Function at 0x140006040
Capabilities:
Enumerate pe sections

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x90
mov rbp, r8
mov r13, r9
mov rsi, rdx
mov r8, rcx
cmp rbp, 4
jb 0x1400062f6
movzx eax, byte [rdx + 1]
movzx edi, byte [rdx]
shl edi, 8
or edi, eax
movzx eax, byte [rdx + 2]
shl edi, 8
or edi, eax
movzx eax, byte [rdx + 3]
shl edi, 8
or edi, eax
cmp rbp, 4
jbe 0x1400062f6
movzx r9d, byte [rdx + 4]
mov byte [rsp + 0x50], r9b
cmp rbp, 7
jb 0x1400062f6
movzx r14d, byte [rdx + 5]
movzx eax, byte [rdx + 6]
shl r14d, 8
or r14d, eax
cmp rbp, 9
jb 0x1400062f6
movzx r15d, byte [rdx + 7]
movzx eax, byte [rdx + 8]
shl r15d, 8
or r15d, eax
cmp rbp, 9
jbe 0x1400062f6
movzx r12d, byte [rdx + 9]
cmp rbp, 0xa
jbe 0x1400062f6
movzx eax, byte [rdx + 0xa]
mov byte [rsp + 0x78], al
cmp al, 6
jne 0x1400062f6
mov qword [rsp + 0xd8], rbx
mov rdx, 0xffffffffffffffff
cmp rbp, 0x13
jb 0x1400061c4
movzx eax, byte [rsi + 0xc]
movzx ecx, byte [rsi + 0xb]
shl rcx, 8
or rcx, rax
movzx eax, byte [rsi + 0xd]
shl rcx, 8
or rcx, rax
movzx eax, byte [rsi + 0xe]
shl rcx, 8
or rcx, rax
movzx eax, byte [rsi + 0xf]
shl rcx, 8
or rcx, rax
movzx eax, byte [rsi + 0x10]
shl rcx, 8
or rcx, rax
movzx eax, byte [rsi + 0x11]
shl rcx, 8
or rcx, rax
movzx eax, byte [rsi + 0x12]
shl rcx, 8
or rcx, rax
mov qword [rsp + 0x68], rcx
cmp rbp, 0x1b
jb 0x1400061c9
movzx eax, byte [rsi + 0x14]
movzx edx, byte [rsi + 0x13]
shl rdx, 8
or rdx, rax
movzx eax, byte [rsi + 0x15]
shl rdx, 8
or rdx, rax
movzx eax, byte [rsi + 0x16]
shl rdx, 8
or rdx, rax
movzx eax, byte [rsi + 0x17]
shl rdx, 8
or rdx, rax
movzx eax, byte [rsi + 0x18]
shl rdx, 8
or rdx, rax
movzx eax, byte [rsi + 0x19]
shl rdx, 8
or rdx, rax
movzx eax, byte [rsi + 0x1a]
shl rdx, 8
or rdx, rax
jmp 0x1400061c9
mov qword [rsp + 0x68], rdx
cmp qword [r8 + 0x228], 0
mov qword [rsp + 0x70], rdx
jne 0x1400061e1
mov eax, edi
mov qword [r8 + 0x228], rax
movsd xmm1, qword [rsp + 0x78]
xor ebx, ebx
mov r11d, r14d
mov r10d, r15d
movzx r8d, r12b
movups xmm2, xmmword [rsp + 0x68]
test r13, r13
je 0x140006277
cmp qword [r13 + 0x78], rbx
je 0x140006225
lea rdx, [rsp + 0x60]
movaps xmmword [rsp + 0x60], xmm2
mov rcx, r13
movsd qword [rsp + 0x70], xmm1
call fcn.14000bb80
test eax, eax
je 0x140006258
movzx r9d, byte [rsp + 0x50]
mov r11d, r14d
mov r10d, r15d
movzx r8d, r12b
cmp qword [r13 + 0x70], rbx
je 0x140006277
mov edx, dword [r13 + 0x50]
mov ecx, ebx
test edx, edx
je 0x140006258
mov r8, qword [r13 + 0x48]
mov eax, ecx
cmp dword [r8 + rax*8], r14d
ja 0x140006252
cmp r14d, dword [r8 + rax*8 + 4]
jbe 0x140006273
inc ecx
cmp ecx, edx
jb 0x140006243
mov rbx, qword [rsp + 0xd8]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movzx r8d, r12b
mov rax, qword [rsp + 0xf0]
test rax, rax
je 0x1400062a5
mov ecx, dword [rax + 8]
test ecx, ecx
je 0x1400062a5
mov rdx, qword [rax]
nop
cmp dword [rdx + rbx*8], r10d
ja 0x14000629d
cmp r10d, dword [rdx + rbx*8 + 4]
jbe 0x1400062a5
inc ebx
cmp ebx, ecx
jb 0x140006290
jmp 0x140006258
cmp rbp, 0x1b
jb 0x140006258
movzx r8d, r8b
lea eax, [rbp - 0x1b]
mov dword [rsp + 0x40], eax
lea rcx, [rsi + 0x1b]
mov qword [rsp + 0x38], rcx
mov rcx, qword [rsp + 0xd0]
mov dword [rsp + 0x30], r8d
lea r8, [rsp + 0x60]
mov dword [rsp + 0x28], r10d
movzx r9d, r9b
mov edx, edi
mov dword [rsp + 0x20], r11d
movaps xmmword [rsp + 0x60], xmm2
movsd qword [rsp + 0x70], xmm1
call fcn.140034650
jmp 0x140006258
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.____corrupt_record_n
call fcn.140001010
jmp 0x140006260