Function at 0x180073388
Capabilities:
Enumerate pe sections

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rbp
mov qword [r11 + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
xor r13d, r13d
mov r15d, edx
mov rsi, r9
mov r14, r8
mov rbp, rcx
test r8, r8
je 0x180073685
test r9, r9
je 0x180073685
mov dword [r9], r15d
mov rax, qword [rcx + 0x68]
mov qword [r11 - 0x40], r13
or dword [rsp + 0x40], 0xffffffff
mov rcx, qword [rax + 0x20]
mov eax, dword [rcx + r15*4]
mov qword [r9 + 8], rax
movzx eax, word [r8 + 4]
mov word [r9 + 0x10], ax
movzx eax, word [r8 + 6]
mov word [r9 + 0x12], ax
movzx eax, word [r8 + 8]
mov word [r9 + 0x14], ax
movzx eax, word [r8 + 0xa]
mov word [r9 + 0x16], ax
movzx ecx, word [r8 + 0xe]
movzx edx, word [r8 + 0xc]
mov eax, ecx
shr eax, 9
add eax, 0x50
mov dword [rsp + 0x34], eax
mov eax, ecx
shr eax, 5
and ecx, 0x1f
and eax, 0xf
mov dword [rsp + 0x2c], ecx
dec eax
lea rcx, [r11 - 0x58]
mov dword [rsp + 0x30], eax
mov eax, edx
shr eax, 0xb
mov dword [rsp + 0x28], eax
mov eax, edx
shr eax, 5
and edx, 0x1f
and eax, 0x3f
add edx, edx
mov dword [rsp + 0x24], eax
mov dword [rsp + 0x20], edx
call qword [sym.imp.msvcrt.dll__mktime64]
mov qword [rsi + 0x18], rax
mov edi, 0x1ff
mov eax, dword [r14 + 0x10]
lea rdx, [r14 + 0x2e]
mov dword [rsi + 0x20], eax
mov eax, dword [r14 + 0x14]
mov qword [rsi + 0x28], rax
mov eax, dword [r14 + 0x18]
mov qword [rsi + 0x30], rax
movzx eax, word [r14 + 0x24]
mov word [rsi + 0x38], ax
mov eax, dword [r14 + 0x26]
mov dword [rsi + 0x3c], eax
mov eax, dword [r14 + 0x2a]
mov qword [rsi + 0x40], rax
mov eax, edi
movzx ecx, word [r14 + 0x1c]
cmp ecx, edi
cmovb eax, ecx
lea rcx, [rsi + 0x58]
mov r8d, eax
mov ebx, eax
call sub.msvcrt.dll_memcpy
mov byte [rbx + rsi + 0x58], r13b
movzx eax, word [r14 + 0x20]
cmp eax, edi
cmovb edi, eax
mov dword [rsi + 0x48], edi
movzx edx, word [r14 + 0x1e]
movzx ecx, word [r14 + 0x1c]
add rdx, r14
add rcx, 0x2e
mov r8d, edi
add rdx, rcx
lea rcx, [rsi + 0x258]
call sub.msvcrt.dll_memcpy
mov edx, r15d
mov byte [rdi + rsi + 0x258], r13b
mov rcx, rbp
call fcn.18007332c
mov dword [rsi + 0x4c], eax
mov r8, qword [rbp + 0x68]
lea rcx, [rbp + 0x10]
test r8, r8
je 0x180073528
cmp r15d, dword [rcx]
jae 0x180073528
mov rax, qword [r8 + 0x20]
mov edx, dword [rax + r15*4]
add rdx, qword [r8]
je 0x180073528
test byte [rdx + 8], 0x41
mov eax, r13d
setne al
jmp 0x180073532
mov dword [rbp + 0x1c], 0x18
mov eax, r13d
mov dword [rsi + 0x50], eax
mov r11d, 8
mov rdx, qword [rbp + 0x68]
test rdx, rdx
je 0x180073594
cmp r15d, dword [rcx]
jae 0x180073594
mov rax, qword [rdx + 0x20]
mov ecx, dword [rax + r15*4]
add rcx, qword [rdx]
je 0x180073594
movzx eax, word [rcx + 8]
cmp word [rcx + 0xa], r13w
je 0x180073571
cmp word [rcx + 0xa], r11w
je 0x180073571
mov dword [rbp + 0x1c], 4
jmp 0x18007359b
test al, 0x41
je 0x18007357e
mov dword [rbp + 0x1c], 5
jmp 0x18007359b
mov edi, 1
test al, 0x20
je 0x180073590
mov dword [rbp + 0x1c], 6
jmp 0x1800735a0
mov eax, edi
jmp 0x1800735a3
mov dword [rbp + 0x1c], 0x18
mov edi, 1
mov eax, r13d
mov rcx, qword [rsi + 0x28]
mov ebx, 0xffffffff
cmp rcx, qword [rsi + 0x30]
mov dword [rsi + 0x54], eax
cmovbe rcx, qword [rsi + 0x30]
mov rax, qword [rsi + 0x40]
cmp rcx, rax
cmova rax, rcx
cmp rax, rbx
jne 0x180073613
movzx edx, word [r14 + 0x1e]
test edx, edx
je 0x180073613
movzx r9d, word [r14 + 0x1c]
add r9, 0x2e
add r9, r14
cmp edx, 4
jb 0x18007367c
movzx r8d, word [r9 + 2]
mov eax, edx
lea rcx, [r8 + 4]
cmp rcx, rax
ja 0x18007367c
cmp word [r9], di
je 0x180073617
add r9, 4
mov eax, 0xfffffffc
add r9, r8
sub eax, r8d
add edx, eax
jne 0x1800735dd
mov eax, edi
jmp 0x180073693
lea rdx, [r9 + 4]
cmp qword [rsi + 0x30], rbx
jne 0x18007363d
cmp r8d, r11d
jb 0x18007367c
mov ecx, dword [rdx + 4]
mov eax, dword [rdx]
add rdx, r11
shl rcx, 0x20
or rcx, rax
mov qword [rsi + 0x30], rcx
add r8d, 0xfffffff8
cmp qword [rsi + 0x28], rbx
jne 0x18007365f
cmp r8d, r11d
jb 0x18007367c
mov ecx, dword [rdx + 4]
mov eax, dword [rdx]
add rdx, r11
shl rcx, 0x20
or rcx, rax
mov qword [rsi + 0x28], rcx
add r8d, 0xfffffff8
cmp qword [rsi + 0x40], rbx
jne 0x180073613
cmp r8d, r11d
jb 0x18007367c
mov ecx, dword [rdx + 4]
mov eax, dword [rdx]
shl rcx, 0x20
or rcx, rax
mov qword [rsi + 0x40], rcx
jmp 0x180073613
mov dword [rbp + 0x1c], 9
jmp 0x180073691
test rbp, rbp
je 0x180073691
mov dword [rcx + 0x1c], 0x18
xor eax, eax
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret