{"type": "func", "start": 6443771280, "end": 6443771348, "name": "_FindPESection", "pseudocode": "// \n// _FindPESection from 0x180142590 to 0x1801425d4 (68 bytes)\n// \n// 1 xrefs:\n// > _IsNonwritableInCurrentImage @ 0x180142609\n// \n// This function is hookable on this platform!\n// \n// Using BromaIDA 8.0.0 @ https://github.com/Stazzical/BromaIDA\n// Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings\n// \n\n__int64 __fastcall FindPESection(__int64 a1, unsigned __int64 a2)\n{\n  unsigned int v2; // r9d\n  __int64 v3; // r8\n  __int64 result; // rax\n  unsigned __int64 v6; // rdx\n\n  v2 = 0;\n  v3 = a1 + *(int *)(a1 + 60);\n  result = v3 + *(unsigned __int16 *)(v3 + 20) + 24LL;\n  if ( !*(_WORD *)(v3 + 6) )\n    return 0;\n  while ( 1 )\n  {\n    v6 = *(unsigned int *)(result + 12);\n    if ( a2 >= v6 && a2 < (unsigned int)(v6 + *(_DWORD *)(result + 8)) )\n      break;\n    ++v2;\n    result += 40;\n    if ( v2 >= *(unsigned __int16 *)(v3 + 6) )\n      return 0;\n  }\n  return result;\n}", "assembly": "; \n; _FindPESection from 0x180142590 to 0x1801425d4 (68 bytes)\n; \n; 1 xrefs:\n; > _IsNonwritableInCurrentImage @ 0x180142609\n; \n; This function is hookable on this platform!\n; \n; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA\n; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings\n; \n\nmovsxd  r8, dword ptr [rcx+3Ch]                                        ; +0x0, 0x180142590\nxor     r9d, r9d                                                       ; +0x4, 0x180142594\nadd     r8, rcx                                                        ; +0x7, 0x180142597\nmov     r10, rdx                                                       ; +0xa, 0x18014259a\nmovzx   eax, word ptr [r8+14h]                                         ; +0xd, 0x18014259d\nmovzx   r11d, word ptr [r8+6]                                          ; +0x12, 0x1801425a2\nadd     rax, 18h                                                       ; +0x17, 0x1801425a7\nadd     rax, r8                                                        ; +0x1b, 0x1801425ab\ntest    r11d, r11d                                                     ; +0x1e, 0x1801425ae\njz      short loc_1801425D1                                            ; +0x21, 0x1801425b1\nmov     edx, [rax+0Ch]                                                 ; +0x23, 0x1801425b3\ncmp     r10, rdx                                                       ; +0x26, 0x1801425b6\njb      short loc_1801425C5                                            ; +0x29, 0x1801425b9\nmov     ecx, [rax+8]                                                   ; +0x2b, 0x1801425bb\nadd     ecx, edx                                                       ; +0x2e, 0x1801425be\ncmp     r10, rcx                                                       ; +0x30, 0x1801425c0\njb      short locret_1801425D3                                         ; +0x33, 0x1801425c3\ninc     r9d                                                            ; +0x35, 0x1801425c5\nadd     rax, 28h ; '('                                                 ; +0x38, 0x1801425c8\ncmp     r9d, r11d                                                      ; +0x3c, 0x1801425cc\njb      short loc_1801425B3                                            ; +0x3f, 0x1801425cf\nxor     eax, eax                                                       ; +0x41, 0x1801425d1\nretn                                                                   ; +0x43, 0x1801425d3", "xrefs": ["_IsNonwritableInCurrentImage @ 0x180142609"], "is_objc": false, "is_arm32": false, "is_arm64": false, "bida_info": "8.0.0 @ https://github.com/Stazzical/BromaIDA", "bindings_info": "commit ba9f177b at Thu Jul 16 22:52:06 2026 from https://github.com/geode-sdk/bindings"}