Function at 0x12016e630
Capabilities:
Enumerate pe sections

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x58
cmp rcx, rdx
je 0x12016e857
lea rax, [rcx + 0x20]
mov qword [rsp + 0x48], rax
cmp rdx, rax
je 0x12016e857
lea rbx, [rcx + 0x10]
mov rsi, rax
lea rdi, [rcx + 0x40]
mov r12, rax
sub rsi, rbx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0xa8], rdx
mov rax, rsi
mov rsi, rcx
mov rbp, rax
nop word [rax + rax]
lea rcx, [r12 + 0x10]
mov r8, rsi
mov rax, r12
jmp 0x12016e6af
ja 0x12016e87b
add rax, 2
add r8, 2
cmp rcx, rax
je 0x12016e870
movzx edx, word [r8]
cmp word [rax], dx
jae 0x12016e698
mov rax, rdi
lea r8, [rcx + rbp]
mov rbx, rdi
sub rax, rcx
cmp rax, rbp
mov rax, qword [rsp + 0x30]
cmovle r8, rdi
cmp rcx, r8
jne 0x12016e6f7
jmp 0x12016e890
ja 0x12016e87b
add rcx, 2
add rax, 2
cmp r8, rcx
je 0x12016e890
movzx edx, word [rax]
cmp word [rcx], dx
jae 0x12016e6e0
movzx eax, word [r12 + 6]
movzx r11d, word [r12]
movzx r10d, word [r12 + 2]
movzx r9d, word [r12 + 4]
mov word [rsp + 0x20], ax
movzx eax, word [r12 + 0xa]
movzx r15d, word [r12 + 8]
movzx r14d, word [r12 + 0x1a]
mov word [rsp + 0x22], ax
movzx eax, word [r12 + 0xc]
movzx r13d, word [r12 + 0x1c]
mov word [rsp + 0x24], ax
movzx eax, word [r12 + 0xe]
mov word [rsp + 0x26], ax
movzx eax, word [r12 + 0x10]
mov word [rsp + 0x28], ax
movzx eax, word [r12 + 0x12]
mov word [rsp + 0x2a], ax
movzx eax, word [r12 + 0x14]
mov word [rsp + 0x2c], ax
movzx eax, word [r12 + 0x16]
mov word [rsp + 0x2e], ax
movzx eax, word [r12 + 0x18]
mov word [rsp + 0x38], ax
movzx eax, word [r12 + 0x1e]
mov word [rsp + 0x3a], ax
cmp rsi, r12
je 0x12016e7ca
mov eax, 0x20
mov r8, r12
mov rdx, rsi
mov dword [rsp + 0x44], r9d
sub r8, rsi
lea rcx, [rsi + rax]
mov dword [rsp + 0x40], r10d
mov dword [rsp + 0x3c], r11d
call sub.msvcrt.dll_memmove
mov r9d, dword [rsp + 0x44]
mov r10d, dword [rsp + 0x40]
mov r11d, dword [rsp + 0x3c]
movzx eax, word [rsp + 0x20]
mov word [rsi], r11w
mov word [rsi + 2], r10w
mov word [rsi + 6], ax
movzx eax, word [rsp + 0x22]
mov word [rsi + 4], r9w
mov word [rsi + 0xa], ax
movzx eax, word [rsp + 0x24]
mov word [rsi + 8], r15w
mov word [rsi + 0xc], ax
movzx eax, word [rsp + 0x26]
mov word [rsi + 0x1a], r14w
mov word [rsi + 0xe], ax
movzx eax, word [rsp + 0x28]
mov word [rsi + 0x1c], r13w
mov word [rsi + 0x10], ax
movzx eax, word [rsp + 0x2a]
mov word [rsi + 0x12], ax
movzx eax, word [rsp + 0x2c]
mov word [rsi + 0x14], ax
movzx eax, word [rsp + 0x2e]
mov word [rsi + 0x16], ax
movzx eax, word [rsp + 0x38]
mov word [rsi + 0x18], ax
movzx eax, word [rsp + 0x3a]
mov word [rsi + 0x1e], ax
add r12, 0x20
add rdi, 0x20
cmp qword [rsp + 0xa8], rbx
jne 0x12016e688
add rsp, 0x58
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
cmp qword [rsp + 0x30], r8
jne 0x12016e6b8
mov rcx, r12
mov rbx, rdi
call fcn.120175f40
jmp 0x12016e841
cmp qword [rsp + 0x48], rax
jne 0x12016e6ff
mov rcx, r12
mov rbx, rdi
call fcn.120175f40
jmp 0x12016e841
push r12
push rbx
sub rsp, 0x28
mov rax, rdx
mov r12, rdx
sub rax, rcx
cmp rax, 0x200
jle 0x120175ba0
lea rbx, [rcx + 0x200]
mov rdx, rbx
call 0x12016e630
cmp r12, rbx
je 0x120175b91
nop dword [rax]
mov rcx, rbx
add rbx, 0x20
call fcn.120175f40
cmp r12, rbx
jne 0x120175b80
add rsp, 0x28
pop rbx
pop r12
ret
add rsp, 0x28
pop rbx
pop r12
jmp 0x12016e630