Function at 0x140005d10
Capabilities:
Enumerate pe sections

Disassembly:
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push r14
sub rsp, 0xb8
mov r11, rcx
cmp r9, 4
jb 0x14000600d
movzx eax, byte [r8 + 1]
movzx r10d, byte [r8]
shl r10d, 8
or r10d, eax
movzx eax, byte [r8 + 2]
shl r10d, 8
or r10d, eax
movzx eax, byte [r8 + 3]
shl r10d, 8
or r10d, eax
mov dword [rsp + 0x70], r10d
cmp r9, 4
jbe 0x14000600d
movzx esi, byte [r8 + 4]
mov byte [rsp + 0x90], sil
cmp r9, 7
jb 0x14000600d
movzx ebx, byte [r8 + 5]
movzx eax, byte [r8 + 6]
shl bx, 8
or bx, ax
mov word [rsp + 0x92], bx
cmp r9, 7
jbe 0x14000600d
movzx ebp, byte [r8 + 7]
mov byte [rsp + 0x94], bpl
cmp r9, 8
jbe 0x14000600d
movzx r14d, byte [r8 + 8]
mov byte [rsp + 0x95], r14b
cmp r9, 9
jbe 0x14000600d
movzx eax, byte [r8 + 9]
mov byte [rsp + 0x88], al
cmp al, 6
jne 0x14000600d
mov qword [rsp + 0xf0], rdi
mov rdx, 0xffffffffffffffff
mov qword [rsp + 0xb0], r12
mov qword [rsp + 0xa8], r13
cmp r9, 0x12
jb 0x140005ecd
movzx eax, byte [r8 + 0xb]
movzx ecx, byte [r8 + 0xa]
shl rcx, 8
or rcx, rax
movzx eax, byte [r8 + 0xc]
shl rcx, 8
or rcx, rax
movzx eax, byte [r8 + 0xd]
shl rcx, 8
or rcx, rax
movzx eax, byte [r8 + 0xe]
shl rcx, 8
or rcx, rax
movzx eax, byte [r8 + 0xf]
shl rcx, 8
or rcx, rax
movzx eax, byte [r8 + 0x10]
shl rcx, 8
or rcx, rax
movzx eax, byte [r8 + 0x11]
shl rcx, 8
or rcx, rax
mov qword [rsp + 0x78], rcx
cmp r9, 0x1a
jb 0x140005ed2
movzx eax, byte [r8 + 0x13]
movzx edx, byte [r8 + 0x12]
shl rdx, 8
or rdx, rax
movzx eax, byte [r8 + 0x14]
shl rdx, 8
or rdx, rax
movzx eax, byte [r8 + 0x15]
shl rdx, 8
or rdx, rax
movzx eax, byte [r8 + 0x16]
shl rdx, 8
or rdx, rax
movzx eax, byte [r8 + 0x17]
shl rdx, 8
or rdx, rax
movzx eax, byte [r8 + 0x18]
shl rdx, 8
or rdx, rax
movzx eax, byte [r8 + 0x19]
shl rdx, 8
or rdx, rax
jmp 0x140005ed2
mov qword [rsp + 0x78], rdx
cmp qword [r11 + 0x228], 0
mov qword [rsp + 0xa0], r15
mov r15d, r10d
mov qword [rsp + 0x80], rdx
jne 0x140005ef6
mov qword [r11 + 0x228], r15
mov rdi, qword [rsp + 0x100]
movzx r10d, sil
movsd xmm1, qword [rsp + 0x88]
movzx r11d, bx
movzx r12d, bpl
movzx r13d, r14b
movups xmm2, xmmword [rsp + 0x78]
test rdi, rdi
je 0x140005fb1
cmp qword [rdi + 0x78], 0
je 0x140005f48
lea rdx, [rsp + 0x50]
movaps xmmword [rsp + 0x50], xmm2
mov rcx, rdi
movsd qword [rsp + 0x60], xmm1
call fcn.14000bb80
test eax, eax
je 0x140005f84
cmp qword [rdi + 0x70], 0
movzx r10d, sil
movzx r11d, bx
je 0x140005fb1
mov r8d, dword [rdi + 0x50]
xor ecx, ecx
movzx edx, bx
test r8d, r8d
je 0x140005f84
mov r9, qword [rdi + 0x48]
nop dword [rax]
cmp dword [r9 + rcx*8], edx
ja 0x140005f7d
cmp edx, dword [r9 + rcx*8 + 4]
jbe 0x140005fb1
inc ecx
cmp ecx, r8d
jb 0x140005f70
mov r15, qword [rsp + 0xa0]
mov r12, qword [rsp + 0xb0]
mov rdi, qword [rsp + 0xf0]
mov r13, qword [rsp + 0xa8]
add rsp, 0xb8
pop r14
pop rsi
pop rbp
pop rbx
ret
movzx r8d, r11w
lea rdx, [rsp + 0x96]
mov qword [rsp + 0x40], rdx
mov rdx, r15
movzx r9d, r10b
movzx eax, r13b
mov dword [rsp + 0x38], eax
movzx ecx, r12b
mov dword [rsp + 0x30], ecx
mov rcx, qword [rsp + 0xe0]
mov dword [rsp + 0x28], r8d
mov r8d, dword [rsp + 0xe8]
mov dword [rsp + 0x20], r9d
lea r9, [rsp + 0x50]
movaps xmmword [rsp + 0x50], xmm2
movsd qword [rsp + 0x60], xmm1
call fcn.140034160
jmp 0x140005f84
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.____corrupt_record_n
add rsp, 0xb8
pop r14
pop rsi
pop rbp
pop rbx
jmp fcn.140001010