Function at 0x48cdb0
Capabilities:
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebx
push esi
mov esi, ecx
push edi
cmp dword [esi + 8], 0x40
jae 0x48cdc7
mov dword [esi + 4], str.Too_small
jmp 0x48d078
mov eax, dword [esi + 0xc]
cmp byte [eax], 0x4d
jne 0x48d071
cmp byte [eax + 1], 0x5a
jne 0x48d071
mov ebx, dword [eax + 0x3c]
cmp ebx, dword [esi + 8]
jb 0x48cdf1
mov dword [esi + 4], str.Bad_offset_to_PE_header
jmp 0x48d078
mov eax, dword [esi]
push ebx
call dword [eax + 8]
mov edi, eax
cmp edi, dword [esi + 0xc]
jbe 0x48d068
mov edx, dword [esi + 0x10]
lea ecx, [edx - 0x18]
cmp edi, ecx
jae 0x48d068
test bl, 7
je 0x48ce21
mov dword [esi + 4], str.Misaligned_PE_header
jmp 0x48d078
cmp byte [edi], 0x50
jne 0x48d05f
cmp byte [edi + 1], 0x45
jne 0x48d05f
cmp byte [edi + 2], 0
jne 0x48d05f
cmp byte [edi + 3], 0
jne 0x48d05f
mov ax, word [edi + 4]
mov word [esi + 0x36], ax
mov ax, word [edi + 6]
mov word [esi + 0x38], ax
mov ax, word [edi + 0x14]
add edi, 0x18
movzx ecx, ax
mov word [esi + 0x34], ax
mov dword [esi + 0x30], edi
lea eax, [edi + ecx]
cmp eax, edx
jb 0x48ce7c
mov dword [esi + 4], str.Optional_header_past_end_of_file
jmp 0x48d078
push 2
pop eax
cmp cx, ax
jae 0x48ce90
mov dword [esi + 4], str.Optional_header_no_magic
jmp 0x48d078
mov eax, dword [esi]
mov ecx, esi
movzx ebx, word [edi]
call dword [eax + 0x18]
sub eax, 1
je 0x48cec6
sub eax, 3
je 0x48ceb0
mov dword [esi + 4], str.Unrecognized_magic
jmp 0x48d078
mov eax, 0x20b
cmp bx, ax
je 0x48cedc
mov dword [esi + 4], str.32_bit_executables_are_not_supported_by_this_disassembler
jmp 0x48d078
mov eax, 0x10b
cmp bx, ax
je 0x48cedc
mov dword [esi + 4], str.64_bit_executables_are_not_supported_by_this_disassembler
jmp 0x48d078
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x4c]
cmp word [esi + 0x34], ax
jae 0x48cef5
mov dword [esi + 4], str.Optional_header_too_short
jmp 0x48d078
mov eax, dword [edi + 4]
mov ecx, esi
mov dword [esi + 0x44], eax
mov eax, dword [edi + 8]
mov dword [esi + 0x48], eax
mov eax, dword [edi + 0xc]
mov dword [esi + 0x4c], eax
mov eax, dword [edi + 0x14]
mov dword [esi + 0x50], eax
mov eax, dword [esi]
call dword [eax + 0x18]
push 0
pop ecx
sub eax, 1
je 0x48cf3b
sub eax, 3
jne 0x48cf56
mov dword [esi + 0x54], ecx
mov eax, dword [edi + 0x18]
mov dword [esi + 0x58], eax
mov eax, dword [edi + 0x1c]
mov dword [esi + 0x5c], eax
mov eax, dword [edi + 0x38]
mov dword [esi + 0x60], eax
mov eax, dword [edi + 0x6c]
jmp 0x48cf53
mov eax, dword [edi + 0x18]
mov dword [esi + 0x54], eax
mov eax, dword [edi + 0x1c]
mov dword [esi + 0x58], eax
mov dword [esi + 0x5c], ecx
mov eax, dword [edi + 0x38]
mov dword [esi + 0x60], eax
mov eax, dword [edi + 0x5c]
mov dword [esi + 0x64], eax
lea eax, [esi + 0x68]
push eax
push ecx
mov ecx, esi
call fcn.0048d5e7
lea ecx, [esi + 0x70]
mov bl, al
push ecx
push 1
mov ecx, esi
and bl, 1
call fcn.0048d5e7
and bl, al
mov ecx, esi
lea eax, [esi + 0x78]
push eax
push 2
call fcn.0048d5e7
and bl, al
mov ecx, esi
lea eax, [esi + 0x80]
push eax
push 3
call fcn.0048d5e7
and bl, al
mov ecx, esi
lea eax, [esi + 0x88]
push eax
push 5
call fcn.0048d5e7
and bl, al
mov ecx, esi
lea eax, [esi + 0x90]
push eax
push 0xb
call fcn.0048d5e7
and bl, al
mov ecx, esi
lea eax, [esi + 0x98]
push eax
push 0xc
call fcn.0048d5e7
and bl, al
mov ecx, esi
lea eax, [esi + 0xa0]
push eax
push 0xd
call fcn.0048d5e7
and bl, al
mov ecx, esi
lea eax, [esi + 0xa8]
push eax
push 0xe
call fcn.0048d5e7
test bl, al
jne 0x48cffc
mov dword [esi + 4], str.Malformed_data_directory
jmp 0x48d078
movzx ecx, word [esi + 0x34]
xor edx, edx
add ecx, edi
movzx edi, word [esi + 0x38]
mov dword [esi + 0x3c], ecx
test edi, edi
je 0x48d037
cmp dword [ecx], 0x7865742e
jne 0x48d022
cmp word [ecx + 4], 0x74
jne 0x48d022
mov byte [esi + 0x40], 1
mov eax, dword [ecx + 0x14]
add eax, dword [ecx + 0x10]
add ecx, 0x28
cmp eax, edx
cmovbe eax, edx
mov edx, eax
sub edi, 1
jne 0x48d00f
cmp edx, dword [esi + 8]
jbe 0x48d03d
int3
mov eax, dword [esi + 0xc]
add eax, edx
mov dword [esi + 8], edx
cmp byte [esi + 0x40], 0
mov dword [esi + 0x10], eax
jne 0x48d057
mov dword [esi + 4], str.Resource_only_executables_are_not_yet_supported
jmp 0x48d078
and dword [esi + 4], 0
mov al, 1
jmp 0x48d07a
mov dword [esi + 4], str.No_PE_signature
jmp 0x48d078
mov dword [esi + 4], str.Bad_file_offset_to_PE_header
jmp 0x48d078
mov dword [esi + 4], str.Not_MZ
xor al, al
pop edi
pop esi
pop ebx
ret