Function at 0x180089de0
Capabilities:
Enumerate pe sections

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x5a0
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov qword [rsp + 0x5f0], rbx
mov rax, qword [0x18013a210]
xor rax, rsp
mov qword [rsp + 0x590], rax
mov r13, rdx
mov rsi, rcx
test rdx, rdx
jne 0x180089e28
xor al, al
jmp 0x18008a5fb
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayAllocDescriptorEx]
mov r12d, eax
movsxd rbx, dword [rsi + 0x16d]
mov r10, qword [r13]
mov r9d, 1
lea r8d, [r9 + 5]
lea rdx, [rsp + 0x30]
mov rcx, r13
call qword [r10 + reloc.OLEAUT32.dll_SafeArrayGetDim]
movzx edx, word [rsp + 0x32]
mov rcx, rsi
call fcn.180081140
mov word [rsp + 0x32], ax
movzx edx, word [rsp + 0x34]
mov rcx, rsi
call fcn.180081140
mov word [rsp + 0x34], ax
cmp word [rsp + 0x30], 0
jne 0x18008a5f9
movzx ecx, word [rsp + 0x32]
cmp cx, 1
je 0x180089e9a
cmp cx, 2
jne 0x18008a5f9
movzx ecx, ax
mov dword [rsi + 0x171], ecx
movzx ecx, ax
shl rcx, 4
call fcn.1800bf7cc
mov r15, rax
mov qword [rsp + 0x38], rax
xor eax, eax
mov ebp, eax
movzx ecx, word [rsp + 0x34]
cmp ax, cx
jae 0x180089f3a
lea rdi, [r15 + 6]
nop dword [rax]
mov r10, qword [r13]
movsxd rdx, ebp
shl rdx, 4
add rdx, r15
mov r9d, 1
lea r8d, [r9 + 0xf]
mov rcx, r13
call qword [r10 + reloc.OLEAUT32.dll_SafeArrayGetDim]
movzx edx, word [rdi - 2]
mov rcx, rsi
call fcn.180081140
mov word [rdi - 2], ax
movzx edx, word [rdi]
mov rcx, rsi
call fcn.180081140
mov word [rdi], ax
mov edx, dword [rdi + 2]
mov rcx, rsi
call fcn.180081170
mov dword [rdi + 2], eax
mov edx, dword [rdi + 6]
mov rcx, rsi
call fcn.180081170
mov dword [rdi + 6], eax
inc ebp
add rdi, 0x10
movzx ecx, word [rsp + 0x34]
mov eax, ecx
cmp ebp, ecx
jl 0x180089ed0
test ebx, ebx
js 0x18008a5f1
movzx eax, cx
cmp ebx, eax
jge 0x18008a5f1
cmp dword [rsi + 0x15c], 0xffffffff
jne 0x18008a031
mov rcx, rbx
add rcx, rcx
movzx eax, byte [r15 + rcx*8]
mov dword [rsi + 0x14], eax
movzx edx, byte [r15 + rcx*8 + 1]
mov dword [rsi + 0x18], edx
test eax, eax
jne 0x18008a01b
test edx, edx
jne 0x18008a01b
mov r9, qword [r13]
mov eax, dword [r15 + rcx*8 + 0xc]
lea edx, [r12 + rax]
xor r8d, r8d
mov rcx, r13
call qword [r9 + 0x20]
xor edx, edx
lea rcx, [rsp + 0x90]
call fcn.1800800e0
nop
or edx, 0xffffffff
lea rcx, [rsp + 0x90]
call fcn.1800810c0
mov r8d, 4
mov rdx, r13
lea rcx, [rsp + 0x90]
call fcn.180081350
test al, al
je 0x180089ff2
mov r8b, 1
lea rdx, [rsp + 0x90]
mov rcx, rsi
call fcn.180080420
movzx r11d, word [rsp + 0x34]
mov dword [rsi + 0x171], r11d
lea rax, vtable.CxImage.0
mov qword [rsp + 0x90], rax
lea rcx, [rsp + 0x90]
call fcn.180080200
lea rcx, [rsp + 0x90]
call fcn.180080110
mov rcx, r15
call fcn.1800bf884
mov dword [rsi + 0x54], 5
mov al, 1
jmp 0x18008a5fb
add rbx, rbx
mov r9, qword [r13]
mov eax, dword [r15 + rbx*8 + 0xc]
lea edx, [r12 + rax]
xor r8d, r8d
mov rcx, r13
call qword [r9 + 0x20]
cmp byte [r15 + rbx*8], 0
jne 0x18008a0e8
cmp byte [r15 + rbx*8 + 1], 0
jne 0x18008a0e8
xor edx, edx
lea rcx, [rsp + 0x90]
call fcn.1800800e0
nop
mov r8d, 4
mov rdx, r13
lea rcx, [rsp + 0x90]
call fcn.180081350
test al, al
je 0x18008a0ac
mov r8b, 1
lea rdx, [rsp + 0x90]
mov rcx, rsi
call fcn.180080420
movzx r11d, word [rsp + 0x34]
mov dword [rsi + 0x171], r11d
mov edx, 5
mov rcx, rsi
call fcn.180081020
nop
lea rax, vtable.CxImage.0
mov qword [rsp + 0x90], rax
lea rcx, [rsp + 0x90]
call fcn.180080200
lea rcx, [rsp + 0x90]
call fcn.180080110
jmp 0x18008a5e5
mov rax, qword [r13]
mov r9d, 1
lea r8d, [r9 + 0x27]
lea rdx, [rsp + 0x60]
mov rcx, r13
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
lea rdx, [rsp + 0x60]
mov rcx, rsi
call fcn.1800811b0
movzx edi, word [rsp + 0x6e]
mov dword [rsp + 0x40], edi
movzx r8d, byte [r15 + rbx*8 + 1]
movzx edx, byte [r15 + rbx*8]
mov dword [rsp + 0x20], 5
mov r9d, edi
mov rcx, rsi
call fcn.1800808e0
mov r11d, dword [rsp + 0x80]
test r11d, r11d
je 0x18008a163
mov rax, qword [r13]
mov r8, r11
shl r8, 2
mov r9d, 1
lea rdx, [rsp + 0x90]
mov rcx, r13
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
jmp 0x18008a183
mov rax, qword [r13]
mov r8d, dword [rsi + 0x30]
shl r8, 2
mov r9d, 1
lea rdx, [rsp + 0x90]
mov rcx, r13
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r8d, dword [rsi + 0x30]
lea rdx, [rsp + 0x90]
mov rcx, rsi
call fcn.180083870
cmp edi, 0x18
jg 0x18008a1b9
mov rax, qword [r13]
mov r8d, dword [rsi + 0x24]
mov r9d, 1
mov rdx, qword [rsi + 0x3c]
mov rcx, r13
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
jmp 0x18008a27a
mov eax, dword [rsi + 0x18]
imul eax, dword [rsi + 0x14]
shl eax, 2
movsxd rcx, eax
call fcn.1800bf7cc
mov r14, rax
mov rdi, rax
mov r10, qword [r13]
mov ecx, dword [rsi + 0x18]
imul ecx, dword [rsi + 0x14]
shl ecx, 2
movsxd r8, ecx
mov r9d, 1
mov rdx, rax
mov rcx, r13
call qword [r10 + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, rsi
call fcn.180085eb0
test al, al
jne 0x18008a206
mov rcx, rsi
call fcn.180085ec0
xor r12d, r12d
cmp dword [rsi + 0x18], r12d
jle 0x18008a272
xor r15d, r15d
mov edx, r12d
mov rcx, rsi
call fcn.1800802d0
mov rbx, rax
mov ebp, r15d
cmp dword [rsi + 0x14], r15d
jle 0x18008a264
nop dword [rax]
movzx ecx, byte [rdi]
mov byte [rbx], cl
movzx ecx, byte [rdi + 1]
mov byte [rbx + 1], cl
movzx ecx, byte [rdi + 2]
mov byte [rbx + 2], cl
add rbx, 3
movzx r9d, byte [rdi + 3]
mov r8d, r12d
mov edx, ebp
mov rcx, rsi
call fcn.180086120
add rdi, 4
inc ebp
cmp ebp, dword [rsi + 0x14]
jl 0x18008a230
inc r12d
cmp r12d, dword [rsi + 0x18]
jl 0x18008a212
mov r15, qword [rsp + 0x38]
mov rcx, r14
call fcn.1800bf884
mov eax, dword [rsi + 0x14]
add eax, 0x1f
cdq
and edx, 0x1f
lea ebp, [rdx + rax]
sar ebp, 5
shl ebp, 2
mov ecx, dword [rsi + 0x18]
imul ecx, ebp
movsxd rbx, ecx
mov rcx, rbx
call fcn.1800bf7cc
mov r14, rax
mov r10, qword [r13]
mov r9d, 1
mov r8, rbx
mov rdx, rax
mov rcx, r13
call qword [r10 + reloc.OLEAUT32.dll_SafeArrayGetDim]
test rax, rax
je 0x18008a5dd
xor ecx, ecx
test rbx, rbx
jle 0x18008a5af
nop dword [rax]
cmp byte [rcx + r14], 0xff
jne 0x18008a2e4
inc rcx
cmp rcx, rbx
jl 0x18008a2d0
jmp 0x18008a5af
xor r12b, r12b
mov rcx, rsi
call fcn.180085eb0
test al, al
jne 0x18008a2fd
mov rcx, rsi
call fcn.180085ec0
jmp 0x18008a300
mov r12b, 1
xor ebx, ebx
mov edi, ebx
movsxd r15, ebp
mov qword [rsp + 0x48], r15
cmp dword [rsi + 0x18], ebx
jle 0x18008a373
mov rbp, rbx
cmp dword [rsi + 0x14], 0
jle 0x18008a364
nop word [rax + rax]
mov eax, ebx
cdq
and edx, 7
add eax, edx
and eax, 7
sub eax, edx
mov ecx, 7
sub cl, al
movsxd rax, ebx
sar rax, 3
add rax, rbp
movzx edx, byte [rax + r14]
shr dl, cl
test dl, 1
je 0x18008a35d
xor r9d, r9d
mov r8d, edi
mov edx, ebx
mov rcx, rsi
call fcn.180086120
mov r12b, 1
inc ebx
cmp ebx, dword [rsi + 0x14]
jl 0x18008a320
inc edi
add rbp, r15
cmp edi, dword [rsi + 0x18]
mov ebx, 0
jl 0x18008a314
test r12b, r12b
jne 0x18008a380
mov rcx, rsi
call fcn.180085f20
mov r12d, ebx
mov dword [rsp + 0x44], ebx
mov r13d, ebx
cmp dword [rsi + 0x18], 0
jle 0x18008a47f
mov r15, rbx
mov edi, dword [rsp + 0x44]
mov rax, qword [rsp + 0x48]
mov ebp, ebx
cmp dword [rsi + 0x14], 0
jle 0x18008a42c
nop dword [rax]
mov eax, ebp
cdq
and edx, 7
add eax, edx
and eax, 7
sub eax, edx
mov ecx, 7
sub cl, al
movsxd rax, ebp
sar rax, 3
add rax, r15
movzx edx, byte [rax + r14]
shr dl, cl
test dl, 1
je 0x18008a41e
mov byte [rsp + 0x20], 0
mov r9d, r13d
mov r8d, ebp
lea rdx, [rsp + 0x50]
mov rcx, rsi
call fcn.180083210
mov ebx, dword [rax]
test r12d, r12d
jne 0x18008a417
mov r8d, r13d
mov edx, ebp
mov rcx, rsi
call fcn.180083060
movzx eax, al
mov dword [rsp + 0x44], eax
mov r12d, 1
mov edi, ebx
jmp 0x18008a41e
cmp ebx, edi
je 0x18008a41e
inc r12d
inc ebp
cmp ebp, dword [rsi + 0x14]
jl 0x18008a3b0
mov rax, qword [rsp + 0x48]
xor ebx, ebx
inc r13d
add r15, rax
cmp r13d, dword [rsi + 0x18]
jl 0x18008a3a0
cmp r12d, 1
jne 0x18008a474
mov ebx, dword [rsp + 0x40]
cmp ebx, 8
jg 0x18008a5ca
mov edx, edi
mov rcx, rsi
call fcn.180080eb0
mov edx, dword [rsp + 0x44]
mov rcx, rsi
call fcn.180080ea0
mov rcx, rsi
call fcn.180085f20
mov r15, qword [rsp + 0x48]
jmp 0x18008a483
mov r15, qword [rsp + 0x48]
mov ebx, dword [rsp + 0x40]
jmp 0x18008a483
mov ebx, dword [rsp + 0x40]
cmp ebx, 8
jg 0x18008a5d1
xor edx, edx
mov r8d, 0x100
lea rcx, [rsp + 0x490]
call fcn.1800c1250
xor ecx, ecx
mov edi, ecx
cmp dword [rsi + 0x18], ecx
jle 0x18008a4ea
nop word [rax + rax]
mov ebx, ecx
cmp dword [rsi + 0x14], 0
jle 0x18008a4e3
nop dword [rax + rax]
mov r8d, edi
mov edx, ebx
mov rcx, rsi
call fcn.180083160
movzx r11d, al
mov byte [rsp + r11 + 0x490], 1
inc ebx
cmp ebx, dword [rsi + 0x14]
jl 0x18008a4c0
xor ecx, ecx
inc edi
cmp edi, dword [rsi + 0x18]
jl 0x18008a4b0
mov edi, dword [rsi + 0x30]
sub edi, 1
movsxd rax, edi
js 0x18008a5c3
nop dword [rax]
cmp byte [rsp + rax + 0x490], 0
je 0x18008a51c
dec edi
sub rax, 1
jns 0x18008a500
mov r15, qword [rsp + 0x38]
jmp 0x18008a5dd
test edi, edi
js 0x18008a5d8
xor r8b, r8b
mov ebp, ecx
cmp dword [rsi + 0x18], 0
jle 0x18008a5a0
mov r12, rcx
mov ebx, ecx
cmp dword [rsi + 0x14], 0
jle 0x18008a587
nop word [rax + rax]
mov eax, ebx
cdq
and edx, 7
add eax, edx
and eax, 7
sub eax, edx
mov ecx, 7
sub cl, al
movsxd rax, ebx
sar rax, 3
add rax, r12
movzx edx, byte [rax + r14]
shr dl, cl
test dl, 1
je 0x18008a57e
movzx r9d, dil
mov r8d, ebp
mov edx, ebx
mov rcx, rsi
call fcn.1800834e0
mov r8b, 1
inc ebx
cmp ebx, dword [rsi + 0x14]
jl 0x18008a540
xor ecx, ecx
inc ebp
add r12, r15
cmp ebp, dword [rsi + 0x18]
jl 0x18008a532
test r8b, r8b
je 0x18008a5a0
mov edx, edi
mov rcx, rsi
call fcn.180080ea0
mov rcx, rsi
call fcn.180085f20
mov r15, qword [rsp + 0x38]
jmp 0x18008a5dd
xor edx, edx
mov rcx, rsi
call fcn.180080ea0
mov rcx, rsi
call fcn.18008bc30
jmp 0x18008a5dd
mov r15, qword [rsp + 0x38]
jmp 0x18008a5dd
mov r15, qword [rsp + 0x38]
jmp 0x18008a5dd
mov r15, qword [rsp + 0x38]
jmp 0x18008a5dd
mov r15, qword [rsp + 0x38]
mov rcx, r14
call fcn.1800bf884
mov rcx, r15
call fcn.1800bf884
mov al, 1
jmp 0x18008a5fb
mov rcx, r15
call fcn.1800bf884
xor al, al
mov rcx, qword [rsp + 0x590]
xor rcx, rsp
call fcn.1800bd980
mov rbx, qword [rsp + 0x5f0]
add rsp, 0x5a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret