Function at 0x1400046d0
Capabilities:
Enumerate pe sections

Disassembly:
mov r11, rsp
push rbx
push rsi
push rdi
push r12
push r15
sub rsp, 0x40
mov rax, qword [0x140012028]
xor rax, rsp
mov qword [rsp + 0x30], rax
movzx eax, word [rdx + 0x14]
lea r8, [rdx + 0x18]
movzx r10d, word [rdx + 6]
xor r12d, r12d
mov qword [r11 + 0x18], rbp
add r8, rax
mov qword [r11 + 0x20], r14
mov r14, rdx
mov r15, rcx
mov ebp, r12d
movzx r9d, r12w
cmp r12w, r10w
jae 0x1400047eb
lea r11, [0x14000d804]
nop word [rax + rax]
mov edx, dword [r8 + 0x10]
test edx, edx
je 0x140004968
mov rcx, r12
nop
movzx eax, byte [r8 + rcx]
inc rcx
cmp al, byte [r11 + rcx - 1]
jne 0x140004968
cmp rcx, 6
jne 0x140004740
mov eax, dword [str.._AV]
mov rsi, rdx
mov ebx, dword [r8 + 0x14]
add rbx, r15
mov dword [rsp + 0x20], eax
movzx eax, byte [0x14000d810]
mov byte [rsp + 0x24], al
sub rsi, rcx
je 0x1400047eb
lea rax, [rsp + 0x20]
mov rdi, rbx
sub rdi, rax
nop dword [rax + rax]
mov rdx, r12
nop dword [rax]
nop word [rax + rax]
lea rcx, [rsp + 0x20]
add rcx, rdx
movzx eax, byte [rdi + rcx]
cmp byte [rcx], al
jne 0x1400047df
inc rdx
cmp rdx, 4
jb 0x1400047a0
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rbx + r8], r12b
jne 0x1400047c0
cmp r8, 0x1000
jae 0x1400047df
xor edx, edx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memset
inc rbp
inc rbx
inc rdi
sub rsi, 1
jne 0x140004790
mov ecx, 0xfffffff5
mov esi, 0xb
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, si
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rdx, rbp
lea rcx, str._MAPPER_LOG__Destroyed__lld_AV_strings_n
call fcn.140001fa0
movzx edx, word [r14 + 0x14]
movzx r8d, r12w
movzx r10d, word [r14 + 6]
add rdx, 0x18
mov rbp, qword [rsp + 0x80]
add rdx, r14
mov r14, qword [rsp + 0x88]
cmp r12w, r10w
jae 0x14000494d
lea r11, [0x14000d814]
nop dword [rax]
mov r9d, dword [rdx + 0x10]
test r9d, r9d
je 0x14000497f
mov rcx, r12
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r11 + rcx - 1]
jne 0x14000497f
cmp rcx, 7
jne 0x140004860
mov edi, dword [rdx + 0x14]
add rdi, r15
je 0x14000494d
mov eax, dword [str..pdb]
mov r10, r9
mov dword [rsp + 0x28], eax
mov r9, r12
movzx eax, word [0x14000d820]
mov word [rsp + 0x2c], ax
add r10, 0xfffffffffffffff9
je 0x14000494d
lea rax, [rsp + 0x28]
mov r8, rdi
sub r8, rax
nop word [rax + rax]
mov rax, r12
nop dword [rax]
nop word [rax + rax]
lea rdx, [rsp + 0x28]
add rdx, rax
movzx ecx, byte [rdx]
cmp byte [r8 + rdx], cl
jne 0x140004993
inc rax
cmp rax, 5
jb 0x1400048d0
movzx eax, byte [rdi - 2]
lea rbx, [rdi - 2]
test al, al
je 0x140004913
mov rcx, rbx
nop dword [rax]
cmp al, 0x3a
je 0x140004913
movzx eax, byte [rcx - 1]
lea rbx, [rcx - 1]
mov rcx, rbx
test al, al
jne 0x140004900
mov ecx, 0xfffffff5
dec rbx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, si
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rdx, rbx
lea rcx, str._MAPPER_LOG__Destroyed_PDB__s_n_n_n
call fcn.140001fa0
sub rdi, rbx
xor edx, edx
mov rcx, rbx
lea r8, [rdi + 5]
call sub.VCRUNTIME140.dll_memset
mov al, 1
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.14000b560
add rsp, 0x40
pop r15
pop r12
pop rdi
pop rsi
pop rbx
ret
inc r9w
add r8, 0x28
cmp r9w, r10w
jb 0x140004730
jmp 0x1400047eb
inc r8w
add rdx, 0x28
cmp r8w, r10w
jb 0x140004850
jmp 0x14000494d
inc r9
inc rdi
inc r8
cmp r9, r10
jb 0x1400048c0
jmp 0x14000494d