Function at 0x4a8b70
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword [0x57fc4c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4a8eaf
sub esp, 0x38
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4a8b95
mov ecx, dword [esp + 0x4c]
jmp 0x4a8b99
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x3c]
movzx ebx, byte [edx + 5]
test bl, bl
je 0x4a8bac
mov ebx, dword [edx + 0x14]
cmp ecx, ebx
jg 0x4a8bae
mov ebx, ecx
mov ecx, ebx
shl ebx, 1
test ebx, ebx
jle 0x4a8caf
movzx ebp, byte [edx + 9]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4a8bd9
movzx ebp, byte [edx + 8]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4a8bd3
mov ebx, ecx
shl ebx, 2
lea ebx, [ebx + ecx - 1]
jmp 0x4a8be6
movzx ebp, byte [edx + 8]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4a8be6
add ebx, 2
mov dword [esp + 0x34], ecx
mov dword [esp + 0x24], ebx
movzx ebp, byte [edx + 4]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4a8c27
mov ebp, dword [edx + 0x10]
cmp ebx, ebp
jge 0x4a8c27
movzx esi, byte [edx + 6]
xchg esi, eax
test al, al
xchg esi, eax
jne 0x4a8c27
mov dword [esp], edx
sub ebp, ebx
mov dword [esp + 4], ebp
call fcn.004a7eb0
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x24]
mov ebp, dword [edx]
movzx esi, byte [edx + 8]
mov edi, dword [ebp + 8]
mov ebx, dword [ebp]
mov ebp, dword [ebp + 4]
xchg esi, eax
test al, al
xchg esi, eax
je 0x4a8c9b
add ebp, 2
mov esi, dword [esp + 0x54]
movzx esi, byte [esi + 0x10]
cmp edi, ebp
jae 0x4a8c90
xchg esi, eax
mov byte [esp + 0x23], al
xchg esi, eax
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edi
mov dword [esp + 0xc], 2
lea eax, [0x4bdba0]
mov dword [esp + 0x10], eax
call fcn.0046d4f0
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x3c]
movzx esi, byte [esp + 0x23]
mov byte [ebp + ebx - 2], 0x30
xchg esi, eax
mov byte [ebp + ebx - 1], al
xchg esi, eax
mov esi, dword [esp + 0x54]
mov dword [esp + 0x2c], eax
xor eax, eax
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x2c]
jmp 0x4a8cf1
movzx eax, byte [edx + 4]
test al, al
je 0x4a8cc6
mov eax, dword [edx + 0x10]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.004a7eb0
add esp, 0x38
ret
mov byte [ecx + ebx - 2], dl
mov byte [ecx + ebx - 1], al
lea eax, [esi + 1]
mov edx, dword [esp + 0x34]
mov esi, dword [esp + 0x48]
mov edx, dword [esp + 0x3c]
mov esi, ebp
mov dword [esp + 0x28], eax
mov ebp, ecx
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x34]
mov esi, dword [esp + 0x28]
cmp esi, ecx
jge 0x4a8e62
movzx ecx, byte [edx + 9]
test cl, cl
je 0x4a8dd6
test esi, esi
jle 0x4a8dcc
lea ecx, [ebp + 1]
cmp edi, ecx
jae 0x4a8d52
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], 1
lea eax, [0x4bdba0]
mov dword [esp + 0x10], eax
call fcn.0046d4f0
mov ebx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x3c]
mov esi, dword [esp + 0x28]
mov byte [ecx + ebx - 1], 0x20
movzx ebp, byte [edx + 8]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4a8dc4
add ecx, 2
mov ebp, dword [esp + 0x54]
movzx edx, byte [ebp + 0x10]
cmp edi, ecx
jb 0x4a8d74
test eax, eax
jmp 0x4a8db9
mov byte [esp + 0x23], dl
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], 2
lea eax, [0x4bdba0]
mov dword [esp + 0x10], eax
call fcn.0046d4f0
mov ebx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov eax, dword [esp + 0x48]
test eax, eax
movzx edx, byte [esp + 0x23]
mov ebp, dword [esp + 0x54]
mov esi, dword [esp + 0x28]
mov byte [ecx + ebx - 2], 0x30
mov byte [ecx + ebx - 1], dl
jmp 0x4a8dde
test eax, eax
mov ebp, dword [esp + 0x54]
jmp 0x4a8dde
test eax, eax
mov ecx, ebp
mov ebp, dword [esp + 0x54]
jmp 0x4a8dde
test eax, eax
mov ecx, ebp
mov ebp, dword [esp + 0x54]
je 0x4a8de6
movzx edx, byte [esi + eax]
jmp 0x4a8df0
mov eax, dword [esp + 0x40]
movzx eax, byte [eax + esi]
mov edx, eax
mov byte [esp + 0x21], dl
add ecx, 2
shr dl, 4
movzx edx, dl
movzx eax, byte [esp + 0x21]
and eax, 0xf
movzx edx, byte [edx + ebp]
movzx eax, byte [eax + ebp]
cmp edi, ecx
jae 0x4a8cca
mov byte [esp + 0x23], dl
mov byte [esp + 0x22], al
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
mov dword [esp + 0xc], 2
lea eax, [0x4bdba0]
mov dword [esp + 0x10], eax
call fcn.0046d4f0
mov ebx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
movzx eax, byte [esp + 0x22]
movzx edx, byte [esp + 0x23]
mov ebp, dword [esp + 0x54]
mov esi, dword [esp + 0x28]
jmp 0x4a8cca
mov eax, dword [edx]
mov dword [eax + 4], ebp
mov dword [eax + 8], edi
mov ecx, dword [0x57fd28]
test ecx, ecx
je 0x4a8e80
call fcn.004718d0
mov dword [edi], ebx
mov ecx, dword [eax]
mov dword [edi + 4], ecx
mov dword [eax], ebx
movzx eax, byte [edx + 4]
test al, al
je 0x4a8eab
mov eax, dword [edx + 0x10]
mov ecx, dword [esp + 0x24]
cmp ecx, eax
jge 0x4a8eab
movzx ebx, byte [edx + 6]
test bl, bl
je 0x4a8eab
mov dword [esp], edx
sub eax, ecx
mov dword [esp + 4], eax
call fcn.004a7eb0
add esp, 0x38
ret
call fcn.004704c0
jmp fcn.004a8b70