Function at 0x1001a830
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x60
push esi
push edi
mov edi, dword [ecx + 4]
xor esi, esi
mov dword [esp + 0x4c], ecx
call fcn.1001a6a0
mov edx, eax
mov eax, dword [ebp + 8]
mov dword [eax], esi
test edx, edx
js 0x1001b275
movzx ecx, byte [edx + edi]
mov eax, pe_nt_image_headers32
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [edx + edi + 1]
add cx, ax
movzx eax, cx
test ax, ax
jle 0x1001ad3a
add edi, 0xa
cwde
add edi, edx
mov dword [esp + 0x10], esi
mov dword [esp + 0x34], edi
mov edi, dword [esp + 0x4c]
lea ecx, [edx + eax*2]
mov dword [esp + 0x40], esi
add eax, eax
mov byte [esp + 0xa], 0
mov dword [esp + 0x18], eax
mov esi, dword [edi + 4]
mov edi, dword [esp + 0x34]
movzx eax, byte [ecx + esi + 0xa]
movzx ecx, byte [ecx + esi + 0xb]
shl eax, 8
add ecx, 0xc
add esi, eax
mov eax, dword [esp + 0x18]
add esi, ecx
add esi, eax
add esi, edx
movzx ecx, byte [eax + edi - 2]
movzx eax, byte [eax + edi - 1]
mov edi, dword [esp + 0x18]
inc eax
shl ecx, 8
add eax, ecx
mov dword [esp + 0x30], eax
lea ecx, [edi + eax]
mov eax, dword [0x1003fc00]
test eax, eax
je 0x1001a8ed
inc dword [eax + 0x370]
lea eax, [ecx*8]
sub eax, ecx
add eax, eax
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edx, eax
add esp, 4
mov dword [esp + 0xc], edx
test edx, edx
je 0x1001b275
lea eax, [edi*8]
mov dword [esp + 0x44], 0
sub eax, edi
xor cl, cl
add eax, eax
cmp dword [esp + 0x30], 0
mov dword [esp + 0x4c], eax
jbe 0x1001aced
lea edi, [eax + 0xc]
mov eax, dword [esp + 0x30]
add edi, edx
mov dword [esp + 0x3c], eax
mov dl, byte [esp + 0xa]
test cl, cl
jne 0x1001a965
mov dl, byte [esi]
mov ch, dl
and ch, 8
je 0x1001a955
mov cl, byte [esi + 1]
xor eax, eax
test ch, ch
setne al
inc eax
add esi, eax
mov eax, dword [esp + 0x3c]
jmp 0x1001a967
dec cl
mov byte [edi], dl
add edi, 0xe
sub eax, 1
mov dword [esp + 0x3c], eax
jne 0x1001a945
mov eax, dword [esp + 0x4c]
xor edi, edi
add eax, dword [esp + 0xc]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x3c], eax
nop
mov cl, byte [edx + 0xc]
and cl, 0x10
test byte [edx + 0xc], 2
mov byte [esp + 0xa], cl
je 0x1001a9b6
mov al, byte [esi]
inc esi
movzx ecx, al
mov eax, ecx
neg eax
cmp byte [esp + 0xa], 0
cmove ecx, eax
add edi, ecx
jmp 0x1001a9d8
test cl, cl
jne 0x1001a9d8
movzx ecx, byte [esi]
mov eax, pe_nt_image_headers32
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + 1]
add cx, ax
movsx eax, cx
add edi, eax
add esi, 2
mov word [edx], di
add edx, 0xe
sub dword [esp + 0x3c], 1
jne 0x1001a990
mov ecx, dword [esp + 0x18]
xor edi, edi
mov edx, dword [esp + 0xc]
lea eax, [ecx*8]
sub eax, ecx
mov ecx, dword [esp + 0x30]
add edx, 2
mov dword [esp + 0x38], ecx
lea eax, [edx + eax*2]
mov dword [esp + 0x3c], eax
nop word [eax + eax]
mov dl, byte [eax + 0xa]
and dl, 0x20
test byte [eax + 0xa], 4
je 0x1001aa2f
mov al, byte [esi]
inc esi
movzx ecx, al
mov eax, ecx
neg eax
test dl, dl
cmove ecx, eax
add edi, ecx
jmp 0x1001aa51
test dl, dl
jne 0x1001aa51
movzx ecx, byte [esi]
mov eax, pe_nt_image_headers32
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + 1]
add cx, ax
movsx eax, cx
add edi, eax
add esi, 2
mov eax, dword [esp + 0x3c]
mov word [eax], di
add eax, 0xe
sub dword [esp + 0x38], 1
mov dword [esp + 0x3c], eax
jne 0x1001aa10
mov esi, dword [esp + 0x18]
xor eax, eax
xor edx, edx
mov dword [esp + 0x1c], eax
xor ecx, ecx
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], edx
lea eax, [esi*8]
mov dword [esp + 0x24], edx
sub eax, esi
mov dword [esp + 0x28], edx
mov esi, dword [esp + 0xc]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x2c], ecx
lea edi, [esi + eax*2]
nop dword [eax]
mov al, byte [edi + 0xc]
mov byte [esp + 0xa], al
movzx eax, word [edi]
mov dword [esp + 0x18], eax
movzx eax, word [edi + 2]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x1c]
cmp dword [esp + 0x44], eax
jne 0x1001abb9
test eax, eax
je 0x1001aaf1
push dword [esp + 0x24]
push dword [esp + 0x2c]
push dword [esp + 0x40]
push dword [esp + 0x48]
push ecx
push dword [esp + 0x40]
mov ecx, esi
push dword [esp + 0x58]
push dword [esp + 0x2c]
call fcn.1001a760
add esp, 0x20
mov edx, eax
movzx eax, byte [esp + 0xa]
mov ecx, dword [esp + 0x18]
not eax
and eax, 1
mov dword [esp + 0x40], eax
movsx eax, cx
je 0x1001ab61
test byte [edi + 0x1a], 1
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x14]
movsx ecx, ax
lea eax, [edi + 0xe]
mov dword [esp + 0x38], ecx
movsx ecx, word [edi + 0x10]
mov dword [esp + 0x4c], eax
movsx eax, word [eax]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x20], ecx
jne 0x1001ab57
mov ecx, dword [esp + 0x18]
movsx esi, cx
mov ecx, dword [esp + 0x20]
add eax, esi
mov esi, dword [esp + 0x14]
sar eax, 1
mov dword [esp + 0x2c], eax
movsx eax, si
mov esi, dword [esp + 0xc]
add ecx, eax
sar ecx, 1
jmp 0x1001ab6c
inc dword [esp + 0x1c]
mov edi, dword [esp + 0x4c]
jmp 0x1001ab70
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x2c], eax
movsx ecx, cx
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x2c]
lea eax, [edx*8]
sub eax, edx
inc edx
mov word [esi + eax*2], cx
mov ecx, dword [esp + 0x20]
mov word [esi + eax*2 + 2], cx
xor ecx, ecx
mov dword [esi + eax*2 + 4], ecx
mov byte [esi + eax*2 + 0xc], 1
mov eax, dword [esp + 0x34]
mov dword [esp + 0x10], ecx
movzx ecx, byte [eax + 1]
movzx eax, byte [eax]
inc ecx
shl eax, 8
add eax, ecx
add dword [esp + 0x34], 2
mov dword [esp + 0x44], eax
jmp 0x1001accb
test byte [esp + 0xa], 1
jne 0x1001ac3e
cmp dword [esp + 0x10], 0
je 0x1001ac1b
lea ecx, [edx*8]
sub ecx, edx
inc edx
mov dword [esp + 0x10], ecx
mov byte [esi + ecx*2 + 0xc], 3
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0xc]
movsx eax, cx
add eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
sar eax, 1
mov word [esi + ecx*2], ax
mov ecx, dword [esp + 0x14]
movsx eax, cx
mov ecx, dword [esp + 0x10]
add eax, dword [esp + 0x24]
sar eax, 1
mov word [esi + ecx*2 + 2], ax
mov eax, dword [esp + 0x28]
mov word [esi + ecx*2 + 4], ax
mov eax, dword [esp + 0x24]
mov word [esi + ecx*2 + 6], ax
mov eax, dword [esp + 0x18]
movsx ecx, ax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x28], ecx
movsx ecx, ax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x10], 1
jmp 0x1001accb
lea ecx, [edx*8]
sub ecx, edx
cmp dword [esp + 0x10], 0
je 0x1001ac66
mov eax, dword [esp + 0x24]
movzx eax, ax
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x28]
movzx eax, ax
mov dword [esp + 0x48], eax
jmp 0x1001ac76
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov eax, dword [esp + 0x14]
movzx esi, ax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x14], esi
movzx esi, ax
mov eax, dword [esp + 0x10]
test eax, eax
mov dword [esp + 0x18], esi
mov esi, dword [esp + 0xc]
setne al
add al, 2
mov dword [esp + 0x10], 0
inc edx
mov byte [esi + ecx*2 + 0xc], al
mov eax, dword [esp + 0x18]
mov word [esi + ecx*2], ax
mov eax, dword [esp + 0x14]
mov word [esi + ecx*2 + 2], ax
mov eax, dword [esp + 0x48]
mov word [esi + ecx*2 + 4], ax
mov eax, dword [esp + 0x4c]
mov word [esi + ecx*2 + 6], ax
mov eax, dword [esp + 0x1c]
add edi, 0xe
mov ecx, dword [esp + 0x20]
inc eax
mov dword [esp + 0x1c], eax
cmp eax, dword [esp + 0x30]
jl 0x1001aaa0
mov eax, ecx
mov ecx, dword [esp + 0x2c]
jmp 0x1001ad07
mov esi, dword [esp + 0xc]
xor edx, edx
xor eax, eax
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], edx
xor ecx, ecx
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], edx
push dword [esp + 0x24]
push dword [esp + 0x2c]
push dword [esp + 0x40]
push dword [esp + 0x48]
push eax
push ecx
push dword [esp + 0x58]
mov ecx, esi
push dword [esp + 0x2c]
call fcn.1001a760
mov ecx, eax
add esp, 0x20
mov eax, dword [ebp + 8]
mov dword [eax], esi
mov eax, ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
cmp ax, 0xffff
jne 0x1001b27d
add edi, 0xa
mov dword [esp + 0x20], esi
add edi, edx
xor esi, esi
mov dword [esp + 0xc], esi
mov al, byte [edi + 2]
xorps xmm1, xmm1
movzx edx, byte [edi + 1]
xorps xmm2, xmm2
movups xmm0, xmmword [0x1003b770]
mov byte [esp + 0xa], al
movss xmm5, dword [0x1003b458]
xorps xmm4, xmm4
mov al, byte [edi + 3]
add edi, 4
mov dword [esp + 0x18], 0
mov dword [esp + 0x38], edx
mov byte [esp + 0xb], al
movss dword [esp + 0x2c], xmm1
movss dword [esp + 0x28], xmm2
movups xmmword [esp + 0x50], xmm0
test dl, 2
je 0x1001ae20
mov al, byte [edi]
lea ecx, [edi + 1]
mov dword [esp + 0x48], ecx
test dl, 1
je 0x1001adfb
mov dl, byte [edi + 2]
lea esi, [edi + 3]
movzx ecx, al
add edi, 4
movsx ecx, cx
mov eax, pe_nt_image_headers32
cwde
imul ecx, eax
mov eax, dword [esp + 0x48]
movzx eax, byte [eax]
add cx, ax
movsx eax, cx
movzx ecx, dl
mov edx, dword [esp + 0x38]
movsx ecx, cx
movd xmm1, eax
mov eax, pe_nt_image_headers32
cwde
imul ecx, eax
movzx eax, byte [esi]
mov esi, dword [esp + 0xc]
add cx, ax
movsx eax, cx
jmp 0x1001ae0a
mov edi, ecx
movsx eax, al
mov cl, byte [edi]
inc edi
movd xmm1, eax
movsx eax, cl
movd xmm2, eax
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
movss dword [esp + 0x28], xmm2
movss dword [esp + 0x2c], xmm1
test dl, 8
je 0x1001ae6c
movzx ecx, byte [edi]
mov eax, pe_nt_image_headers32
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [edi + 1]
movss dword [esp + 0x24], xmm4
movss dword [esp + 0x2c], xmm1
movss dword [esp + 0x28], xmm2
add cx, ax
add edi, 2
movsx eax, cx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm5
movss dword [esp + 0x30], xmm0
movaps xmm3, xmm0
jmp 0x1001afb4
test dl, 0x40
je 0x1001aed9
movzx ecx, byte [edi]
mov edx, pe_nt_image_headers32
movsx ecx, cx
movsx eax, dx
imul ecx, eax
movzx eax, byte [edi + 1]
movss dword [esp + 0x24], xmm4
movss dword [esp + 0x2c], xmm1
movss dword [esp + 0x28], xmm2
add cx, ax
movsx eax, cx
movzx ecx, byte [edi + 2]
movsx ecx, cx
movd xmm3, eax
movsx eax, dx
imul ecx, eax
movzx eax, byte [edi + 3]
cvtdq2ps xmm3, xmm3
add cx, ax
add edi, 4
movsx eax, cx
mulss xmm3, xmm5
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm5
movss dword [esp + 0x30], xmm0
jmp 0x1001afb4
test dl, dl
jns 0x1001af90
movzx ecx, byte [edi]
mov edx, pe_nt_image_headers32
movsx ecx, cx
movsx eax, dx
imul ecx, eax
movzx eax, byte [edi + 1]
movss dword [esp + 0x2c], xmm1
movss dword [esp + 0x28], xmm2
add cx, ax
movsx eax, cx
movzx ecx, byte [edi + 2]
movsx ecx, cx
movd xmm3, eax
movsx eax, dx
imul ecx, eax
movzx eax, byte [edi + 3]
cvtdq2ps xmm3, xmm3
add cx, ax
movsx eax, cx
movzx ecx, byte [edi + 4]
movsx ecx, cx
mulss xmm3, xmm5
movd xmm4, eax
movsx eax, dx
imul ecx, eax
movzx eax, byte [edi + 5]
cvtdq2ps xmm4, xmm4
add cx, ax
movsx eax, cx
movss dword [esp + 0x3c], xmm3
movzx ecx, byte [edi + 6]
movsx ecx, cx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movsx eax, dx
imul ecx, eax
movzx eax, byte [edi + 7]
mulss xmm0, xmm5
mulss xmm4, xmm5
add cx, ax
add edi, 8
movsx eax, cx
movss dword [esp + 0x24], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm5
movss dword [esp + 0x30], xmm0
jmp 0x1001afba
movss xmm0, dword [esp + 0x5c]
movss xmm4, dword [esp + 0x54]
movss xmm3, dword [esp + 0x50]
movss dword [esp + 0x30], xmm0
movss xmm0, dword [esp + 0x58]
movss dword [esp + 0x24], xmm0
movss dword [esp + 0x3c], xmm3
movaps xmm1, xmm4
movss dword [esp + 0x1c], xmm4
movaps xmm0, xmm3
mulss xmm1, xmm4
mulss xmm0, xmm3
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x1001afe4
sqrtsd xmm0, xmm0
jmp 0x1001afe9
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
movss xmm1, dword [esp + 0x30]
cvtsd2ss xmm0, xmm0
mulss xmm1, xmm1
movss dword [esp + 0x48], xmm0
movss xmm0, dword [esp + 0x24]
mulss xmm0, xmm0
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x1001b01d
sqrtsd xmm0, xmm0
jmp 0x1001b022
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
movzx edx, byte [esp + 0xa]
lea eax, [esp + 0x18]
mov ecx, dword [esp + 0x4c]
cvtsd2ss xmm0, xmm0
push eax
movzx eax, byte [esp + 0xf]
shl edx, 8
add edx, eax
movss dword [esp + 0x48], xmm0
call fcn.1001c800
add esp, 4
mov dword [esp + 0x40], eax
test eax, eax
jle 0x1001b221
movss xmm4, dword [esp + 0x30]
xor edx, edx
movss xmm5, dword [esp + 0x2c]
mov esi, eax
movss xmm6, dword [esp + 0x28]
movss xmm7, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
xorps xmm3, xmm3
xorps xmm2, xmm2
movsx eax, word [edx + ecx + 2]
cvtsi2ss xmm3, eax
movsx eax, word [edx + ecx]
cvtsi2ss xmm2, eax
movaps xmm0, xmm3
mulss xmm3, xmm4
mulss xmm0, dword [esp + 0x24]
movaps xmm1, xmm2
mulss xmm2, dword [esp + 0x1c]
mulss xmm1, xmm7
addss xmm2, xmm3
xorps xmm3, xmm3
addss xmm1, xmm0
addss xmm2, xmm6
addss xmm1, xmm5
mulss xmm2, dword [esp + 0x44]
mulss xmm1, dword [esp + 0x48]
cvttss2si eax, xmm1
mov word [edx + ecx], ax
cvttss2si eax, xmm2
xorps xmm2, xmm2
mov word [edx + ecx + 2], ax
movsx eax, word [edx + ecx + 6]
cvtsi2ss xmm3, eax
movsx eax, word [edx + ecx + 4]
cvtsi2ss xmm2, eax
movaps xmm0, xmm3
mulss xmm3, xmm4
mulss xmm0, dword [esp + 0x24]
movaps xmm1, xmm2
mulss xmm2, dword [esp + 0x1c]
mulss xmm1, xmm7
addss xmm2, xmm3
addss xmm1, xmm0
addss xmm2, xmm6
addss xmm1, xmm5
mulss xmm2, dword [esp + 0x44]
mulss xmm1, dword [esp + 0x48]
cvttss2si eax, xmm1
mov word [edx + ecx + 4], ax
cvttss2si eax, xmm2
mov word [edx + ecx + 6], ax
add edx, 0xe
sub esi, 1
jne 0x1001b074
mov eax, dword [0x1003fc00]
mov esi, dword [esp + 0xc]
test eax, eax
je 0x1001b155
inc dword [eax + 0x370]
mov eax, dword [esp + 0x20]
add eax, dword [esp + 0x40]
lea ecx, [eax*8]
sub ecx, eax
add ecx, ecx
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov dword [esp + 0x48], eax
test eax, eax
je 0x1001b231
mov edx, dword [esp + 0x20]
test edx, edx
jle 0x1001b1a0
lea ecx, [edx*8]
sub ecx, edx
add ecx, ecx
push ecx
push esi
push eax
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [esp + 0x2c]
add esp, 0xc
mov ecx, dword [esp + 0x40]
lea eax, [ecx*8]
sub eax, ecx
mov ecx, dword [esp + 0x48]
add eax, eax
push eax
push dword [esp + 0x1c]
lea eax, [edx*8]
sub eax, edx
lea eax, [ecx + eax*2]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
test esi, esi
je 0x1001b1ea
mov eax, dword [0x1003fc00]
test eax, eax
je 0x1001b1e0
dec dword [eax + 0x370]
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x48]
mov dword [esp + 0xc], esi
test ecx, ecx
je 0x1001b209
mov eax, dword [0x1003fc00]
test eax, eax
je 0x1001b209
dec dword [eax + 0x370]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ecx, dword [esp + 0x24]
add esp, 4
add ecx, dword [esp + 0x40]
mov dword [esp + 0x20], ecx
jmp 0x1001b225
mov ecx, dword [esp + 0x20]
test byte [esp + 0x38], 0x20
je 0x1001b27f
jmp 0x1001ad53
test esi, esi
je 0x1001b252
mov eax, dword [0x1003fc00]
test eax, eax
je 0x1001b244
dec dword [eax + 0x370]
push esi
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call esi
add esp, 4
jmp 0x1001b258
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x1001b275
mov eax, dword [0x1003fc00]
test eax, eax
je 0x1001b26f
dec dword [eax + 0x370]
push ecx
call esi
add esp, 4
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret
xor ecx, ecx
mov eax, dword [ebp + 8]
pop edi
mov dword [eax], esi
mov eax, ecx
pop esi
mov esp, ebp
pop ebp
ret