Function at 0x4faac0
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword [0x69e340]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4fada3
sub esp, 0x10
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
mov edx, dword [esp + 0x18]
test edx, edx
jbe 0x4fad99
cmp edx, 1
jbe 0x4fad8d
mov eax, dword [esp + 0x14]
movzx ecx, word [eax]
mov word [esp], cx
call sym.github.com_go_ole_go_ole.decodeHexByte
movzx eax, byte [esp + 4]
movzx ecx, byte [esp + 5]
mov byte [esp + 0x2c], al
mov eax, dword [esp + 0x18]
cmp eax, 2
jbe 0x4fad81
cmp eax, 3
jbe 0x4fad75
mov byte [esp + 0xf], cl
mov eax, dword [esp + 0x14]
movzx eax, word [eax + 2]
mov word [esp], ax
call sym.github.com_go_ole_go_ole.decodeHexByte
movzx eax, byte [esp + 4]
movzx ecx, byte [esp + 5]
mov byte [esp + 0x2d], al
mov eax, dword [esp + 0x24]
test eax, eax
jbe 0x4fad6c
cmp eax, 1
jbe 0x4fad60
mov byte [esp + 0xe], cl
mov eax, dword [esp + 0x20]
movzx ecx, word [eax]
mov word [esp], cx
call sym.github.com_go_ole_go_ole.decodeHexByte
movzx eax, byte [esp + 4]
movzx ecx, byte [esp + 5]
mov byte [esp + 0x2e], al
mov eax, dword [esp + 0x24]
cmp eax, 2
jbe 0x4fad54
cmp eax, 3
jbe 0x4fad48
mov byte [esp + 0xd], cl
mov eax, dword [esp + 0x20]
movzx ecx, word [eax + 2]
mov word [esp], cx
call sym.github.com_go_ole_go_ole.decodeHexByte
movzx eax, byte [esp + 4]
movzx ecx, byte [esp + 5]
mov byte [esp + 0x2f], al
mov eax, dword [esp + 0x24]
cmp eax, 4
jbe 0x4fad3c
cmp eax, 5
jbe 0x4fad30
mov byte [esp + 0xc], cl
mov eax, dword [esp + 0x20]
movzx ecx, word [eax + 4]
mov word [esp], cx
call sym.github.com_go_ole_go_ole.decodeHexByte
movzx eax, byte [esp + 4]
movzx ecx, byte [esp + 5]
mov byte [esp + 0x30], al
mov eax, dword [esp + 0x24]
cmp eax, 6
jbe 0x4fad24
cmp eax, 7
jbe 0x4fad18
mov byte [esp + 0xb], cl
mov eax, dword [esp + 0x20]
movzx ecx, word [eax + 6]
mov word [esp], cx
call sym.github.com_go_ole_go_ole.decodeHexByte
movzx eax, byte [esp + 4]
movzx ecx, byte [esp + 5]
mov byte [esp + 0x31], al
mov eax, dword [esp + 0x24]
cmp eax, 8
jbe 0x4fad0c
cmp eax, 9
jbe 0x4fad00
mov byte [esp + 0xa], cl
mov eax, dword [esp + 0x20]
movzx ecx, word [eax + 8]
mov word [esp], cx
call sym.github.com_go_ole_go_ole.decodeHexByte
movzx eax, byte [esp + 4]
movzx ecx, byte [esp + 5]
mov byte [esp + 0x32], al
mov eax, dword [esp + 0x24]
cmp eax, 0xa
jbe 0x4facf4
cmp eax, 0xb
jbe 0x4face8
mov byte [esp + 9], cl
mov eax, dword [esp + 0x20]
movzx eax, word [eax + 0xa]
mov word [esp], ax
call sym.github.com_go_ole_go_ole.decodeHexByte
movzx eax, byte [esp + 4]
movzx ecx, byte [esp + 5]
mov byte [esp + 0x33], al
movzx eax, byte [esp + 0xf]
test al, al
je 0x4facde
movzx eax, byte [esp + 0xe]
test al, al
je 0x4facde
movzx eax, byte [esp + 0xd]
test al, al
je 0x4facde
movzx eax, byte [esp + 0xc]
test al, al
je 0x4facde
movzx eax, byte [esp + 0xb]
test al, al
je 0x4facde
movzx eax, byte [esp + 0xa]
test al, al
je 0x4facde
movzx eax, byte [esp + 9]
test al, al
jne 0x4face0
xor ecx, ecx
mov byte [esp + 0x34], cl
add esp, 0x10
ret
mov eax, 0xb
mov ecx, eax
call sym.runtime.panicIndex
mov eax, 0xa
mov ecx, eax
call sym.runtime.panicIndex
mov eax, 9
mov ecx, eax
call sym.runtime.panicIndex
mov eax, 8
mov ecx, eax
call sym.runtime.panicIndex
mov eax, 7
mov ecx, eax
call sym.runtime.panicIndex
mov eax, 6
mov ecx, eax
call sym.runtime.panicIndex
mov eax, 5
mov ecx, eax
call sym.runtime.panicIndex
mov eax, 4
mov ecx, eax
call sym.runtime.panicIndex
mov eax, 3
mov ecx, eax
call sym.runtime.panicIndex
mov eax, 2
mov ecx, eax
call sym.runtime.panicIndex
mov eax, 1
mov ecx, eax
call sym.runtime.panicIndex
xor eax, eax
mov ecx, eax
call sym.runtime.panicIndex
mov eax, 3
mov ecx, eax
call sym.runtime.panicIndex
mov eax, 2
mov ecx, eax
call sym.runtime.panicIndex
mov eax, 1
mov ecx, eax
call sym.runtime.panicIndex
xor eax, eax
mov ecx, eax
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt
jmp sym.github.com_go_ole_go_ole.decodeHexByte64