Function at 0x48dd60
Capabilities:
Enumerate pe sections

Disassembly:
push ebx
push esi
push edi
push ebp
sub esp, 0x58
push 0
call fcn.00492f60
pop ecx
mov cx, word [eax]
mov word [esp + 4], cx
mov cx, word [eax + 2]
mov word [esp + 8], cx
mov cx, word [eax + 4]
mov word [esp + 0xc], cx
mov cx, word [eax + 6]
mov word [esp + 0x10], cx
mov cx, word [eax + 8]
mov word [esp + 0x14], cx
mov cx, word [eax + 0xa]
mov word [esp + 0x18], cx
mov cx, word [eax + 0x10]
mov bp, word [eax + 0xe]
mov si, word [eax + 0xc]
mov word [esp + 0x24], cx
mov cx, word [eax + 0x14]
mov di, word [eax + 0x12]
mov word [esp + 0x2c], cx
mov cx, word [eax + 0x16]
mov ebx, 1
mov word [esp + 0x30], cx
mov cx, word [eax + 0x18]
mov word [esp + 0x34], cx
mov cx, word [eax + 0x1a]
mov word [esp + 0x38], cx
mov cx, word [eax + 0x1c]
mov word [esp + 0x3c], cx
mov cx, word [eax + 0x1e]
mov word [esp + 0x40], cx
mov cx, word [eax + 0x20]
mov word [esp + 0x44], cx
mov cx, word [eax + 0x22]
mov word [esp + 0x48], cx
mov cx, word [eax + 0x24]
mov word [esp + 0x4c], cx
mov cx, word [eax + 0x26]
mov word [esp + 0x50], cx
mov cx, word [eax + 0x28]
mov word [esp + 0x54], cx
jmp 0x48de80
test bx, bx
je 0x48de2f
call fcn.004ad480
xor ebx, ebx
call fcn.00492720
mov eax, dword [0x72676c]
push eax
call fcn.005a5030
mov eax, dword [0x72676c]
pop ecx
push eax
call fcn.005a5020
pop ecx
push 1
call fcn.00492f60
pop ecx
xor cl, cl
cmp word [eax + 8], 0
je 0x48de6d
xor edx, edx
cmp word [eax + 0x32], 0
jne 0x48de67
inc edx
test dl, dl
je 0x48de6d
mov cl, 1
test cl, cl
jne 0x48deb8
push 1
call fcn.00492f60
cmp word [eax + 0xc], 0
pop ecx
jne 0x48deb8
push 1
call fcn.00492f60
xor dl, dl
cmp word [eax + 8], 0
pop ecx
je 0x48dea1
xor ecx, ecx
cmp word [eax + 0x32], 0
jne 0x48de9b
inc ecx
test cl, cl
je 0x48dea1
mov dl, 1
test dl, dl
jne 0x48deb8
push 1
call fcn.00492f60
cmp word [eax + 0xc], 0
pop ecx
je 0x48de23
push 0
call fcn.00492f60
add eax, 0x2a
pop ecx
mov cx, word [esp + 4]
mov word [eax], cx
mov cx, word [esp + 8]
mov word [eax + 2], cx
mov cx, word [esp + 0xc]
mov word [eax + 4], cx
mov cx, word [esp + 0x10]
mov word [eax + 6], cx
mov cx, word [esp + 0x14]
mov word [eax + 8], cx
mov cx, word [esp + 0x18]
mov word [eax + 0xa], cx
mov word [eax + 0xc], si
mov word [eax + 0xe], bp
mov cx, word [esp + 0x24]
mov word [eax + 0x10], cx
mov word [eax + 0x12], di
mov cx, word [esp + 0x2c]
mov word [eax + 0x14], cx
mov cx, word [esp + 0x30]
mov word [eax + 0x16], cx
mov cx, word [esp + 0x34]
mov word [eax + 0x18], cx
mov cx, word [esp + 0x38]
mov word [eax + 0x1a], cx
mov cx, word [esp + 0x3c]
mov word [eax + 0x1c], cx
mov cx, word [esp + 0x40]
mov word [eax + 0x1e], cx
mov cx, word [esp + 0x44]
mov word [eax + 0x20], cx
mov cx, word [esp + 0x48]
mov word [eax + 0x22], cx
mov cx, word [esp + 0x4c]
mov word [eax + 0x24], cx
mov cx, word [esp + 0x50]
mov word [eax + 0x26], cx
mov cx, word [esp + 0x54]
push 0
mov word [eax + 0x28], cx
call fcn.00492f60
pop ecx
mov cx, word [esp + 4]
mov word [eax], cx
mov cx, word [esp + 8]
mov word [eax + 2], cx
mov cx, word [esp + 0xc]
mov word [eax + 4], cx
mov cx, word [esp + 0x10]
mov word [eax + 6], cx
mov cx, word [esp + 0x14]
mov word [eax + 8], cx
mov cx, word [esp + 0x18]
mov word [eax + 0xa], cx
mov word [eax + 0xc], si
mov word [eax + 0xe], bp
mov cx, word [esp + 0x24]
mov word [eax + 0x10], cx
mov word [eax + 0x12], di
mov cx, word [esp + 0x2c]
mov word [eax + 0x14], cx
mov cx, word [esp + 0x30]
mov word [eax + 0x16], cx
mov cx, word [esp + 0x34]
mov word [eax + 0x18], cx
mov cx, word [esp + 0x38]
mov word [eax + 0x1a], cx
mov cx, word [esp + 0x3c]
mov word [eax + 0x1c], cx
mov cx, word [esp + 0x40]
mov word [eax + 0x1e], cx
mov cx, word [esp + 0x44]
mov word [eax + 0x20], cx
mov cx, word [esp + 0x48]
mov word [eax + 0x22], cx
mov cx, word [esp + 0x4c]
mov word [eax + 0x24], cx
mov cx, word [esp + 0x50]
mov word [eax + 0x26], cx
mov cx, word [esp + 0x54]
mov word [eax + 0x28], cx
add esp, 0x58
pop ebp
pop edi
pop esi
pop ebx
ret