Function at 0x18006bfe0
Capabilities:
Enumerate pe sections

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rbp
mov qword [r11 + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
xor r13d, r13d
mov r15d, edx
mov rsi, r9
mov r14, r8
mov rbp, rcx
test r8, r8
je 0x18006c2dd
test r9, r9
je 0x18006c2dd
mov dword [r9], r15d
mov rax, qword [rcx + 0x68]
mov qword [r11 - 0x40], r13
or dword [rsp + 0x40], 0xffffffff
mov rcx, qword [rax + 0x20]
mov eax, dword [rcx + r15*4]
mov qword [r9 + 8], rax
movzx eax, word [r8 + 4]
mov word [r9 + 0x10], ax
movzx eax, word [r8 + 6]
mov word [r9 + 0x12], ax
movzx eax, word [r8 + 8]
mov word [r9 + 0x14], ax
movzx eax, word [r8 + 0xa]
mov word [r9 + 0x16], ax
movzx ecx, word [r8 + 0xe]
movzx edx, word [r8 + 0xc]
mov eax, ecx
shr eax, 9
add eax, 0x50
mov dword [rsp + 0x34], eax
mov eax, ecx
shr eax, 5
and ecx, 0x1f
and eax, 0xf
mov dword [rsp + 0x2c], ecx
dec eax
lea rcx, [r11 - 0x58]
mov dword [rsp + 0x30], eax
mov eax, edx
shr eax, 0xb
mov dword [rsp + 0x28], eax
mov eax, edx
shr eax, 5
and edx, 0x1f
and eax, 0x3f
add edx, edx
mov dword [rsp + 0x24], eax
mov dword [rsp + 0x20], edx
call qword [sym.imp.msvcrt.dll__mktime64]
mov qword [rsi + 0x18], rax
mov edi, 0x1ff
mov eax, dword [r14 + 0x10]
lea rdx, [r14 + 0x2e]
mov dword [rsi + 0x20], eax
mov eax, dword [r14 + 0x14]
mov qword [rsi + 0x28], rax
mov eax, dword [r14 + 0x18]
mov qword [rsi + 0x30], rax
movzx eax, word [r14 + 0x24]
mov word [rsi + 0x38], ax
mov eax, dword [r14 + 0x26]
mov dword [rsi + 0x3c], eax
mov eax, dword [r14 + 0x2a]
mov qword [rsi + 0x40], rax
mov eax, edi
movzx ecx, word [r14 + 0x1c]
cmp ecx, edi
cmovb eax, ecx
lea rcx, [rsi + 0x58]
mov r8d, eax
mov ebx, eax
call sub.msvcrt.dll_memcpy
mov byte [rbx + rsi + 0x58], r13b
movzx eax, word [r14 + 0x20]
cmp eax, edi
cmovb edi, eax
mov dword [rsi + 0x48], edi
movzx edx, word [r14 + 0x1e]
movzx ecx, word [r14 + 0x1c]
add rdx, r14
add rcx, 0x2e
mov r8d, edi
add rdx, rcx
lea rcx, [rsi + 0x258]
call sub.msvcrt.dll_memcpy
mov edx, r15d
mov byte [rdi + rsi + 0x258], r13b
mov rcx, rbp
call fcn.18006bf84
mov dword [rsi + 0x4c], eax
mov r8, qword [rbp + 0x68]
lea rcx, [rbp + 0x10]
test r8, r8
je 0x18006c180
cmp r15d, dword [rcx]
jae 0x18006c180
mov rax, qword [r8 + 0x20]
mov edx, dword [rax + r15*4]
add rdx, qword [r8]
je 0x18006c180
test byte [rdx + 8], 0x41
mov eax, r13d
setne al
jmp 0x18006c18a
mov dword [rbp + 0x1c], 0x18
mov eax, r13d
mov dword [rsi + 0x50], eax
mov r11d, 8
mov rdx, qword [rbp + 0x68]
test rdx, rdx
je 0x18006c1ec
cmp r15d, dword [rcx]
jae 0x18006c1ec
mov rax, qword [rdx + 0x20]
mov ecx, dword [rax + r15*4]
add rcx, qword [rdx]
je 0x18006c1ec
movzx eax, word [rcx + 8]
cmp word [rcx + 0xa], r13w
je 0x18006c1c9
cmp word [rcx + 0xa], r11w
je 0x18006c1c9
mov dword [rbp + 0x1c], 4
jmp 0x18006c1f3
test al, 0x41
je 0x18006c1d6
mov dword [rbp + 0x1c], 5
jmp 0x18006c1f3
mov edi, 1
test al, 0x20
je 0x18006c1e8
mov dword [rbp + 0x1c], 6
jmp 0x18006c1f8
mov eax, edi
jmp 0x18006c1fb
mov dword [rbp + 0x1c], 0x18
mov edi, 1
mov eax, r13d
mov rcx, qword [rsi + 0x28]
mov ebx, 0xffffffff
cmp rcx, qword [rsi + 0x30]
mov dword [rsi + 0x54], eax
cmovbe rcx, qword [rsi + 0x30]
mov rax, qword [rsi + 0x40]
cmp rcx, rax
cmova rax, rcx
cmp rax, rbx
jne 0x18006c26b
movzx edx, word [r14 + 0x1e]
test edx, edx
je 0x18006c26b
movzx r9d, word [r14 + 0x1c]
add r9, 0x2e
add r9, r14
cmp edx, 4
jb 0x18006c2d4
movzx r8d, word [r9 + 2]
mov eax, edx
lea rcx, [r8 + 4]
cmp rcx, rax
ja 0x18006c2d4
cmp word [r9], di
je 0x18006c26f
add r9, 4
mov eax, 0xfffffffc
add r9, r8
sub eax, r8d
add edx, eax
jne 0x18006c235
mov eax, edi
jmp 0x18006c2eb
lea rdx, [r9 + 4]
cmp qword [rsi + 0x30], rbx
jne 0x18006c295
cmp r8d, r11d
jb 0x18006c2d4
mov ecx, dword [rdx + 4]
mov eax, dword [rdx]
add rdx, r11
shl rcx, 0x20
or rcx, rax
mov qword [rsi + 0x30], rcx
add r8d, 0xfffffff8
cmp qword [rsi + 0x28], rbx
jne 0x18006c2b7
cmp r8d, r11d
jb 0x18006c2d4
mov ecx, dword [rdx + 4]
mov eax, dword [rdx]
add rdx, r11
shl rcx, 0x20
or rcx, rax
mov qword [rsi + 0x28], rcx
add r8d, 0xfffffff8
cmp qword [rsi + 0x40], rbx
jne 0x18006c26b
cmp r8d, r11d
jb 0x18006c2d4
mov ecx, dword [rdx + 4]
mov eax, dword [rdx]
shl rcx, 0x20
or rcx, rax
mov qword [rsi + 0x40], rcx
jmp 0x18006c26b
mov dword [rbp + 0x1c], 9
jmp 0x18006c2e9
test rbp, rbp
je 0x18006c2e9
mov dword [rcx + 0x1c], 0x18
xor eax, eax
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret