Function at 0x18000a670
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x30
mov r11, rdx
mov rdi, rcx
test rdx, rdx
je 0x18000ad14
movzx r8d, byte [rdx]
mov eax, 0x80078071
movzx r9d, byte [r11 + 1]
inc r8d
mul r8d
movzx r10d, byte [r11 + 2]
shr edx, 0xf
imul eax, edx, 0xfff1
sub r8d, eax
mov eax, 0x80078071
mul r8d
add r9d, r8d
mov ecx, r8d
shr edx, 0xf
imul eax, edx, 0xfff1
sub ecx, eax
mov eax, 0x80078071
mul r9d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r9d, eax
mov eax, 0x80078071
add r10d, r9d
lea r8d, [rcx + r9]
movzx r9d, byte [r11 + 3]
mul r8d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r8d, eax
mov eax, 0x80078071
mul r10d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r10d, eax
mov eax, 0x80078071
add r9d, r10d
lea ecx, [r8 + r10]
movzx r10d, byte [r11 + 4]
mul ecx
shr edx, 0xf
imul eax, edx, 0xfff1
sub ecx, eax
mov eax, 0x80078071
mul r9d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r9d, eax
mov eax, 0x80078071
add r10d, r9d
lea r8d, [rcx + r9]
movzx r9d, byte [r11 + 5]
mul r8d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r8d, eax
mov eax, 0x80078071
mul r10d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r10d, eax
mov eax, 0x80078071
add r9d, r10d
lea ecx, [r8 + r10]
movzx r10d, byte [r11 + 6]
mul ecx
shr edx, 0xf
imul eax, edx, 0xfff1
sub ecx, eax
mov eax, 0x80078071
mul r9d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r9d, eax
mov eax, 0x80078071
lea r8d, [rcx + r9]
mul r8d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r8d, eax
mov eax, 0x80078071
add r10d, r9d
mul r10d
movzx r9d, byte [r11 + 7]
shr edx, 0xf
imul eax, edx, 0xfff1
sub r10d, eax
mov eax, 0x80078071
add r9d, r10d
lea ecx, [r8 + r10]
movzx r10d, byte [r11 + 8]
mul ecx
shr edx, 0xf
imul eax, edx, 0xfff1
sub ecx, eax
mov eax, 0x80078071
mul r9d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r9d, eax
mov eax, 0x80078071
add r10d, r9d
lea r8d, [rcx + r9]
movzx r9d, byte [r11 + 9]
mul r8d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r8d, eax
mov eax, 0x80078071
mul r10d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r10d, eax
mov eax, 0x80078071
add r9d, r10d
lea ecx, [r8 + r10]
movzx r10d, byte [r11 + 0xa]
mul ecx
shr edx, 0xf
imul eax, edx, 0xfff1
sub ecx, eax
mov eax, 0x80078071
mul r9d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r9d, eax
mov eax, 0x80078071
add r10d, r9d
lea r8d, [rcx + r9]
movzx r9d, byte [r11 + 0xb]
mul r8d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r8d, eax
mov eax, 0x80078071
mul r10d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r10d, eax
mov eax, 0x80078071
add r9d, r10d
lea ecx, [r8 + r10]
movzx r10d, byte [r11 + 0xc]
mul ecx
shr edx, 0xf
imul eax, edx, 0xfff1
sub ecx, eax
mov eax, 0x80078071
mul r9d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r9d, eax
mov eax, 0x80078071
add r10d, r9d
lea r8d, [rcx + r9]
mul r8d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r8d, eax
mov eax, 0x80078071
mul r10d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r10d, eax
movzx r9d, byte [r11 + 0xd]
add r9d, r10d
mov eax, 0x80078071
lea ecx, [r8 + r10]
movzx r10d, byte [r11 + 0xe]
mul ecx
shr edx, 0xf
imul eax, edx, 0xfff1
sub ecx, eax
mov eax, 0x80078071
mul r9d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r9d, eax
mov eax, 0x80078071
add r10d, r9d
lea r8d, [rcx + r9]
movzx r9d, byte [r11 + 0xf]
mul r8d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r8d, eax
mov eax, 0x80078071
mul r10d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r10d, eax
mov eax, 0x80078071
add r9d, r10d
lea ecx, [r8 + r10]
movzx r10d, byte [r11 + 0x10]
mul ecx
shr edx, 0xf
imul eax, edx, 0xfff1
sub ecx, eax
mov eax, 0x80078071
mul r9d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r9d, eax
mov eax, 0x80078071
add r10d, r9d
lea r8d, [rcx + r9]
movzx r9d, byte [r11 + 0x11]
mul r8d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r8d, eax
mov eax, 0x80078071
mul r10d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r10d, eax
mov eax, 0x80078071
add r9d, r10d
lea ecx, [r8 + r10]
movzx r10d, byte [r11 + 0x12]
mul ecx
shr edx, 0xf
imul eax, edx, 0xfff1
sub ecx, eax
mov eax, 0x80078071
mul r9d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r9d, eax
mov eax, 0x80078071
add r10d, r9d
lea r8d, [rcx + r9]
mul r8d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r8d, eax
mov eax, 0x80078071
mul r10d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r10d, eax
mov eax, 0x80078071
lea ecx, [r8 + r10]
mul ecx
movzx r9d, byte [r11 + 0x13]
shr edx, 0xf
add r9d, r10d
movzx r10d, byte [r11 + 0x14]
imul eax, edx, 0xfff1
sub ecx, eax
mov eax, 0x80078071
mul r9d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r9d, eax
mov eax, 0x80078071
add r10d, r9d
lea r8d, [rcx + r9]
movzx r9d, byte [r11 + 0x15]
mul r8d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r8d, eax
mov eax, 0x80078071
mul r10d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r10d, eax
mov eax, 0x80078071
add r9d, r10d
lea ecx, [r8 + r10]
movzx r10d, byte [r11 + 0x16]
mul ecx
shr edx, 0xf
imul eax, edx, 0xfff1
sub ecx, eax
mov eax, 0x80078071
mul r9d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r9d, eax
mov eax, 0x80078071
add r10d, r9d
lea r8d, [rcx + r9]
movzx r9d, byte [r11 + 0x17]
mul r8d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r8d, eax
mov eax, 0x80078071
mul r10d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r10d, eax
mov eax, 0x80078071
add r9d, r10d
lea ecx, [r8 + r10]
movzx r10d, byte [r11 + 0x18]
mul ecx
shr edx, 0xf
imul eax, edx, 0xfff1
sub ecx, eax
mov eax, 0x80078071
mul r9d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r9d, eax
mov eax, 0x80078071
add r10d, r9d
lea r8d, [rcx + r9]
mul r8d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r8d, eax
mov eax, 0x80078071
mul r10d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r10d, eax
mov eax, 0x80078071
lea ecx, [r8 + r10]
mul ecx
shr edx, 0xf
imul eax, edx, 0xfff1
sub ecx, eax
movzx r9d, byte [r11 + 0x19]
add r9d, r10d
mov eax, 0x80078071
mul r9d
movzx r10d, byte [r11 + 0x1a]
shr edx, 0xf
imul eax, edx, 0xfff1
sub r9d, eax
mov eax, 0x80078071
add r10d, r9d
lea r8d, [rcx + r9]
movzx r9d, byte [r11 + 0x1b]
mul r8d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r8d, eax
mov eax, 0x80078071
mul r10d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r10d, eax
mov eax, 0x80078071
add r9d, r10d
lea ecx, [r8 + r10]
movzx r10d, byte [r11 + 0x1c]
mul ecx
shr edx, 0xf
imul eax, edx, 0xfff1
sub ecx, eax
mov eax, 0x80078071
mul r9d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r9d, eax
mov eax, 0x80078071
add r10d, r9d
lea r8d, [rcx + r9]
movzx r9d, byte [r11 + 0x1d]
mul r8d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r8d, eax
mov eax, 0x80078071
mul r10d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r10d, eax
mov eax, 0x80078071
add r9d, r10d
lea ecx, [r8 + r10]
movzx r10d, byte [r11 + 0x1e]
mul ecx
shr edx, 0xf
imul eax, edx, 0xfff1
sub ecx, eax
mov eax, 0x80078071
mul r9d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r9d, eax
mov eax, 0x80078071
add r10d, r9d
lea r8d, [rcx + r9]
mul r8d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r8d, eax
mov eax, 0x80078071
mul r10d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r10d, eax
mov eax, 0x80078071
lea ecx, [r8 + r10]
movzx r8d, byte [r11 + 0x1f]
mul ecx
shr edx, 0xf
imul eax, edx, 0xfff1
sub ecx, eax
add r8d, r10d
mov eax, 0x80078071
mov r9d, 0x20
mul r8d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r8d, eax
mov eax, 0x80078071
add ecx, r8d
mul ecx
shr edx, 0xf
imul eax, edx, 0xfff1
mov edx, r9d
sub ecx, eax
movzx eax, word [rdi + 0xc8]
shl ecx, 0x10
or ecx, r8d
mov dword [rsp + 0x20], eax
mov dword [rdi + 0xc4], ecx
mov r8, r11
lea rcx, [rdi + 0xa0]
call sym.SafeBase64.dll_Ordinal_23
mov ecx, 1
lea r11, [rdi + 1]
xor r9d, r9d
lea ebx, [rcx + 0x34]
nop dword [rax]
nop word [rax + rax]
movzx r8d, byte [r11 - 1]
mov eax, 0x80078071
movzx r10d, byte [r11 + 1]
lea r11, [r11 + 4]
add r8d, ecx
mul r8d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r8d, eax
mov eax, 0x80078071
lea ecx, [r9 + r8]
movzx r9d, byte [r11 - 4]
mul ecx
add r9d, r8d
shr edx, 0xf
imul eax, edx, 0xfff1
sub ecx, eax
mov eax, 0x80078071
mul r9d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r9d, eax
mov eax, 0x80078071
add r10d, r9d
lea r8d, [rcx + r9]
movzx ecx, byte [r11 - 2]
mul r8d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r8d, eax
mov eax, 0x80078071
mul r10d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r10d, eax
mov eax, 0x80078071
add ecx, r10d
lea r9d, [r8 + r10]
mul r9d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r9d, eax
mov eax, 0x80078071
mul ecx
shr edx, 0xf
imul eax, edx, 0xfff1
sub ecx, eax
mov eax, 0x80078071
add r9d, ecx
mul r9d
shr edx, 0xf
imul eax, edx, 0xfff1
sub r9d, eax
sub rbx, 1
jne 0x18000ad30
movzx eax, word [rdi + 0xe]
lea r8, [rdi + 0x10]
shl r9d, 0x10
lea edx, [rbx + 0x60]
or r9d, ecx
mov dword [rsp + 0x20], eax
mov dword [rdi + 0xd4], r9d
lea rcx, [rdi + 0xa0]
lea r9d, [rbx + 0x20]
call sym.SafeBase64.dll_Ordinal_23
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rdi
ret