Function at 0x454a00
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x21c
mov eax, dword [0x49eef8]
xor eax, esp
mov dword [esp + 0x218], eax
mov eax, dword [esp + 0x224]
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x234]
push ebx
mov ebx, dword [esp + 0x22c]
push ebp
mov ebp, dword [esp + 0x238]
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
test ebx, ebx
je 0x454a55
push 0x18
jmp 0x454a57
push 0xc
push 0x40
call edi
mov esi, eax
test esi, esi
je 0x454b6f
push 0x4c
push 0x40
call edi
mov dword [esp + 0x14], eax
test eax, eax
je 0x454b64
mov dword [esi + 4], eax
test ebx, ebx
je 0x454a9a
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
mov dword [esi], 2
mov dword [esi + 8], eax
mov dword [esi + 0xc], ebx
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], ebp
jmp 0x454aa7
mov edx, dword [esp + 0x10]
mov dword [esi], 1
mov dword [esi + 8], edx
mov eax, dword [esp + 0x10]
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x454ab0
sub eax, edx
add eax, 5
push eax
push 0x40
call edi
mov edi, eax
test edi, edi
je 0x454b52
mov eax, dword [str.._]
mov dword [edi], eax
mov cl, byte [0x489bfc]
mov eax, dword [esp + 0x10]
lea edx, [edi + 4]
mov byte [edi + 4], cl
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x454ae4
push 0
push 0
push 3
push 0
push 2
push 0x40000000
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [esp + 0x1c], eax
call edi
mov eax, dword [esp + 0x18]
cmp eax, 0xffffffff
je 0x454b58
mov ecx, dword [esp + 0x14]
push 0
lea edx, [esp + 0x28]
push edx
push 0x4c
push ecx
push 0x4c
push ecx
push 0x220408
push eax
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x454bb1
mov eax, dword [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x14]
push ecx
call edi
push esi
call edi
jmp 0x454b75
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [esp + 0x14]
push ecx
call edi
push esi
call edi
jmp 0x454b75
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
push esi
call edi
jmp 0x454b75
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [esp + 0x10]
test eax, eax
je 0x454b80
push eax
call edi
test ebx, ebx
je 0x454b87
push ebx
call edi
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x454b92
push eax
call edi
test ebp, ebp
je 0x454c97
lea ebx, [ebx]
mov esi, dword [ebp]
push ebp
call edi
mov ebp, esi
test esi, esi
jne 0x454ba0
jmp 0x454c97
test ebx, ebx
je 0x454c1d
mov edx, dword [ebx]
push edx
lea eax, [esp + 0x2c]
push str._Port_d_
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebx + 0x1f]
mov eax, dword [ecx*4 + 0x49d9ac]
add esp, 0xc
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x454bd7
lea edi, [esp + 0x28]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x454be5
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
lea eax, [esp + 0x28]
rep movsb byte es:[edi], byte [esi]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x454c02
mov edx, dword [str._:]
mov cl, byte [0x489be8]
mov dword [eax], edx
mov byte [eax + 4], cl
jmp 0x454c22
mov byte [esp + 0x28], 0
mov eax, dword [esp + 0x20]
test eax, eax
je 0x454c4a
mov edx, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x454c30
lea edi, [esp + 0x28]
sub eax, edx
dec edi
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x454c40
jmp 0x454c68
mov eax, dword [esp + 0x10]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x454c50
lea edi, [esp + 0x28]
sub eax, edx
dec edi
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x454c60
mov ecx, eax
shr ecx, 2
mov esi, edx
mov edx, dword [esp + 0x14]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
movzx eax, byte [edx + 6]
mov esi, dword [esp + 0x18]
push eax
push esi
push 0
call fcn.00454630
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x228]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00472076
add esp, 0x21c
ret