Function at 0x140127160
Capabilities:
Enumerate pe sections

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x40
mov r15, qword [rdx]
mov rdi, rcx
mov r12, qword [rdx + 0x10]
movzx ecx, byte [r15 + 5]
movzx eax, byte [r15 + 4]
mov esi, dword [rdx + 0x18]
mov r14d, ecx
movzx ebx, byte [r15 + 0x1a]
mov dword [rsp + 0x90], eax
mov eax, ecx
and ecx, 4
xor ebp, ebp
mov dword [rsp + 0x24], ecx
movzx ecx, byte [r15 + 0xd]
and eax, 1
shl rcx, 8
mov dword [rsp + 0x20], eax
movzx eax, byte [r15 + 0xc]
or rcx, rax
movzx eax, byte [r15 + 0xb]
and r14d, 2
shl rcx, 8
or rcx, rax
movzx eax, byte [r15 + 0xa]
shl rcx, 8
or rcx, rax
movzx eax, byte [r15 + 9]
shl rcx, 8
or rcx, rax
movzx eax, byte [r15 + 8]
shl rcx, 8
or rcx, rax
movzx eax, byte [r15 + 7]
shl rcx, 8
or rcx, rax
movzx eax, byte [r15 + 6]
shl rcx, 8
or rcx, rax
movzx eax, byte [r15 + 0x10]
mov qword [rsp + 0x28], rcx
movzx ecx, byte [r15 + 0x11]
shl ecx, 8
or ecx, eax
movzx eax, byte [r15 + 0xf]
shl ecx, 8
or ecx, eax
movzx eax, byte [r15 + 0xe]
shl ecx, 8
or ecx, eax
movzx eax, byte [r15 + 0x14]
mov dword [rsp + 0x88], ecx
movzx ecx, byte [r15 + 0x15]
shl ecx, 8
or ecx, eax
movzx eax, byte [r15 + 0x13]
shl ecx, 8
or ecx, eax
movzx eax, byte [r15 + 0x12]
shl ecx, 8
or ecx, eax
mov dword [rsp + 0x98], ecx
test rdi, rdi
je 0x1401274bf
mov rcx, qword [rdi]
test rcx, rcx
je 0x1401274bf
movsxd rax, dword [rdi + 0x10]
mov qword [rsp + 0x38], r13
movsxd r13, dword [rdi + 0x34]
test eax, eax
je 0x140127298
sub dword [rdi + 0xc], eax
je 0x140127295
movsxd r8, dword [rdi + 0xc]
lea rdx, [rcx + rax]
call sub.MSVCR90.dll_memmove
mov dword [rdi + 0x10], ebp
test r13d, r13d
je 0x1401272de
mov eax, dword [rdi + 0x2c]
sub eax, r13d
je 0x1401272d3
mov rcx, qword [rdi + 0x18]
movsxd r8, eax
lea rdx, [rcx + r13*4]
shl r8, 2
call sub.MSVCR90.dll_memmove
mov eax, dword [rdi + 0x2c]
mov rcx, qword [rdi + 0x20]
sub eax, r13d
lea rdx, [rcx + r13*8]
movsxd r8, eax
shl r8, 3
call sub.MSVCR90.dll_memmove
sub dword [rdi + 0x2c], r13d
sub dword [rdi + 0x30], r13d
mov dword [rdi + 0x34], ebp
mov eax, dword [rsp + 0x88]
cmp eax, dword [rdi + 0x160]
jne 0x1401273d3
cmp dword [rsp + 0x90], ebp
jg 0x1401273d3
lea edx, [rbx + 1]
mov rcx, rdi
call fcn.140126dd0
test eax, eax
jne 0x1401273d3
mov r9d, dword [rdi + 0x164]
mov r13d, dword [rsp + 0x98]
cmp r13d, r9d
je 0x14012736d
movsxd r8, dword [rdi + 0x30]
cmp r8d, dword [rdi + 0x2c]
mov rcx, r8
jge 0x140127351
mov rax, qword [rdi + 0x18]
lea rdx, [rax + r8*4]
nop word [rax + rax]
movzx eax, byte [rdx]
inc ecx
add rdx, 4
sub dword [rdi + 0xc], eax
cmp ecx, dword [rdi + 0x2c]
jl 0x140127340
mov dword [rdi + 0x2c], r8d
cmp r9d, 0xffffffff
je 0x14012736d
mov rax, qword [rdi + 0x18]
mov dword [rax + r8*4], 0x400
inc dword [rdi + 0x2c]
inc dword [rdi + 0x30]
movsxd rbx, ebx
cmp dword [rsp + 0x20], ebp
je 0x1401273c1
movsxd rax, dword [rdi + 0x2c]
cmp eax, 1
jl 0x140127390
mov rcx, rax
mov rax, qword [rdi + 0x18]
cmp dword [rax + rcx*4 - 4], 0x400
jne 0x1401273c1
xor r14d, r14d
xor edx, edx
test rbx, rbx
jle 0x1401273c1
nop word [rax + rax]
movzx ecx, byte [r15 + rdx + 0x1b]
add r12, rcx
sub esi, ecx
cmp ecx, 0xff
jl 0x1401273bf
inc rdx
inc ebp
cmp rdx, rbx
jl 0x1401273a0
jmp 0x1401273c1
inc ebp
test esi, esi
je 0x1401273ff
mov edx, esi
mov rcx, rdi
call fcn.140126d60
test eax, eax
je 0x1401273ea
or eax, 0xffffffff
mov r13, qword [rsp + 0x38]
add rsp, 0x40
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
movsxd rcx, dword [rdi + 0xc]
movsxd r8, esi
mov rdx, r12
add rcx, qword [rdi]
call sub.MSVCR90.dll_memcpy
add dword [rdi + 0xc], esi
movsxd rdx, ebp
or r9d, 0xffffffff
cmp rdx, rbx
jge 0x140127486
nop dword [rax + rax]
movsxd rcx, dword [rdi + 0x2c]
mov rax, qword [rdi + 0x18]
movzx r8d, byte [r15 + rdx + 0x1b]
mov dword [rax + rcx*4], r8d
movsxd rcx, dword [rdi + 0x2c]
mov rax, qword [rdi + 0x20]
mov qword [rax + rcx*8], 0xffffffffffffffff
test r14d, r14d
je 0x140127449
movsxd rcx, dword [rdi + 0x2c]
mov rax, qword [rdi + 0x18]
or dword [rax + rcx*4], 0x100
xor r14d, r14d
cmp r8d, 0xff
jge 0x140127456
mov r9d, dword [rdi + 0x2c]
inc dword [rdi + 0x2c]
mov eax, dword [rdi + 0x2c]
inc rdx
cmp r8d, 0xff
jge 0x14012746b
mov dword [rdi + 0x30], eax
cmp rdx, rbx
jl 0x140127410
cmp r9d, 0xffffffff
je 0x140127486
mov rax, qword [rdi + 0x20]
mov rdx, qword [rsp + 0x28]
movsxd rcx, r9d
mov qword [rax + rcx*8], rdx
cmp dword [rsp + 0x24], 0
je 0x1401274ae
movsxd rax, dword [rdi + 0x2c]
mov dword [rdi + 0x158], 1
test eax, eax
jle 0x1401274ae
mov rcx, rax
mov rax, qword [rdi + 0x18]
or dword [rax + rcx*4 - 4], 0x200
lea eax, [r13 + 1]
mov dword [rdi + 0x164], eax
xor eax, eax
jmp 0x1401273d6
or eax, 0xffffffff
add rsp, 0x40
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret