Function at 0x454660
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x21c
mov eax, dword [0x4a3eb0]
xor eax, esp
mov dword [esp + 0x218], eax
mov eax, dword [esp + 0x224]
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x234]
push ebx
mov ebx, dword [esp + 0x22c]
push ebp
mov ebp, dword [esp + 0x238]
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
test ebx, ebx
je 0x4546b5
push 0x18
jmp 0x4546b7
push 0xc
push 0x40
call edi
mov esi, eax
test esi, esi
je 0x4547cf
push 0x4c
push 0x40
call edi
mov dword [esp + 0x14], eax
test eax, eax
je 0x4547c4
mov dword [esi + 4], eax
test ebx, ebx
je 0x4546fa
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
mov dword [esi], 2
mov dword [esi + 8], eax
mov dword [esi + 0xc], ebx
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], ebp
jmp 0x454707
mov edx, dword [esp + 0x10]
mov dword [esi], 1
mov dword [esi + 8], edx
mov eax, dword [esp + 0x10]
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x454710
sub eax, edx
add eax, 5
push eax
push 0x40
call edi
mov edi, eax
test edi, edi
je 0x4547b2
mov eax, dword [str.._]
mov dword [edi], eax
mov cl, byte [0x48ebb8]
mov eax, dword [esp + 0x10]
lea edx, [edi + 4]
mov byte [edi + 4], cl
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x454744
push 0
push 0
push 3
push 0
push 2
push 0x40000000
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [esp + 0x1c], eax
call edi
mov eax, dword [esp + 0x18]
cmp eax, 0xffffffff
je 0x4547b8
mov ecx, dword [esp + 0x14]
push 0
lea edx, [esp + 0x28]
push edx
push 0x4c
push ecx
push 0x4c
push ecx
push 0x220408
push eax
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x454811
mov eax, dword [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x14]
push ecx
call edi
push esi
call edi
jmp 0x4547d5
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [esp + 0x14]
push ecx
call edi
push esi
call edi
jmp 0x4547d5
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
push esi
call edi
jmp 0x4547d5
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4547e0
push eax
call edi
test ebx, ebx
je 0x4547e7
push ebx
call edi
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4547f2
push eax
call edi
test ebp, ebp
je 0x4548f7
lea ebx, [ebx]
mov esi, dword [ebp]
push ebp
call edi
mov ebp, esi
test esi, esi
jne 0x454800
jmp 0x4548f7
test ebx, ebx
je 0x45487d
mov edx, dword [ebx]
push edx
lea eax, [esp + 0x2c]
push str._Port_d_
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebx + 0x1f]
mov eax, dword [ecx*4 + 0x4a2968]
add esp, 0xc
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x454837
lea edi, [esp + 0x28]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x454845
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
lea eax, [esp + 0x28]
rep movsb byte es:[edi], byte [esi]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x454862
mov edx, dword [str._:]
mov cl, byte [0x48eba4]
mov dword [eax], edx
mov byte [eax + 4], cl
jmp 0x454882
mov byte [esp + 0x28], 0
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4548aa
mov edx, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x454890
lea edi, [esp + 0x28]
sub eax, edx
dec edi
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4548a0
jmp 0x4548c8
mov eax, dword [esp + 0x10]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4548b0
lea edi, [esp + 0x28]
sub eax, edx
dec edi
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4548c0
mov ecx, eax
shr ecx, 2
mov esi, edx
mov edx, dword [esp + 0x14]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
movzx eax, byte [edx + 6]
mov esi, dword [esp + 0x18]
push eax
push esi
push 0
call fcn.00454290
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x228]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00473c8a
add esp, 0x21c
ret