Function at 0x180001490
Capabilities:
Enumerate pe sections

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x2c]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r9d, r9d
lea r11, [0x180004040]
mov r8, rax
sub rbx, rax
lea r10, [rax + 1]
nop word [rax + rax]
mov eax, 0x66666667
imul r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r9d
lea ecx, [rdx + rdx*4]
shl ecx, 2
sub eax, ecx
movsxd rcx, eax
movzx eax, byte [rbx + r10 - 1]
sub al, byte [rcx + r11]
lea ecx, [r9 + 1]
mov byte [r10 - 1], al
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 1]
movzx ecx, byte [rbx + r10]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10], cl
lea ecx, [r9 + 2]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 2]
movzx ecx, byte [rbx + r10 + 1]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 1], cl
lea ecx, [r9 + 3]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 3]
movzx ecx, byte [rbx + r10 + 2]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 2], cl
lea ecx, [r9 + 4]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 4]
movzx ecx, byte [rbx + r10 + 3]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 3], cl
lea ecx, [r9 + 5]
imul ecx
sar edx, 3
mov ecx, r9d
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 5]
movzx ecx, byte [rbx + r10 + 4]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 4], cl
lea ecx, [r9 + 6]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 6]
movzx ecx, byte [rbx + r10 + 5]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 5], cl
lea ecx, [r9 + 7]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 7]
movzx ecx, byte [rbx + r10 + 6]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 6], cl
lea ecx, [r9 + 8]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 8]
movzx ecx, byte [rbx + r10 + 7]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 7], cl
lea ecx, [r9 + 9]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 9]
movzx ecx, byte [rbx + r10 + 8]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 8], cl
lea ecx, [r9 + 0xa]
imul ecx
sar edx, 3
mov eax, edx
mov ecx, r9d
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0xa]
movzx ecx, byte [rbx + r10 + 9]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 9], cl
lea ecx, [r9 + 0xb]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0xb]
movzx ecx, byte [rbx + r10 + 0xa]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0xa], cl
lea ecx, [r9 + 0xc]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0xc]
movzx ecx, byte [rbx + r10 + 0xb]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0xb], cl
lea ecx, [r9 + 0xd]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0xd]
movzx ecx, byte [rbx + r10 + 0xc]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0xc], cl
lea ecx, [r9 + 0xe]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0xe]
movzx ecx, byte [rbx + r10 + 0xd]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0xd], cl
lea ecx, [r9 + 0xf]
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
mov ecx, r9d
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0xf]
movzx ecx, byte [rbx + r10 + 0xe]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0xe], cl
lea ecx, [r9 + 0x10]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x10]
movzx ecx, byte [rbx + r10 + 0xf]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0xf], cl
lea ecx, [r9 + 0x11]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x11]
movzx ecx, byte [rbx + r10 + 0x10]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x10], cl
lea ecx, [r9 + 0x12]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x12]
movzx ecx, byte [rbx + r10 + 0x11]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x11], cl
lea ecx, [r9 + 0x13]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x13]
movzx ecx, byte [rbx + r10 + 0x12]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x12], cl
lea ecx, [r9 + 0x14]
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx ecx, byte [rbx + r10 + 0x13]
mov eax, 1
sub eax, edx
lea eax, [rax + rax*4]
lea eax, [r9 + rax*4]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x13], cl
lea ecx, [r9 + 0x15]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x15]
movzx ecx, byte [rbx + r10 + 0x14]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x14], cl
lea ecx, [r9 + 0x16]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x16]
movzx ecx, byte [rbx + r10 + 0x15]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x15], cl
lea ecx, [r9 + 0x17]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x17]
movzx ecx, byte [rbx + r10 + 0x16]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x16], cl
lea ecx, [r9 + 0x18]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x18]
movzx ecx, byte [rbx + r10 + 0x17]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x17], cl
lea ecx, [r9 + 0x19]
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
mov ecx, r9d
sub ecx, eax
lea eax, [rcx + 0x19]
movzx ecx, byte [rbx + r10 + 0x18]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x18], cl
lea ecx, [r9 + 0x1a]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x1a]
movzx ecx, byte [rbx + r10 + 0x19]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x19], cl
lea ecx, [r9 + 0x1b]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x1b]
movzx ecx, byte [rbx + r10 + 0x1a]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x1a], cl
lea ecx, [r9 + 0x1c]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x1c]
movzx ecx, byte [rbx + r10 + 0x1b]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x1b], cl
lea ecx, [r9 + 0x1d]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x1d]
movzx ecx, byte [rbx + r10 + 0x1c]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x1c], cl
lea ecx, [r9 + 0x1e]
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
mov ecx, r9d
sub ecx, eax
lea eax, [rcx + 0x1e]
movzx ecx, byte [rbx + r10 + 0x1d]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x1d], cl
lea ecx, [r9 + 0x1f]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x1f]
movzx ecx, byte [rbx + r10 + 0x1e]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x1e], cl
lea ecx, [r9 + 0x20]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x20]
movzx ecx, byte [r10 + rbx + 0x1f]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x1f], cl
lea ecx, [r9 + 0x21]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x21]
movzx ecx, byte [r10 + rbx + 0x20]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x20], cl
lea ecx, [r9 + 0x22]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x22]
movzx ecx, byte [r10 + rbx + 0x21]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x21], cl
lea ecx, [r9 + 0x23]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x23]
movzx ecx, byte [rbx + r10 + 0x22]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x22], cl
lea ecx, [r9 + 0x24]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x24]
movzx ecx, byte [rbx + r10 + 0x23]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x23], cl
lea ecx, [r9 + 0x25]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x25]
movzx ecx, byte [rbx + r10 + 0x24]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x24], cl
lea ecx, [r9 + 0x26]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x26]
movzx ecx, byte [rbx + r10 + 0x25]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x25], cl
lea ecx, [r9 + 0x27]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x27]
movzx ecx, byte [rbx + r10 + 0x26]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x26], cl
lea ecx, [r9 + 0x28]
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 2
sub eax, edx
lea eax, [rax + rax*4]
lea eax, [r9 + rax*4]
cdqe
movzx ecx, byte [rbx + r10 + 0x27]
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x27], cl
lea ecx, [r9 + 0x29]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x29]
movzx ecx, byte [rbx + r10 + 0x28]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x28], cl
lea ecx, [r9 + 0x2a]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x2a]
movzx ecx, byte [rbx + r10 + 0x29]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x29], cl
lea ecx, [r9 + 0x2b]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x2b]
movzx ecx, byte [rbx + r10 + 0x2a]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x2a], cl
lea ecx, [r9 + 0x2c]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x2c]
movzx ecx, byte [rbx + r10 + 0x2b]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x2b], cl
lea ecx, [r9 + 0x2d]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x2d]
cdqe
movzx ecx, byte [rbx + r10 + 0x2c]
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x2c], cl
lea ecx, [r9 + 0x2e]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x2e]
movzx ecx, byte [rbx + r10 + 0x2d]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x2d], cl
lea ecx, [r9 + 0x2f]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x2f]
movzx ecx, byte [rbx + r10 + 0x2e]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x2e], cl
lea ecx, [r9 + 0x30]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x30]
movzx ecx, byte [rbx + r10 + 0x2f]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x2f], cl
lea ecx, [r9 + 0x31]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x31]
movzx ecx, byte [rbx + r10 + 0x30]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x30], cl
lea ecx, [r9 + 0x32]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x32]
movzx ecx, byte [rbx + r10 + 0x31]
cdqe
sub cl, byte [rax + r11]
mov eax, 0x66666667
mov byte [r10 + 0x31], cl
lea r10, [r10 + 0x34]
lea ecx, [r9 + 0x33]
imul ecx
mov ecx, r9d
add r9d, 0x34
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x33]
movzx ecx, byte [rbx + r10 - 2]
cdqe
sub cl, byte [rax + r11]
mov byte [r10 - 2], cl
cmp r9d, 0x34
jb 0x1800014d0
mov rax, r8
add rsp, 0x20
pop rbx
ret