Function at 0x18006c960
Capabilities:
Enumerate pe sections

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rbp
mov qword [r11 + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
xor r13d, r13d
mov r15d, edx
mov rsi, r9
mov r14, r8
mov rbp, rcx
test r8, r8
je 0x18006cc5d
test r9, r9
je 0x18006cc5d
mov dword [r9], r15d
mov rax, qword [rcx + 0x68]
mov qword [r11 - 0x40], r13
or dword [rsp + 0x40], 0xffffffff
mov rcx, qword [rax + 0x20]
mov eax, dword [rcx + r15*4]
mov qword [r9 + 8], rax
movzx eax, word [r8 + 4]
mov word [r9 + 0x10], ax
movzx eax, word [r8 + 6]
mov word [r9 + 0x12], ax
movzx eax, word [r8 + 8]
mov word [r9 + 0x14], ax
movzx eax, word [r8 + 0xa]
mov word [r9 + 0x16], ax
movzx ecx, word [r8 + 0xe]
movzx edx, word [r8 + 0xc]
mov eax, ecx
shr eax, 9
add eax, 0x50
mov dword [rsp + 0x34], eax
mov eax, ecx
shr eax, 5
and ecx, 0x1f
and eax, 0xf
mov dword [rsp + 0x2c], ecx
dec eax
lea rcx, [r11 - 0x58]
mov dword [rsp + 0x30], eax
mov eax, edx
shr eax, 0xb
mov dword [rsp + 0x28], eax
mov eax, edx
shr eax, 5
and edx, 0x1f
and eax, 0x3f
add edx, edx
mov dword [rsp + 0x24], eax
mov dword [rsp + 0x20], edx
call qword [sym.imp.msvcrt.dll__mktime64]
mov qword [rsi + 0x18], rax
mov edi, 0x1ff
mov eax, dword [r14 + 0x10]
lea rdx, [r14 + 0x2e]
mov dword [rsi + 0x20], eax
mov eax, dword [r14 + 0x14]
mov qword [rsi + 0x28], rax
mov eax, dword [r14 + 0x18]
mov qword [rsi + 0x30], rax
movzx eax, word [r14 + 0x24]
mov word [rsi + 0x38], ax
mov eax, dword [r14 + 0x26]
mov dword [rsi + 0x3c], eax
mov eax, dword [r14 + 0x2a]
mov qword [rsi + 0x40], rax
mov eax, edi
movzx ecx, word [r14 + 0x1c]
cmp ecx, edi
cmovb eax, ecx
lea rcx, [rsi + 0x58]
mov r8d, eax
mov ebx, eax
call sub.msvcrt.dll_memcpy
mov byte [rbx + rsi + 0x58], r13b
movzx eax, word [r14 + 0x20]
cmp eax, edi
cmovb edi, eax
mov dword [rsi + 0x48], edi
movzx edx, word [r14 + 0x1e]
movzx ecx, word [r14 + 0x1c]
add rdx, r14
add rcx, 0x2e
mov r8d, edi
add rdx, rcx
lea rcx, [rsi + 0x258]
call sub.msvcrt.dll_memcpy
mov edx, r15d
mov byte [rdi + rsi + 0x258], r13b
mov rcx, rbp
call fcn.18006c904
mov dword [rsi + 0x4c], eax
mov r8, qword [rbp + 0x68]
lea rcx, [rbp + 0x10]
test r8, r8
je 0x18006cb00
cmp r15d, dword [rcx]
jae 0x18006cb00
mov rax, qword [r8 + 0x20]
mov edx, dword [rax + r15*4]
add rdx, qword [r8]
je 0x18006cb00
test byte [rdx + 8], 0x41
mov eax, r13d
setne al
jmp 0x18006cb0a
mov dword [rbp + 0x1c], 0x18
mov eax, r13d
mov dword [rsi + 0x50], eax
mov r11d, 8
mov rdx, qword [rbp + 0x68]
test rdx, rdx
je 0x18006cb6c
cmp r15d, dword [rcx]
jae 0x18006cb6c
mov rax, qword [rdx + 0x20]
mov ecx, dword [rax + r15*4]
add rcx, qword [rdx]
je 0x18006cb6c
movzx eax, word [rcx + 8]
cmp word [rcx + 0xa], r13w
je 0x18006cb49
cmp word [rcx + 0xa], r11w
je 0x18006cb49
mov dword [rbp + 0x1c], 4
jmp 0x18006cb73
test al, 0x41
je 0x18006cb56
mov dword [rbp + 0x1c], 5
jmp 0x18006cb73
mov edi, 1
test al, 0x20
je 0x18006cb68
mov dword [rbp + 0x1c], 6
jmp 0x18006cb78
mov eax, edi
jmp 0x18006cb7b
mov dword [rbp + 0x1c], 0x18
mov edi, 1
mov eax, r13d
mov rcx, qword [rsi + 0x28]
mov ebx, 0xffffffff
cmp rcx, qword [rsi + 0x30]
mov dword [rsi + 0x54], eax
cmovbe rcx, qword [rsi + 0x30]
mov rax, qword [rsi + 0x40]
cmp rcx, rax
cmova rax, rcx
cmp rax, rbx
jne 0x18006cbeb
movzx edx, word [r14 + 0x1e]
test edx, edx
je 0x18006cbeb
movzx r9d, word [r14 + 0x1c]
add r9, 0x2e
add r9, r14
cmp edx, 4
jb 0x18006cc54
movzx r8d, word [r9 + 2]
mov eax, edx
lea rcx, [r8 + 4]
cmp rcx, rax
ja 0x18006cc54
cmp word [r9], di
je 0x18006cbef
add r9, 4
mov eax, 0xfffffffc
add r9, r8
sub eax, r8d
add edx, eax
jne 0x18006cbb5
mov eax, edi
jmp 0x18006cc6b
lea rdx, [r9 + 4]
cmp qword [rsi + 0x30], rbx
jne 0x18006cc15
cmp r8d, r11d
jb 0x18006cc54
mov ecx, dword [rdx + 4]
mov eax, dword [rdx]
add rdx, r11
shl rcx, 0x20
or rcx, rax
mov qword [rsi + 0x30], rcx
add r8d, 0xfffffff8
cmp qword [rsi + 0x28], rbx
jne 0x18006cc37
cmp r8d, r11d
jb 0x18006cc54
mov ecx, dword [rdx + 4]
mov eax, dword [rdx]
add rdx, r11
shl rcx, 0x20
or rcx, rax
mov qword [rsi + 0x28], rcx
add r8d, 0xfffffff8
cmp qword [rsi + 0x40], rbx
jne 0x18006cbeb
cmp r8d, r11d
jb 0x18006cc54
mov ecx, dword [rdx + 4]
mov eax, dword [rdx]
shl rcx, 0x20
or rcx, rax
mov qword [rsi + 0x40], rcx
jmp 0x18006cbeb
mov dword [rbp + 0x1c], 9
jmp 0x18006cc69
test rbp, rbp
je 0x18006cc69
mov dword [rcx + 0x1c], 0x18
xor eax, eax
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret