Function at 0x4fa5c0
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4fa9b3
sub esp, 0x3c
mov eax, dword [esp + 0x44]
mov ecx, dword [eax + 0x18]
mov edx, dword [eax + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], edx
lea ecx, [0x89a898]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 8
call fcn.00498c40
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x8969ce]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
call fcn.004c2de0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
test edx, edx
jbe 0x4fa9ac
mov ebx, dword [eax + 4]
test ebx, ebx
jne 0x4fa646
add esp, 0x3c
ret
cmp edx, 1
jbe 0x4fa9a5
mov dword [esp + 0x2c], eax
mov dword [esp + 0x20], ecx
mov dword [esp + 0x1c], edx
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 8]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.004540d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
test ecx, ecx
jne 0x4fa98b
mov ecx, dword [esp + 0x2c]
mov edx, dword [ecx + 4]
mov ebx, dword [ecx]
cmp edx, 6
jge 0x4fa7a3
cmp edx, 5
jne 0x4fa746
mov ebp, dword [ebx]
cmp ebp, 0x65747962
jne 0x4fa79e
movzx ebp, byte [ebx + 4]
xchg ebp, eax
cmp al, 0x73
xchg ebp, eax
jne 0x4fa743
mov edx, 2
mov ebx, dword [esp + 0x1c]
cmp ebx, 2
jbe 0x4fa922
mov ebp, dword [ecx + 0x14]
mov esi, dword [ecx + 0x10]
cmp ebp, 3
jne 0x4fa73d
movzx ebp, word [esi]
cmp bp, 0x6572
jne 0x4fa73d
movzx ebp, byte [esi + 2]
xchg ebp, eax
cmp al, 0x71
xchg ebp, eax
jne 0x4fa73d
mov ebp, dword [esp + 0x40]
mov byte [ebp + 0x19], 1
mov dword [esp], ebp
mov ecx, dword [esp + 0x44]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
xor eax, eax
mov dword [esp + 0x10], eax
call fcn.004fb180
mov eax, dword [esp + 0x40]
mov dword [esp], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x10], eax
call fcn.004fb330
add esp, 0x3c
ret
mov ebp, dword [esp + 0x40]
jmp 0x4fa6ef
cmp edx, 5
jne 0x4fa799
mov ebp, dword [ebx]
cmp ebp, 0x756f7267
jne 0x4fa794
movzx ebp, byte [ebx + 4]
xchg ebp, eax
cmp al, 0x70
xchg ebp, eax
jne 0x4fa767
mov edx, 3
jmp 0x4fa6ba
cmp edx, 6
jne 0x4fa929
mov ebp, dword [ebx]
cmp ebp, 0x69726176
jne 0x4fa929
movzx ebp, word [ebx + 4]
cmp bp, 0x746e
jne 0x4fa929
xor edx, edx
jmp 0x4fa6ba
cmp edx, 6
jmp 0x4fa76a
cmp edx, 6
jmp 0x4fa76a
cmp edx, 5
jmp 0x4fa746
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], edx
mov dword [esp + 0x30], ebx
je 0x4fa8d2
cmp edx, 7
jge 0x4fa82f
jne 0x4fa7e9
mov ebp, dword [ebx]
cmp ebp, 0x65786966
jne 0x4fa82a
movzx ebp, word [ebx + 4]
cmp bp, 0x3364
jne 0x4fa825
movzx ebp, byte [ebx + 6]
xchg ebp, eax
cmp al, 0x32
xchg ebp, eax
jne 0x4fa7e6
mov edx, 5
jmp 0x4fa6ba
cmp edx, 7
jne 0x4fa929
mov ebp, dword [ebx]
cmp ebp, 0x65786966
jne 0x4fa929
movzx ebp, word [ebx + 4]
cmp bp, 0x3664
jne 0x4fa929
movzx ebp, byte [ebx + 6]
xchg ebp, eax
cmp al, 0x34
xchg ebp, eax
jne 0x4fa929
mov edx, 1
jmp 0x4fa6ba
cmp edx, 7
jmp 0x4fa7e9
cmp edx, 7
jmp 0x4fa7e9
je 0x4fa87f
cmp edx, 8
jne 0x4fa852
mov ebp, dword [ebx]
cmp ebp, 0x7a67697a
jne 0x4fa87a
mov ebp, dword [ebx + 4]
cmp ebp, 0x32336761
je 0x4fa78d
cmp edx, 8
jne 0x4fa929
mov ebp, dword [ebx]
cmp ebp, 0x7a67697a
jne 0x4fa929
mov ebp, dword [ebx + 4]
cmp ebp, 0x34366761
je 0x4fa78d
jmp 0x4fa929
cmp edx, 8
jmp 0x4fa852
mov dword [esp], ebx
mov dword [esp + 4], edx
lea eax, [0x8997dc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 7
call fcn.004020a0
mov eax, dword [esp + 0x10]
test eax, eax
jg 0x4fa8bd
mov edx, dword [esp + 0x28]
cmp edx, 7
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x30]
jmp 0x4fa7ba
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x30]
jmp 0x4fa831
mov dword [esp], ebx
mov dword [esp + 4], edx
lea eax, [0x898fad]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 6
call fcn.004020a0
mov eax, dword [esp + 0x10]
test eax, eax
jg 0x4fa90d
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x30]
jmp 0x4fa68f
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0x30]
jmp 0x4fa7b5
call fcn.00426770
ud2
mov dword [esp], 0
lea eax, [0x8a02f1]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x12
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edx
call fcn.0043bdd0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], ecx
lea eax, [0x80a3e0]
mov dword [esp], eax
lea eax, [esp + 0x34]
mov dword [esp + 4], eax
call fcn.00407520
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00427650
ud2
lea eax, [0x80a3e0]
mov dword [esp], eax
lea eax, [0x91f150]
mov dword [esp + 4], eax
call fcn.00427650
ud2
call fcn.00426770
ud2
call fcn.00426770
ud2
call fcn.0044b100
jmp fcn.004fa5c0