Function at 0x18006ba9c
Capabilities:
Enumerate pe sections

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rbp
mov qword [r11 + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
xor r13d, r13d
mov r15d, edx
mov rsi, r9
mov r14, r8
mov rbp, rcx
test r8, r8
je 0x18006bd99
test r9, r9
je 0x18006bd99
mov dword [r9], r15d
mov rax, qword [rcx + 0x68]
mov qword [r11 - 0x40], r13
or dword [rsp + 0x40], 0xffffffff
mov rcx, qword [rax + 0x20]
mov eax, dword [rcx + r15*4]
mov qword [r9 + 8], rax
movzx eax, word [r8 + 4]
mov word [r9 + 0x10], ax
movzx eax, word [r8 + 6]
mov word [r9 + 0x12], ax
movzx eax, word [r8 + 8]
mov word [r9 + 0x14], ax
movzx eax, word [r8 + 0xa]
mov word [r9 + 0x16], ax
movzx ecx, word [r8 + 0xe]
movzx edx, word [r8 + 0xc]
mov eax, ecx
shr eax, 9
add eax, 0x50
mov dword [rsp + 0x34], eax
mov eax, ecx
shr eax, 5
and ecx, 0x1f
and eax, 0xf
mov dword [rsp + 0x2c], ecx
dec eax
lea rcx, [r11 - 0x58]
mov dword [rsp + 0x30], eax
mov eax, edx
shr eax, 0xb
mov dword [rsp + 0x28], eax
mov eax, edx
shr eax, 5
and edx, 0x1f
and eax, 0x3f
add edx, edx
mov dword [rsp + 0x24], eax
mov dword [rsp + 0x20], edx
call qword [sym.imp.msvcrt.dll__mktime64]
mov qword [rsi + 0x18], rax
mov edi, 0x1ff
mov eax, dword [r14 + 0x10]
lea rdx, [r14 + 0x2e]
mov dword [rsi + 0x20], eax
mov eax, dword [r14 + 0x14]
mov qword [rsi + 0x28], rax
mov eax, dword [r14 + 0x18]
mov qword [rsi + 0x30], rax
movzx eax, word [r14 + 0x24]
mov word [rsi + 0x38], ax
mov eax, dword [r14 + 0x26]
mov dword [rsi + 0x3c], eax
mov eax, dword [r14 + 0x2a]
mov qword [rsi + 0x40], rax
mov eax, edi
movzx ecx, word [r14 + 0x1c]
cmp ecx, edi
cmovb eax, ecx
lea rcx, [rsi + 0x58]
mov r8d, eax
mov ebx, eax
call sub.msvcrt.dll_memcpy
mov byte [rbx + rsi + 0x58], r13b
movzx eax, word [r14 + 0x20]
cmp eax, edi
cmovb edi, eax
mov dword [rsi + 0x48], edi
movzx edx, word [r14 + 0x1e]
movzx ecx, word [r14 + 0x1c]
add rdx, r14
add rcx, 0x2e
mov r8d, edi
add rdx, rcx
lea rcx, [rsi + 0x258]
call sub.msvcrt.dll_memcpy
mov edx, r15d
mov byte [rdi + rsi + 0x258], r13b
mov rcx, rbp
call fcn.18006ba40
mov dword [rsi + 0x4c], eax
mov r8, qword [rbp + 0x68]
lea rcx, [rbp + 0x10]
test r8, r8
je 0x18006bc3c
cmp r15d, dword [rcx]
jae 0x18006bc3c
mov rax, qword [r8 + 0x20]
mov edx, dword [rax + r15*4]
add rdx, qword [r8]
je 0x18006bc3c
test byte [rdx + 8], 0x41
mov eax, r13d
setne al
jmp 0x18006bc46
mov dword [rbp + 0x1c], 0x18
mov eax, r13d
mov dword [rsi + 0x50], eax
mov r11d, 8
mov rdx, qword [rbp + 0x68]
test rdx, rdx
je 0x18006bca8
cmp r15d, dword [rcx]
jae 0x18006bca8
mov rax, qword [rdx + 0x20]
mov ecx, dword [rax + r15*4]
add rcx, qword [rdx]
je 0x18006bca8
movzx eax, word [rcx + 8]
cmp word [rcx + 0xa], r13w
je 0x18006bc85
cmp word [rcx + 0xa], r11w
je 0x18006bc85
mov dword [rbp + 0x1c], 4
jmp 0x18006bcaf
test al, 0x41
je 0x18006bc92
mov dword [rbp + 0x1c], 5
jmp 0x18006bcaf
mov edi, 1
test al, 0x20
je 0x18006bca4
mov dword [rbp + 0x1c], 6
jmp 0x18006bcb4
mov eax, edi
jmp 0x18006bcb7
mov dword [rbp + 0x1c], 0x18
mov edi, 1
mov eax, r13d
mov rcx, qword [rsi + 0x28]
mov ebx, 0xffffffff
cmp rcx, qword [rsi + 0x30]
mov dword [rsi + 0x54], eax
cmovbe rcx, qword [rsi + 0x30]
mov rax, qword [rsi + 0x40]
cmp rcx, rax
cmova rax, rcx
cmp rax, rbx
jne 0x18006bd27
movzx edx, word [r14 + 0x1e]
test edx, edx
je 0x18006bd27
movzx r9d, word [r14 + 0x1c]
add r9, 0x2e
add r9, r14
cmp edx, 4
jb 0x18006bd90
movzx r8d, word [r9 + 2]
mov eax, edx
lea rcx, [r8 + 4]
cmp rcx, rax
ja 0x18006bd90
cmp word [r9], di
je 0x18006bd2b
add r9, 4
mov eax, 0xfffffffc
add r9, r8
sub eax, r8d
add edx, eax
jne 0x18006bcf1
mov eax, edi
jmp 0x18006bda7
lea rdx, [r9 + 4]
cmp qword [rsi + 0x30], rbx
jne 0x18006bd51
cmp r8d, r11d
jb 0x18006bd90
mov ecx, dword [rdx + 4]
mov eax, dword [rdx]
add rdx, r11
shl rcx, 0x20
or rcx, rax
mov qword [rsi + 0x30], rcx
add r8d, 0xfffffff8
cmp qword [rsi + 0x28], rbx
jne 0x18006bd73
cmp r8d, r11d
jb 0x18006bd90
mov ecx, dword [rdx + 4]
mov eax, dword [rdx]
add rdx, r11
shl rcx, 0x20
or rcx, rax
mov qword [rsi + 0x28], rcx
add r8d, 0xfffffff8
cmp qword [rsi + 0x40], rbx
jne 0x18006bd27
cmp r8d, r11d
jb 0x18006bd90
mov ecx, dword [rdx + 4]
mov eax, dword [rdx]
shl rcx, 0x20
or rcx, rax
mov qword [rsi + 0x40], rcx
jmp 0x18006bd27
mov dword [rbp + 0x1c], 9
jmp 0x18006bda5
test rbp, rbp
je 0x18006bda5
mov dword [rcx + 0x1c], 0x18
xor eax, eax
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret