
xor edi, edi
movsx ecx, ax
mov dword [esp + 0x2c], edx
mov dword [esp + 0x10], edx
mov dword [esp + 0x38], edx
lea eax, [ecx*8]
mov dword [esp + 0x3c], edx
sub eax, ecx
lea esi, [ebx + eax*4]
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x70], eax
mov dword [esp + 0x34], ecx
mov cl, byte [esi + 0xc]
mov byte [esp + 0xf], cl
movzx ecx, word [esi]
mov dword [esp + 0x14], ecx
movzx ecx, word [esi + 2]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x34]
cmp dword [esp + 0x48], ecx
jne 0x1003646f
test ecx, ecx
je 0x100363c3
push dword [esp + 0x38]
mov ecx, ebx
push dword [esp + 0x40]
push dword [esp + 0x34]
push dword [esp + 0x1c]
push edi
push eax
push dword [esp + 0x58]
push dword [esp + 0x38]
call fcn.10036030
add esp, 0x20
mov edx, eax
movzx eax, byte [esp + 0xf]
mov ecx, dword [esp + 0x14]
not eax
mov edi, dword [esp + 0x18]
and eax, 1
mov dword [esp + 0x40], eax
je 0x10036424
test byte [esi + 0x1a], 1
movsx eax, cx
movsx ecx, di
movsx edi, word [esi + 0x10]
mov dword [esp + 0x2c], ecx
lea ecx, [esi + 0xe]
mov dword [esp + 0x20], ecx
movsx ecx, word [ecx]
mov dword [esp + 0x10], eax
mov dword [esp + 0x70], ecx
jne 0x1003641a
add ecx, eax
sar ecx, 1
mov dword [esp + 0x70], ecx
mov ecx, dword [esp + 0x18]
movsx eax, cx
mov ecx, dword [esp + 0x70]
add edi, eax
sar edi, 1
jmp 0x1003642e
inc dword [esp + 0x34]
mov esi, dword [esp + 0x20]
jmp 0x1003642e
movsx ecx, cx
mov dword [esp + 0x70], ecx
movsx edi, di
lea eax, [edx*8]
sub eax, edx
inc edx
mov word [ebx + eax*2], cx
xor ecx, ecx
mov dword [ebx + eax*2 + 4], ecx
mov byte [ebx + eax*2 + 0xc], 1
mov word [ebx + eax*2 + 2], di
mov eax, dword [esp + 0x44]
mov dword [esp + 0x1c], ecx
movzx ecx, byte [eax]
movzx eax, byte [eax + 1]
shl ecx, 8
inc eax
add eax, ecx
add dword [esp + 0x44], 2
mov dword [esp + 0x48], eax
jmp 0x10036586
test byte [esp + 0xf], 1
jne 0x100364f4
cmp dword [esp + 0x1c], 0
je 0x100364d1
lea ecx, [edx*8]
sub ecx, edx
mov dword [esp + 0x1c], ecx
mov byte [ebx + ecx*2 + 0xc], 3
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x24]
movsx eax, cx
add eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x1c]
sar eax, 1
mov word [ebx + ecx*2], ax
mov ecx, dword [esp + 0x18]
movsx eax, cx
add eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x1c]
sar eax, 1
inc edx
mov word [ebx + ecx*2 + 2], ax
mov eax, dword [esp + 0x3c]
mov word [ebx + ecx*2 + 4], ax
mov eax, dword [esp + 0x38]
mov word [ebx + ecx*2 + 6], ax
mov ecx, dword [esp + 0x14]
movsx eax, cx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x3c], eax
movsx eax, cx
mov dword [esp + 0x38], eax
mov dword [esp + 0x1c], 1
jmp 0x10036586
lea eax, [edx*8]
sub eax, edx
inc edx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x14]
movzx eax, ax
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x18]
movzx eax, ax
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x10036538
mov ecx, dword [esp + 0x38]
movzx ecx, cx
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x3c]
movzx ecx, cx
mov dword [esp + 0x14], ecx
jmp 0x10036548
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov ecx, dword [esp + 0x20]
test eax, eax
mov dword [esp + 0x1c], 0
setne al
add al, 2
mov byte [ebx + ecx*2 + 0xc], al
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x50]
mov word [ebx + eax*2], cx
mov ecx, dword [esp + 0x4c]
mov word [ebx + eax*2 + 2], cx
mov ecx, dword [esp + 0x14]
mov word [ebx + eax*2 + 4], cx
mov ecx, dword [esp + 0x18]
mov word [ebx + eax*2 + 6], cx
mov ecx, dword [esp + 0x34]
add esi, 0xe
mov eax, dword [esp + 0x70]
inc ecx
mov dword [esp + 0x34], ecx
cmp ecx, dword [esp + 0x28]
jl 0x10036375
jmp 0x100365b8
xor edx, edx
xor edi, edi
mov dword [esp + 0x2c], edx
xor eax, eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], edx
push dword [esp + 0x38]
mov ecx, ebx
push dword [esp + 0x40]
push dword [esp + 0x34]
push dword [esp + 0x1c]
push edi
push eax
push dword [esp + 0x58]
push dword [esp + 0x38]
call fcn.10036030
add esp, 0x20
mov esi, eax
mov eax, dword [esp + 0x54]
mov dword [eax], ebx
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.10044190
mov esp, ebp
pop ebp
ret
cmp ax, 0xffff
jne 0x100365de
add edi, 0xa
xor esi, esi
add edi, edx
mov dword [esp + 0x40], esi
xor ebx, ebx
mov al, byte [edi + 2]
xorps xmm1, xmm1
movzx edx, byte [edi + 1]
movaps xmm0, xmmword [0x1004d0b0]
movss xmm4, dword [0x1004cad4]
mov byte [esp + 0xf], al
mov al, byte [edi + 3]
add edi, 4
mov dword [esp + 0x70], 0
mov dword [esp + 0x1c], edx
mov byte [esp + 0x33], al
movss dword [esp + 0x28], xmm1
movss dword [esp + 0x18], xmm1
movups xmmword [esp + 0x58], xmm0
test dl, 2
je 0x100366d2
mov al, byte [edi]
lea ecx, [edi + 1]
mov dword [esp + 0x4c], ecx
test dl, 1
je 0x100366ad
mov dl, byte [edi + 2]
lea esi, [edi + 3]
movzx ecx, al
add edi, 4
movsx ecx, cx
mov eax, 0x100
cwde
imul ecx, eax
mov eax, dword [esp + 0x4c]
movzx eax, byte [eax]
add cx, ax
movsx eax, cx
movzx ecx, dl
mov edx, dword [esp + 0x1c]
movsx ecx, cx
movd xmm0, eax
mov eax, 0x100
cwde
imul ecx, eax
movzx eax, byte [esi]
mov esi, dword [esp + 0x40]
add cx, ax
movsx eax, cx
jmp 0x100366bc
mov edi, ecx
movsx eax, al
mov cl, byte [edi]
inc edi
movd xmm0, eax
movsx eax, cl
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x28], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x18], xmm0
test dl, 8
je 0x10036715
movzx ecx, byte [edi]
mov eax, 0x100
cwde
xorps xmm3, xmm3
movsx ecx, cx
imul ecx, eax
movzx eax, byte [edi + 1]
movss dword [esp + 0x24], xmm1
add cx, ax
add edi, 2
movsx eax, cx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm4
movss dword [esp + 0x14], xmm0
movaps xmm2, xmm0
jmp 0x10036848
test dl, 0x40
je 0x10036779
movzx ecx, byte [edi]
mov edx, 0x100
movsx ecx, cx
xorps xmm3, xmm3
movsx eax, dx
imul ecx, eax
movzx eax, byte [edi + 1]
movss dword [esp + 0x24], xmm1
add cx, ax
movsx eax, cx
movzx ecx, byte [edi + 2]
movsx ecx, cx
movd xmm2, eax
movsx eax, dx
imul ecx, eax
movzx eax, byte [edi + 3]
cvtdq2ps xmm2, xmm2
add cx, ax
add edi, 4
movsx eax, cx
mulss xmm2, xmm4
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm4
movss dword [esp + 0x14], xmm0
jmp 0x10036848
test dl, dl
jns 0x10036824
movzx ecx, byte [edi]
mov edx, 0x100
movsx ecx, cx
movsx eax, dx
imul ecx, eax
movzx eax, byte [edi + 1]
add cx, ax
movsx eax, cx
movzx ecx, byte [edi + 2]
movsx ecx, cx
movd xmm2, eax
movsx eax, dx
imul ecx, eax
movzx eax, byte [edi + 3]
cvtdq2ps xmm2, xmm2
add cx, ax
movsx eax, cx
movzx ecx, byte [edi + 4]
movsx ecx, cx
mulss xmm2, xmm4
movd xmm3, eax
movsx eax, dx
imul ecx, eax
movzx eax, byte [edi + 5]
cvtdq2ps xmm3, xmm3
add cx, ax
movsx eax, cx
movss dword [esp + 0x10], xmm2
movzx ecx, byte [edi + 6]
movsx ecx, cx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movsx eax, dx
imul ecx, eax
movzx eax, byte [edi + 7]
mulss xmm0, xmm4
mulss xmm3, xmm4
add cx, ax
add edi, 8
movsx eax, cx
movss dword [esp + 0x24], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm4
movss dword [esp + 0x14], xmm0
jmp 0x1003684e
movss xmm0, dword [esp + 0x64]
movss xmm3, dword [esp + 0x5c]
movss xmm2, dword [esp + 0x58]
movss dword [esp + 0x14], xmm0
movss xmm0, dword [esp + 0x60]
movss dword [esp + 0x24], xmm0
movss dword [esp + 0x10], xmm2
movaps xmm1, xmm3
movss dword [esp + 0x2c], xmm3
movaps xmm0, xmm2
mulss xmm1, xmm3
mulss xmm0, xmm2
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x10036878
sqrtsd xmm0, xmm0
jmp 0x1003687d
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
movss xmm1, dword [esp + 0x14]
cvtsd2ss xmm0, xmm0
mulss xmm1, xmm1
movss dword [esp + 0x20], xmm0
movss xmm0, dword [esp + 0x24]
mulss xmm0, xmm0
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x100368b1
sqrtsd xmm0, xmm0
jmp 0x100368b6
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
movzx edx, byte [esp + 0xf]
lea eax, [esp + 0x70]
mov ecx, dword [esp + 0x50]
cvtsd2ss xmm0, xmm0
push eax
movzx eax, byte [esp + 0x37]
shl edx, 8
add edx, eax
movss dword [esp + 0x4c], xmm0
call fcn.10037f70
add esp, 4
mov dword [esp + 0x44], eax
test eax, eax
jle 0x10036a90
movss xmm4, dword [esp + 0x14]
xor edx, edx
movss xmm5, dword [esp + 0x10]
mov esi, eax
movss xmm6, dword [esp + 0x24]
movss xmm7, dword [esp + 0x2c]
nop dword [eax + eax]
mov ecx, dword [esp + 0x70]
xorps xmm3, xmm3
xorps xmm2, xmm2
movsx eax, word [edx + ecx + 2]
cvtsi2ss xmm3, eax
movsx eax, word [edx + ecx]
cvtsi2ss xmm2, eax
movaps xmm0, xmm3
mulss xmm3, xmm4
movaps xmm1, xmm2
mulss xmm0, xmm6
mulss xmm1, xmm5
mulss xmm2, xmm7
addss xmm1, xmm0
addss xmm2, xmm3
xorps xmm3, xmm3
addss xmm1, dword [esp + 0x28]
addss xmm2, dword [esp + 0x18]
mulss xmm1, dword [esp + 0x20]
mulss xmm2, dword [esp + 0x48]
cvttss2si eax, xmm1
mov word [edx + ecx], ax
cvttss2si eax, xmm2
xorps xmm2, xmm2
mov word [edx + ecx + 2], ax
movsx eax, word [edx + ecx + 6]
cvtsi2ss xmm3, eax
movsx eax, word [edx + ecx + 4]
cvtsi2ss xmm2, eax
movaps xmm0, xmm3
mulss xmm3, xmm4
movaps xmm1, xmm2
mulss xmm0, xmm6
mulss xmm1, xmm5
mulss xmm2, xmm7
addss xmm1, xmm0
addss xmm2, xmm3
addss xmm1, dword [esp + 0x28]
addss xmm2, dword [esp + 0x18]
mulss xmm1, dword [esp + 0x20]
mulss xmm2, dword [esp + 0x48]
cvttss2si eax, xmm1
mov word [edx + ecx + 4], ax
cvttss2si eax, xmm2
mov word [edx + ecx + 6], ax
add edx, 0xe
sub esi, 1
jne 0x10036910
mov ecx, dword [esp + 0x44]
mov esi, dword [esp + 0x40]
add ecx, esi
inc dword [0x1004f6c0]
mov dword [esp + 0x20], ecx
lea eax, [ecx*8]
sub eax, ecx
add eax, eax
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov dword [esp + 0x4c], eax
test eax, eax
je 0x10036aa0
test esi, esi
jle 0x10036a2d
lea ecx, [esi*8]
sub ecx, esi
add ecx, ecx
push ecx
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov ecx, dword [esp + 0x44]
lea eax, [ecx*8]
sub eax, ecx
add eax, eax
push eax
push dword [esp + 0x74]
lea eax, [esi*8]
sub eax, esi
mov esi, dword [esp + 0x54]
lea eax, [esi + eax*2]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
test ebx, ebx
je 0x10036a6e
dec dword [0x1004f6c0]
push ebx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov eax, dword [esp + 0x70]
mov ebx, esi
test eax, eax
je 0x10036a7e
dec dword [0x1004f6c0]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov esi, dword [esp + 0x24]
add esp, 4
mov dword [esp + 0x40], esi
test byte [esp + 0x1c], 0x20
je 0x100365de
jmp 0x1003660b
test ebx, ebx
je 0x10036ab8
dec dword [0x1004f6c0]
push ebx
mov ebx, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call ebx
add esp, 4
jmp 0x10036abe
mov ebx, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, dword [esp + 0x70]
test eax, eax
je 0x10036ad2
dec dword [0x1004f6c0]
push eax
call ebx
add esp, 4
mov ecx, dword [esp + 0x74]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.10044190
mov esp, ebp
pop ebp
ret