Function at 0x460be0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff94
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
call fcn.00404bf0
lea eax, [ebp - 0x24]
mov edx, dword [0x460950]
call fcn.004051d8
xor eax, eax
push ebp
push 0x460db3
push dword fs:[eax]
mov dword fs:[eax], esp
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push eax
pop ecx
sub eax, edx
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x50], eax
push eax
pop ecx
sub eax, edx
mov eax, dword [ebp - 0x50]
xor edx, edx
push edx
push eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 0x3c]
cdq
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
mov dword [ebp - 4], eax
push eax
pop ecx
sub eax, edx
push 1
push 0x2000
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
push eax
push 0
call sub.kernel32.dll_VirtualAlloc_1
mov dword [ebp - 0xc], eax
push eax
pop ecx
sub eax, edx
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
sub edx, dword [eax + 0x34]
mov dword [ebp - 8], edx
push eax
pop ecx
sub eax, edx
mov eax, dword [ebp - 4]
lea esi, [eax + 0x18]
mov eax, dword [ebp - 4]
movzx eax, word [eax + 0x14]
add esi, eax
push eax
pop ecx
sub eax, edx
mov eax, dword [ebp - 4]
movzx edi, word [eax + 6]
dec edi
test edi, edi
jl 0x460ce8
inc edi
xor ebx, ebx
nop
nop
nop
nop
lea eax, [ebx + ebx*4]
mov eax, dword [esi + eax*8 + 8]
lea edx, [ebx + ebx*4]
mov edx, dword [esi + edx*8 + 0x10]
mov dword [ebp - 0x54], edx
push 4
push 0x1000
push eax
lea eax, [ebx + ebx*4]
mov eax, dword [esi + eax*8 + 0xc]
add eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_VirtualAlloc_1
mov edx, eax
lea eax, [ebx + ebx*4]
mov eax, dword [esi + eax*8 + 0x14]
add eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x54]
call fcn.00402efc
inc ebx
dec edi
jne 0x460ca3
push eax
pop ecx
sub eax, edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x28]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
push eax
pop ecx
sub eax, edx
push ebp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xa0]
add eax, dword [ebp - 0xc]
call fcn.004609e8
pop ecx
push eax
pop ecx
sub eax, edx
push ebp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x80]
add eax, dword [ebp - 0xc]
call fcn.00460a74
pop ecx
push eax
pop ecx
sub eax, edx
mov eax, dword [ebp - 4]
movzx edi, word [eax + 6]
dec edi
test edi, edi
jl 0x460d73
inc edi
xor ebx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea eax, [ebp - 0x58]
push eax
lea eax, [ebx + ebx*4]
mov eax, dword [esi + eax*8 + 0x24]
call 0x460970
push eax
lea eax, [ebx + ebx*4]
mov eax, dword [esi + eax*8 + 8]
push eax
lea eax, [ebx + ebx*4]
mov eax, dword [esi + eax*8 + 0xc]
add eax, dword [ebp - 0xc]
push eax
call sub.kernel32.dll_VirtualProtect
inc ebx
dec edi
jne 0x460d39
push eax
pop ecx
sub eax, edx
push 0
push 1
mov eax, dword [ebp - 0xc]
push eax
call dword [ebp - 0x20]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x460dba
lea eax, [ebp - 0x48]
call fcn.0040473c
lea eax, [ebp - 0x40]
mov edx, 3
call fcn.00404760
lea eax, [ebp - 0x24]
mov edx, dword [0x460950]
call fcn.0040529c
ret