Function at 0x18006c3ec
Capabilities:
Enumerate pe sections

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rbp
mov qword [r11 + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
xor r13d, r13d
mov r15d, edx
mov rsi, r9
mov r14, r8
mov rbp, rcx
test r8, r8
je 0x18006c6e9
test r9, r9
je 0x18006c6e9
mov dword [r9], r15d
mov rax, qword [rcx + 0x68]
mov qword [r11 - 0x40], r13
or dword [rsp + 0x40], 0xffffffff
mov rcx, qword [rax + 0x20]
mov eax, dword [rcx + r15*4]
mov qword [r9 + 8], rax
movzx eax, word [r8 + 4]
mov word [r9 + 0x10], ax
movzx eax, word [r8 + 6]
mov word [r9 + 0x12], ax
movzx eax, word [r8 + 8]
mov word [r9 + 0x14], ax
movzx eax, word [r8 + 0xa]
mov word [r9 + 0x16], ax
movzx ecx, word [r8 + 0xe]
movzx edx, word [r8 + 0xc]
mov eax, ecx
shr eax, 9
add eax, 0x50
mov dword [rsp + 0x34], eax
mov eax, ecx
shr eax, 5
and ecx, 0x1f
and eax, 0xf
mov dword [rsp + 0x2c], ecx
dec eax
lea rcx, [r11 - 0x58]
mov dword [rsp + 0x30], eax
mov eax, edx
shr eax, 0xb
mov dword [rsp + 0x28], eax
mov eax, edx
shr eax, 5
and edx, 0x1f
and eax, 0x3f
add edx, edx
mov dword [rsp + 0x24], eax
mov dword [rsp + 0x20], edx
call qword [sym.imp.msvcrt.dll__mktime64]
mov qword [rsi + 0x18], rax
mov edi, 0x1ff
mov eax, dword [r14 + 0x10]
lea rdx, [r14 + 0x2e]
mov dword [rsi + 0x20], eax
mov eax, dword [r14 + 0x14]
mov qword [rsi + 0x28], rax
mov eax, dword [r14 + 0x18]
mov qword [rsi + 0x30], rax
movzx eax, word [r14 + 0x24]
mov word [rsi + 0x38], ax
mov eax, dword [r14 + 0x26]
mov dword [rsi + 0x3c], eax
mov eax, dword [r14 + 0x2a]
mov qword [rsi + 0x40], rax
mov eax, edi
movzx ecx, word [r14 + 0x1c]
cmp ecx, edi
cmovb eax, ecx
lea rcx, [rsi + 0x58]
mov r8d, eax
mov ebx, eax
call sub.msvcrt.dll_memcpy
mov byte [rbx + rsi + 0x58], r13b
movzx eax, word [r14 + 0x20]
cmp eax, edi
cmovb edi, eax
mov dword [rsi + 0x48], edi
movzx edx, word [r14 + 0x1e]
movzx ecx, word [r14 + 0x1c]
add rdx, r14
add rcx, 0x2e
mov r8d, edi
add rdx, rcx
lea rcx, [rsi + 0x258]
call sub.msvcrt.dll_memcpy
mov edx, r15d
mov byte [rdi + rsi + 0x258], r13b
mov rcx, rbp
call fcn.18006c390
mov dword [rsi + 0x4c], eax
mov r8, qword [rbp + 0x68]
lea rcx, [rbp + 0x10]
test r8, r8
je 0x18006c58c
cmp r15d, dword [rcx]
jae 0x18006c58c
mov rax, qword [r8 + 0x20]
mov edx, dword [rax + r15*4]
add rdx, qword [r8]
je 0x18006c58c
test byte [rdx + 8], 0x41
mov eax, r13d
setne al
jmp 0x18006c596
mov dword [rbp + 0x1c], 0x18
mov eax, r13d
mov dword [rsi + 0x50], eax
mov r11d, 8
mov rdx, qword [rbp + 0x68]
test rdx, rdx
je 0x18006c5f8
cmp r15d, dword [rcx]
jae 0x18006c5f8
mov rax, qword [rdx + 0x20]
mov ecx, dword [rax + r15*4]
add rcx, qword [rdx]
je 0x18006c5f8
movzx eax, word [rcx + 8]
cmp word [rcx + 0xa], r13w
je 0x18006c5d5
cmp word [rcx + 0xa], r11w
je 0x18006c5d5
mov dword [rbp + 0x1c], 4
jmp 0x18006c5ff
test al, 0x41
je 0x18006c5e2
mov dword [rbp + 0x1c], 5
jmp 0x18006c5ff
mov edi, 1
test al, 0x20
je 0x18006c5f4
mov dword [rbp + 0x1c], 6
jmp 0x18006c604
mov eax, edi
jmp 0x18006c607
mov dword [rbp + 0x1c], 0x18
mov edi, 1
mov eax, r13d
mov rcx, qword [rsi + 0x28]
mov ebx, 0xffffffff
cmp rcx, qword [rsi + 0x30]
mov dword [rsi + 0x54], eax
cmovbe rcx, qword [rsi + 0x30]
mov rax, qword [rsi + 0x40]
cmp rcx, rax
cmova rax, rcx
cmp rax, rbx
jne 0x18006c677
movzx edx, word [r14 + 0x1e]
test edx, edx
je 0x18006c677
movzx r9d, word [r14 + 0x1c]
add r9, 0x2e
add r9, r14
cmp edx, 4
jb 0x18006c6e0
movzx r8d, word [r9 + 2]
mov eax, edx
lea rcx, [r8 + 4]
cmp rcx, rax
ja 0x18006c6e0
cmp word [r9], di
je 0x18006c67b
add r9, 4
mov eax, 0xfffffffc
add r9, r8
sub eax, r8d
add edx, eax
jne 0x18006c641
mov eax, edi
jmp 0x18006c6f7
lea rdx, [r9 + 4]
cmp qword [rsi + 0x30], rbx
jne 0x18006c6a1
cmp r8d, r11d
jb 0x18006c6e0
mov ecx, dword [rdx + 4]
mov eax, dword [rdx]
add rdx, r11
shl rcx, 0x20
or rcx, rax
mov qword [rsi + 0x30], rcx
add r8d, 0xfffffff8
cmp qword [rsi + 0x28], rbx
jne 0x18006c6c3
cmp r8d, r11d
jb 0x18006c6e0
mov ecx, dword [rdx + 4]
mov eax, dword [rdx]
add rdx, r11
shl rcx, 0x20
or rcx, rax
mov qword [rsi + 0x28], rcx
add r8d, 0xfffffff8
cmp qword [rsi + 0x40], rbx
jne 0x18006c677
cmp r8d, r11d
jb 0x18006c6e0
mov ecx, dword [rdx + 4]
mov eax, dword [rdx]
shl rcx, 0x20
or rcx, rax
mov qword [rsi + 0x40], rcx
jmp 0x18006c677
mov dword [rbp + 0x1c], 9
jmp 0x18006c6f5
test rbp, rbp
je 0x18006c6f5
mov dword [rcx + 0x1c], 0x18
xor eax, eax
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret