Function at 0x10126b30
Capabilities:
Enumerate pe sections
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x60
push esi
mov esi, dword [ecx + 4]
push edi
mov dword [esp + 0x14], ecx
xor edi, edi
call fcn.101277b0
mov edx, eax
mov eax, dword [ebp + 8]
mov dword [eax], edi
test edx, edx
js 0x1012754d
movzx ecx, byte [edx + esi]
mov eax, 0x100
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [edx + esi + 1]
add cx, ax
movzx eax, cx
test ax, ax
jle 0x10127026
cwde
mov dword [esp + 0x10], edi
mov dword [esp + 0x40], edi
lea edi, [esi + 0xa]
add edi, edx
lea ecx, [edx + eax*2]
mov dword [esp + 0x3c], edi
add eax, eax
mov dword [esp + 0x18], eax
movzx eax, byte [ecx + esi + 0xb]
movzx ecx, byte [ecx + esi + 0xa]
add esi, eax
mov eax, dword [esp + 0x18]
shl ecx, 8
add ecx, 0xc
add esi, ecx
movzx ecx, byte [eax + edi - 2]
add esi, eax
movzx eax, byte [eax + edi - 1]
add esi, edx
shl ecx, 8
inc ecx
add eax, ecx
mov ecx, dword [esp + 0x18]
add ecx, eax
mov dword [esp + 0x30], eax
mov eax, dword [0x101e6b78]
test eax, eax
je 0x10126bdc
inc dword [eax + 0x36c]
lea eax, [ecx*8]
sub eax, ecx
add eax, eax
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edi, eax
add esp, 4
mov dword [esp + 0xc], edi
test edi, edi
je 0x1012754d
mov edx, dword [esp + 0x18]
xor cl, cl
mov dword [esp + 0x44], 0
lea eax, [edx*8]
sub eax, edx
mov edx, dword [esp + 0x30]
add eax, eax
mov dword [esp + 0x4c], eax
test edx, edx
je 0x10126fdd
add eax, 0xc
mov dword [esp + 0x34], edx
add eax, edi
mov dl, cl
mov dword [esp + 0x38], eax
test cl, cl
jne 0x10126c5f
mov al, byte [esi]
mov dl, al
mov byte [esp + 9], al
and dl, 8
je 0x10126c4b
mov cl, byte [esi + 1]
xor eax, eax
test dl, dl
mov dl, byte [esp + 9]
setne al
inc eax
add esi, eax
mov eax, dword [esp + 0x38]
jmp 0x10126c61
dec cl
mov byte [eax], dl
add eax, 0xe
sub dword [esp + 0x34], 1
mov dword [esp + 0x38], eax
jne 0x10126c37
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x30]
add eax, edi
mov dword [esp + 0x38], eax
xor edi, edi
mov dword [esp + 0x34], ecx
mov dl, byte [eax + 0xc]
and dl, 0x10
test byte [eax + 0xc], 2
je 0x10126ca4
mov al, byte [esi]
inc esi
movzx ecx, al
mov eax, ecx
neg eax
test dl, dl
cmove ecx, eax
add edi, ecx
jmp 0x10126cc6
test dl, dl
jne 0x10126cc6
movzx ecx, byte [esi]
mov eax, 0x100
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + 1]
add cx, ax
movsx eax, cx
add edi, eax
add esi, 2
mov eax, dword [esp + 0x38]
mov word [eax], di
add eax, 0xe
sub dword [esp + 0x34], 1
mov dword [esp + 0x38], eax
jne 0x10126c85
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0xc]
add edi, 2
lea eax, [ecx*8]
sub eax, ecx
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x34], ecx
lea eax, [edi + eax*2]
xor edi, edi
mov dword [esp + 0x38], eax
mov dl, byte [eax + 0xa]
and dl, 0x20
test byte [eax + 0xa], 4
je 0x10126d1f
mov al, byte [esi]
inc esi
movzx ecx, al
mov eax, ecx
neg eax
test dl, dl
cmove ecx, eax
add edi, ecx
jmp 0x10126d41
test dl, dl
jne 0x10126d41
movzx ecx, byte [esi]
mov eax, 0x100
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + 1]
add cx, ax
movsx eax, cx
add edi, eax
add esi, 2
mov eax, dword [esp + 0x38]
mov word [eax], di
add eax, 0xe
sub dword [esp + 0x34], 1
mov dword [esp + 0x38], eax
jne 0x10126d00
mov edi, dword [esp + 0x18]
xor eax, eax
xor edx, edx
mov dword [esp + 0x1c], eax
xor ecx, ecx
mov dword [esp + 0x34], edx
mov dword [esp + 0x38], edx
lea eax, [edi*8]
mov dword [esp + 0x24], edx
sub eax, edi
mov dword [esp + 0x28], edx
mov edi, dword [esp + 0xc]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x2c], ecx
lea esi, [edi + eax*2]
nop dword [eax]
mov al, byte [esi + 0xc]
mov byte [esp + 9], al
movzx eax, word [esi]
mov dword [esp + 0x18], eax
movzx eax, word [esi + 2]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x1c]
cmp dword [esp + 0x44], eax
jne 0x10126ea9
test eax, eax
je 0x10126de1
push dword [esp + 0x24]
push dword [esp + 0x2c]
push dword [esp + 0x3c]
push dword [esp + 0x44]
push ecx
push dword [esp + 0x40]
mov ecx, edi
push dword [esp + 0x58]
push dword [esp + 0x2c]
call fcn.10127580
add esp, 0x20
mov edx, eax
movzx eax, byte [esp + 9]
mov ecx, dword [esp + 0x18]
not eax
and eax, 1
mov dword [esp + 0x40], eax
movsx eax, cx
je 0x10126e51
test byte [esi + 0x1a], 1
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x14]
movsx ecx, ax
lea eax, [esi + 0xe]
mov dword [esp + 0x34], ecx
movsx ecx, word [esi + 0x10]
mov dword [esp + 0x4c], eax
movsx eax, word [eax]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x20], ecx
jne 0x10126e47
mov ecx, dword [esp + 0x18]
movsx edi, cx
mov ecx, dword [esp + 0x20]
add eax, edi
mov edi, dword [esp + 0x14]
sar eax, 1
mov dword [esp + 0x2c], eax
movsx eax, di
mov edi, dword [esp + 0xc]
add ecx, eax
sar ecx, 1
jmp 0x10126e5c
inc dword [esp + 0x1c]
mov esi, dword [esp + 0x4c]
jmp 0x10126e60
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x2c], eax
movsx ecx, cx
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x2c]
lea eax, [edx*8]
sub eax, edx
inc edx
mov word [edi + eax*2], cx
mov ecx, dword [esp + 0x20]
mov word [edi + eax*2 + 2], cx
xor ecx, ecx
mov dword [edi + eax*2 + 4], ecx
mov byte [edi + eax*2 + 0xc], 1
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x10], ecx
movzx ecx, byte [eax]
movzx eax, byte [eax + 1]
shl ecx, 8
inc eax
add eax, ecx
add dword [esp + 0x3c], 2
mov dword [esp + 0x44], eax
jmp 0x10126fbb
test byte [esp + 9], 1
jne 0x10126f2e
cmp dword [esp + 0x10], 0
je 0x10126f0b
lea ecx, [edx*8]
sub ecx, edx
inc edx
mov dword [esp + 0x10], ecx
mov byte [edi + ecx*2 + 0xc], 3
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0xc]
movsx eax, cx
add eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
sar eax, 1
mov word [edi + ecx*2], ax
mov ecx, dword [esp + 0x14]
movsx eax, cx
mov ecx, dword [esp + 0x10]
add eax, dword [esp + 0x24]
sar eax, 1
mov word [edi + ecx*2 + 2], ax
mov eax, dword [esp + 0x28]
mov word [edi + ecx*2 + 4], ax
mov eax, dword [esp + 0x24]
mov word [edi + ecx*2 + 6], ax
mov eax, dword [esp + 0x18]
movsx ecx, ax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x28], ecx
movsx ecx, ax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x10], 1
jmp 0x10126fbb
lea ecx, [edx*8]
sub ecx, edx
cmp dword [esp + 0x10], 0
je 0x10126f56
mov eax, dword [esp + 0x24]
movzx eax, ax
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x28]
movzx eax, ax
mov dword [esp + 0x48], eax
jmp 0x10126f66
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov eax, dword [esp + 0x14]
movzx edi, ax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x14], edi
movzx edi, ax
mov eax, dword [esp + 0x10]
test eax, eax
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0xc]
setne al
add al, 2
mov dword [esp + 0x10], 0
inc edx
mov byte [edi + ecx*2 + 0xc], al
mov eax, dword [esp + 0x18]
mov word [edi + ecx*2], ax
mov eax, dword [esp + 0x14]
mov word [edi + ecx*2 + 2], ax
mov eax, dword [esp + 0x48]
mov word [edi + ecx*2 + 4], ax
mov eax, dword [esp + 0x4c]
mov word [edi + ecx*2 + 6], ax
mov eax, dword [esp + 0x1c]
add esi, 0xe
mov ecx, dword [esp + 0x20]
inc eax
mov dword [esp + 0x1c], eax
cmp eax, dword [esp + 0x30]
jl 0x10126d90
mov eax, ecx
mov ecx, dword [esp + 0x2c]
jmp 0x10126ff3
xor edx, edx
xor eax, eax
mov dword [esp + 0x34], edx
xor ecx, ecx
mov dword [esp + 0x38], edx
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], edx
push dword [esp + 0x24]
push dword [esp + 0x2c]
push dword [esp + 0x3c]
push dword [esp + 0x44]
push eax
push ecx
push dword [esp + 0x58]
mov ecx, edi
push dword [esp + 0x2c]
call fcn.10127580
mov ecx, eax
add esp, 0x20
mov eax, dword [ebp + 8]
mov dword [eax], edi
mov eax, ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
cmp ax, 0xffff
jne 0x10127555
add esi, 0xa
mov dword [esp + 0x2c], edi
add esi, edx
xor edi, edi
mov dword [esp + 0xc], edi
mov al, byte [esi + 2]
movups xmm0, xmmword [0x1017f7c0]
movzx edx, byte [esi + 1]
movss xmm3, dword [0x1017f08c]
mov byte [esp + 0xa], al
mov al, byte [esi + 3]
mov dword [esp + 0x28], 0
mov dword [esp + 0x18], edx
mov byte [esp + 0xb], al
movups xmmword [esp + 0x50], xmm0
test dl, 2
je 0x1012755a
lea eax, [esi + 5]
mov dword [esp + 0x4c], eax
test dl, 1
je 0x101270d4
mov al, byte [esi + 4]
lea edx, [esi + 7]
movzx ecx, byte [esi + 6]
add esi, 8
mov byte [esp + 9], al
mov eax, 0x100
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [edx]
mov edx, dword [esp + 0x18]
add cx, ax
movsx eax, cx
movzx ecx, byte [esp + 9]
mov dword [esp + 0x40], eax
mov eax, 0x100
cwde
movsx ecx, cx
imul ecx, eax
mov eax, dword [esp + 0x4c]
movzx eax, byte [eax]
add cx, ax
movsx ecx, cx
jmp 0x101270e6
mov cl, byte [esi + 4]
mov esi, eax
movsx ecx, cl
mov al, byte [esi]
inc esi
movsx eax, al
mov dword [esp + 0x40], eax
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x1c], esi
test dl, 8
je 0x10127132
movzx ecx, byte [esi]
mov eax, 0x100
cwde
xorps xmm1, xmm1
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + 1]
add cx, ax
add esi, 2
movsx eax, cx
mov dword [esp + 0x1c], esi
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm3
movss dword [esp + 0x24], xmm0
movaps xmm2, xmm0
xorps xmm0, xmm0
jmp 0x1012726a
test dl, 0x40
je 0x1012719d
movzx ecx, byte [esi]
mov edx, 0x100
movsx ecx, cx
xorps xmm0, xmm0
movsx eax, dx
xorps xmm1, xmm1
imul ecx, eax
movzx eax, byte [esi + 1]
movss dword [esp + 0x20], xmm0
add cx, ax
movsx eax, cx
movzx ecx, byte [esi + 2]
movsx ecx, cx
movd xmm2, eax
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 3]
cvtdq2ps xmm2, xmm2
add cx, ax
add esi, 4
movsx eax, cx
mov dword [esp + 0x1c], esi
mulss xmm2, xmm3
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm3
movss dword [esp + 0x24], xmm0
jmp 0x10127270
test dl, dl
jns 0x1012724c
movzx ecx, byte [esi]
mov edx, 0x100
movsx ecx, cx
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 1]
add cx, ax
movsx eax, cx
movzx ecx, byte [esi + 2]
movsx ecx, cx
movd xmm2, eax
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 3]
cvtdq2ps xmm2, xmm2
add cx, ax
movsx eax, cx
movzx ecx, byte [esi + 4]
movsx ecx, cx
mulss xmm2, xmm3
movd xmm1, eax
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 5]
cvtdq2ps xmm1, xmm1
add cx, ax
movsx eax, cx
movss dword [esp + 0x38], xmm2
movzx ecx, byte [esi + 6]
movsx ecx, cx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 7]
mulss xmm0, xmm3
mulss xmm1, xmm3
add cx, ax
add esi, 8
movsx eax, cx
movss dword [esp + 0x20], xmm0
mov dword [esp + 0x1c], esi
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm3
movss dword [esp + 0x24], xmm0
jmp 0x10127276
movss xmm0, dword [esp + 0x5c]
movss xmm1, dword [esp + 0x54]
movss xmm2, dword [esp + 0x50]
movss dword [esp + 0x24], xmm0
movss xmm0, dword [esp + 0x58]
movss dword [esp + 0x20], xmm0
movss dword [esp + 0x38], xmm2
movaps xmm0, xmm1
movss dword [esp + 0x34], xmm1
mulss xmm0, xmm1
movaps xmm1, xmm2
mulss xmm1, xmm2
addss xmm0, xmm1
call fcn.10007480
movss xmm1, dword [esp + 0x20]
movss dword [esp + 0x48], xmm0
movss xmm0, dword [esp + 0x24]
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
call fcn.10007480
movzx edx, byte [esp + 0xa]
lea ecx, [esp + 0x28]
movzx eax, byte [esp + 0xb]
shl edx, 8
add edx, eax
movss dword [esp + 0x44], xmm0
mov eax, dword [esp + 0x14]
push ecx
mov ecx, eax
cmp dword [eax + 0x3c], 0
jne 0x101272e9
call fcn.10126b30
mov edx, eax
mov dword [esp + 0x34], edx
jmp 0x101272f4
call fcn.101252e0
mov edx, eax
mov dword [esp + 0x34], eax
add esp, 4
test edx, edx
jle 0x101274f9
movss xmm4, dword [esp + 0x24]
movss xmm5, dword [esp + 0x38]
movss xmm6, dword [esp + 0x20]
movss xmm7, dword [esp + 0x34]
mov edi, dword [esp + 0x40]
mov esi, dword [esp + 0x4c]
mov dword [esp + 0x10], 0
mov dword [esp + 0x3c], edx
mov edx, dword [esp + 0x10]
nop
mov ecx, dword [esp + 0x28]
xorps xmm3, xmm3
xorps xmm2, xmm2
movsx eax, word [edx + ecx + 2]
cvtsi2ss xmm3, eax
movsx eax, word [edx + ecx]
cvtsi2ss xmm2, eax
movaps xmm0, xmm3
mulss xmm3, xmm4
movaps xmm1, xmm2
mulss xmm0, xmm6
mulss xmm1, xmm5
mulss xmm2, xmm7
addss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, esi
addss xmm2, xmm3
xorps xmm3, xmm3
addss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, edi
mulss xmm1, dword [esp + 0x48]
addss xmm2, xmm0
cvttss2si eax, xmm1
mulss xmm2, dword [esp + 0x44]
mov word [edx + ecx], ax
cvttss2si eax, xmm2
xorps xmm2, xmm2
mov word [edx + ecx + 2], ax
movsx eax, word [edx + ecx + 6]
cvtsi2ss xmm3, eax
movsx eax, word [edx + ecx + 4]
cvtsi2ss xmm2, eax
movaps xmm0, xmm3
mulss xmm3, xmm4
movaps xmm1, xmm2
mulss xmm0, xmm6
mulss xmm1, xmm5
mulss xmm2, xmm7
addss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, esi
addss xmm2, xmm3
addss xmm1, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, edi
mulss xmm1, dword [esp + 0x48]
addss xmm2, xmm0
cvttss2si eax, xmm1
mulss xmm2, dword [esp + 0x44]
mov word [edx + ecx + 4], ax
cvttss2si eax, xmm2
mov word [edx + ecx + 6], ax
add edx, 0xe
sub dword [esp + 0x3c], 1
jne 0x10127330
mov eax, dword [0x101e6b78]
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0xc]
mov edx, dword [esp + 0x30]
test eax, eax
je 0x1012742f
inc dword [eax + 0x36c]
mov eax, dword [esp + 0x2c]
add eax, edx
lea ecx, [eax*8]
sub ecx, eax
add ecx, ecx
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov dword [esp + 0x4c], eax
test eax, eax
je 0x10127509
mov edx, dword [esp + 0x2c]
test edx, edx
jle 0x10127478
lea ecx, [edx*8]
sub ecx, edx
add ecx, ecx
push ecx
push edi
push eax
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [esp + 0x38]
add esp, 0xc
mov ecx, dword [esp + 0x30]
lea eax, [ecx*8]
sub eax, ecx
mov ecx, dword [esp + 0x4c]
add eax, eax
push eax
push dword [esp + 0x2c]
lea eax, [edx*8]
sub eax, edx
lea eax, [ecx + eax*2]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
test edi, edi
je 0x101274c2
mov eax, dword [0x101e6b78]
test eax, eax
je 0x101274b8
dec dword [eax + 0x36c]
push edi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov ecx, dword [esp + 0x28]
mov edi, dword [esp + 0x4c]
mov dword [esp + 0xc], edi
test ecx, ecx
je 0x101274e1
mov eax, dword [0x101e6b78]
test eax, eax
je 0x101274e1
dec dword [eax + 0x36c]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ecx, dword [esp + 0x30]
add esp, 4
add ecx, dword [esp + 0x30]
mov dword [esp + 0x2c], ecx
jmp 0x101274fd
mov ecx, dword [esp + 0x2c]
test byte [esp + 0x18], 0x20
je 0x10127564
jmp 0x1012703f
test edi, edi
je 0x1012752a
mov eax, dword [0x101e6b78]
test eax, eax
je 0x1012751c
dec dword [eax + 0x36c]
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
push edi
call esi
add esp, 4
jmp 0x10127530
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ecx, dword [esp + 0x28]
test ecx, ecx
je 0x1012754d
mov eax, dword [0x101e6b78]
test eax, eax
je 0x10127547
dec dword [eax + 0x36c]
push ecx
call esi
add esp, 4
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret
test ax, ax
jns 0x10127562
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
xor ecx, ecx
mov eax, dword [ebp + 8]
mov dword [eax], edi
mov eax, ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret