Function at 0x140009d20
Capabilities:
Enumerate pe sections

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, 8
mov rcx, rax
lea r8d, [rdx + 0x50]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor r9d, r9d
lea r11, [0x140026ae0]
mov r8, rax
sub rbx, rax
lea r10, [rax + 2]
nop word [rax + rax]
mov eax, 0x66666667
imul r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, r9d
lea ecx, [rdx + rdx*4]
shl ecx, 2
sub eax, ecx
movsxd rcx, eax
movzx eax, byte [rcx + r11]
movzx ecx, word [r10 + rbx - 2]
sub cx, ax
mov eax, 0x66666667
mov word [r10 - 2], cx
lea ecx, [r9 + 1]
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 1]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx]
sub ax, cx
lea ecx, [r9 + 2]
mov word [r10], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 2]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 2]
sub ax, cx
lea ecx, [r9 + 3]
mov word [r10 + 2], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 3]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 4]
sub ax, cx
lea ecx, [r9 + 4]
mov word [r10 + 4], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 4]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 6]
sub ax, cx
lea ecx, [r9 + 5]
mov word [r10 + 6], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 5]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 8]
sub ax, cx
lea ecx, [r9 + 6]
mov word [r10 + 8], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 6]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0xa]
sub ax, cx
lea ecx, [r9 + 7]
mov word [r10 + 0xa], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 7]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0xc]
sub ax, cx
lea ecx, [r9 + 8]
mov word [r10 + 0xc], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 8]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0xe]
sub ax, cx
lea ecx, [r9 + 9]
mov word [r10 + 0xe], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 9]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x10]
sub ax, cx
lea ecx, [r9 + 0xa]
mov word [r10 + 0x10], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0xa]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x12]
sub ax, cx
lea ecx, [r9 + 0xb]
mov word [r10 + 0x12], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0xb]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x14]
sub ax, cx
lea ecx, [r9 + 0xc]
mov word [r10 + 0x14], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0xc]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x16]
sub ax, cx
lea ecx, [r9 + 0xd]
mov word [r10 + 0x16], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0xd]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x18]
sub ax, cx
lea ecx, [r9 + 0xe]
mov word [r10 + 0x18], ax
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
mov ecx, r9d
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0xe]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x1a]
sub ax, cx
lea ecx, [r9 + 0xf]
mov word [r10 + 0x1a], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0xf]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x1c]
sub ax, cx
lea ecx, [r9 + 0x10]
mov word [r10 + 0x1c], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x10]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x1e]
sub ax, cx
lea ecx, [r9 + 0x11]
mov word [r10 + 0x1e], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x11]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x20]
sub ax, cx
lea ecx, [r9 + 0x12]
mov word [r10 + 0x20], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x12]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x22]
sub ax, cx
lea ecx, [r9 + 0x13]
mov word [r10 + 0x22], ax
mov eax, 0x66666667
imul ecx
sar edx, 3
mov ecx, r9d
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x13]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x24]
sub ax, cx
lea ecx, [r9 + 0x14]
mov word [r10 + 0x24], ax
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub eax, edx
lea eax, [rax + rax*4]
lea eax, [r9 + rax*4]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x26]
sub ax, cx
lea ecx, [r9 + 0x15]
mov word [r10 + 0x26], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x15]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x28]
sub ax, cx
lea ecx, [r9 + 0x16]
mov word [r10 + 0x28], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x16]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x2a]
sub ax, cx
lea ecx, [r9 + 0x17]
mov word [r10 + 0x2a], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x17]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x2c]
sub ax, cx
mov word [r10 + 0x2c], ax
lea ecx, [r9 + 0x18]
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x18]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x2e]
sub ax, cx
lea ecx, [r9 + 0x19]
mov word [r10 + 0x2e], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x19]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x30]
sub ax, cx
lea ecx, [r9 + 0x1a]
mov word [r10 + 0x30], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x1a]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x32]
sub ax, cx
lea ecx, [r9 + 0x1b]
mov word [r10 + 0x32], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x1b]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x34]
sub ax, cx
lea ecx, [r9 + 0x1c]
mov word [r10 + 0x34], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x1c]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x36]
sub ax, cx
lea ecx, [r9 + 0x1d]
mov word [r10 + 0x36], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x1d]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x38]
sub ax, cx
lea ecx, [r9 + 0x1e]
mov word [r10 + 0x38], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x1e]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x3a]
sub ax, cx
lea ecx, [r9 + 0x1f]
mov word [r10 + 0x3a], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x1f]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x3c]
sub ax, cx
lea ecx, [r9 + 0x20]
mov word [r10 + 0x3c], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x20]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [rbx + r10 + 0x3e]
sub ax, cx
lea ecx, [r9 + 0x21]
mov word [r10 + 0x3e], ax
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
mov ecx, r9d
sub ecx, eax
lea eax, [rcx + 0x21]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [rbx + r10 + 0x40]
sub ax, cx
lea ecx, [r9 + 0x22]
mov word [r10 + 0x40], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x22]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [rbx + r10 + 0x42]
sub ax, cx
lea ecx, [r9 + 0x23]
mov word [r10 + 0x42], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x23]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [rbx + r10 + 0x44]
sub ax, cx
lea ecx, [r9 + 0x24]
mov word [r10 + 0x44], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x24]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [rbx + r10 + 0x46]
sub ax, cx
lea ecx, [r9 + 0x25]
mov word [r10 + 0x46], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x25]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x48]
sub ax, cx
lea ecx, [r9 + 0x26]
mov word [r10 + 0x48], ax
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
mov ecx, r9d
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x26]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x4a]
sub ax, cx
lea ecx, [r9 + 0x27]
mov word [r10 + 0x4a], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x27]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x4c]
sub ax, cx
lea ecx, [r9 + 0x28]
mov word [r10 + 0x4c], ax
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 2
sub eax, edx
lea eax, [rax + rax*4]
lea eax, [r9 + rax*4]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x4e]
sub ax, cx
lea ecx, [r9 + 0x29]
mov word [r10 + 0x4e], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x29]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x50]
sub ax, cx
lea ecx, [r9 + 0x2a]
mov word [r10 + 0x50], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x2a]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx + 0x52]
sub ax, cx
lea ecx, [r9 + 0x2b]
mov word [r10 + 0x52], ax
mov eax, 0x66666667
imul ecx
mov ecx, r9d
lea r10, [r10 + 0x58]
sar edx, 3
add r9d, 0x2c
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
lea eax, [rcx + 0x2b]
cdqe
movzx ecx, byte [rax + r11]
movzx eax, word [r10 + rbx - 4]
sub ax, cx
mov word [r10 - 4], ax
cmp r9d, 0x2c
jb 0x140009d60
mov rax, r8
add rsp, 0x20
pop rbx
ret