Function at 0x618f70
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x619395
sub esp, 0x48
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov dword [esp + 4], ecx
lea ecx, [0x7c5ee0]
mov dword [esp], ecx
lea edx, [0x7e0d4a]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0x11
call fcn.0040e920
mov eax, dword [esp + 0x10]
movzx ecx, byte [esp + 0x14]
mov edx, dword [eax]
mov eax, dword [eax + 4]
test cl, cl
je 0x61936c
mov dword [esp + 0x38], edx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov dword [esp + 4], ecx
lea ecx, [0x7c5ee0]
mov dword [esp], ecx
lea edx, [0x7e0d4a]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0x11
call fcn.0040f020
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax + 0x10]
cmp ecx, 1
jle 0x619355
mov ecx, 1
test cl, cl
je 0x619341
mov ecx, dword [esp + 0x24]
test ecx, ecx
jbe 0x61938e
mov eax, dword [esp + 0x38]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [0x7dc1fe]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
call fcn.004d97b0
mov eax, dword [esp + 0x14]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x3c], ecx
lea edx, [0x771de0]
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
call fcn.00438c00
mov eax, dword [esp + 0xc]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x20], ecx
mov edx, dword [esp + 0x10]
xor ebx, ebx
jmp 0x61909a
mov ebp, dword [esp + 0x30]
inc ebp
mov eax, esi
mov ecx, edi
mov edx, ebx
mov ebx, ebp
mov dword [esp + 0x1c], edx
mov ebp, dword [esp + 0x28]
cmp ebx, ebp
jge 0x6191fb
mov dword [esp + 0x30], ebx
mov eax, dword [esp + 0x3c]
lea ecx, [eax + ebx*8]
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.004dab70
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004da360
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
cmp eax, 8
jne 0x619100
mov edx, dword [ecx]
cmp edx, 0x6e656469
jne 0x619100
mov edx, dword [ecx + 4]
cmp edx, 0x79746974
je 0x6191fb
mov dword [esp + 0x2c], eax
mov dword [esp + 0x40], ecx
cmp eax, 7
jne 0x619183
mov edx, dword [ecx]
cmp edx, 0x6e756863
jne 0x619183
movzx edx, word [ecx + 4]
cmp dx, 0x656b
jne 0x619183
movzx edx, byte [ecx + 6]
cmp dl, 0x64
jne 0x619183
mov edx, dword [esp + 0x1c]
lea ebx, [edx + 1]
test ebx, ebx
jl 0x619387
mov ebp, dword [esp + 0x20]
cmp ebx, ebp
ja 0x619387
cmp edx, ebx
jae 0x619380
mov esi, dword [esp + 0x34]
mov edi, ebp
lea ebp, [esi + edx*8 + 4]
mov dword [ebp], eax
mov ebp, dword [0xbc7270]
lea edx, [esi + edx*8]
test ebp, ebp
jne 0x61916f
mov dword [edx], ecx
jmp 0x61908d
mov eax, edi
mov edi, edx
mov ebp, eax
mov eax, ecx
call fcn.0044cc20
mov edi, ebp
jmp 0x61908d
lea eax, [0x7921a0]
mov dword [esp], eax
call fcn.00409dc0
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x1d
mov eax, dword [0xbc7270]
test eax, eax
jne 0x6191ee
lea ecx, [0x7e7e74]
mov dword [edi], ecx
mov ecx, dword [esp + 0x2c]
mov dword [edi + 0xc], ecx
mov ecx, dword [0xbc7270]
test ecx, ecx
jne 0x6191d8
mov eax, dword [esp + 0x40]
mov dword [edi + 8], eax
lea eax, [0x8f8cb0]
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], edi
add esp, 0x48
ret
lea ecx, [edi + 8]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0x40]
call fcn.0044cc20
mov edi, edx
jmp 0x6191c6
lea eax, [0x7e7e74]
call fcn.0044cc20
jmp 0x6191ae
mov eax, dword [esp + 0x1c]
cmp eax, 1
jg 0x61928f
test eax, eax
jle 0x61927b
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov dword [esp + 4], ecx
lea ecx, [0x7c5ee0]
mov dword [esp], ecx
lea ecx, [0x7df7ec]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0xe
call fcn.0040f020
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x4c]
mov dword [ecx + 0x2c], eax
mov eax, dword [esp + 0x20]
mov dword [ecx + 0x30], eax
mov eax, dword [0xbc7270]
test eax, eax
jne 0x61926d
mov eax, dword [esp + 0x34]
mov dword [ecx + 0x28], eax
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
add esp, 0x48
ret
lea edi, [ecx + 0x28]
mov eax, dword [esp + 0x34]
call fcn.0044cc20
jmp 0x619259
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
add esp, 0x48
ret
mov ecx, dword [esp + 0x34]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 8], eax
lea eax, [0x7dc1fe]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
call fcn.004d9820
mov eax, dword [esp + 0x18]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x44], ecx
lea edx, [0x7921a0]
mov dword [esp], edx
call fcn.00409dc0
mov edi, dword [esp + 4]
mov dword [edi + 4], 0x1b
mov eax, dword [0xbc7270]
test eax, eax
jne 0x619334
lea ecx, [0x7e6b75]
mov dword [edi], ecx
mov ecx, dword [esp + 0x30]
mov dword [edi + 0xc], ecx
mov ecx, dword [0xbc7270]
test ecx, ecx
jne 0x61931e
mov eax, dword [esp + 0x44]
mov dword [edi + 8], eax
lea eax, [0x8f8cb0]
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], edi
add esp, 0x48
ret
lea ecx, [edi + 8]
mov eax, edi
mov edi, ecx
mov edx, eax
mov eax, dword [esp + 0x44]
call fcn.0044cc20
mov edi, edx
jmp 0x61930c
lea eax, [0x7e6b75]
call fcn.0044cc20
jmp 0x6192f4
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
add esp, 0x48
ret
jne 0x619365
mov ecx, dword [eax + 0x14]
cmp ecx, 1
setge cl
jmp 0x619010
xor ecx, ecx
jmp 0x619010
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
add esp, 0x48
ret
call fcn.00426630
ud2
call fcn.00426730
ud2
call fcn.00426630
ud2
call fcn.0044b4c0
jmp fcn.00618f70