Function at 0x456c00
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x21c
mov eax, dword [0x4a6eb0]
xor eax, esp
mov dword [esp + 0x218], eax
mov eax, dword [esp + 0x224]
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x234]
push ebx
mov ebx, dword [esp + 0x22c]
push ebp
mov ebp, dword [esp + 0x238]
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
test ebx, ebx
je 0x456c55
push 0x18
jmp 0x456c57
push 0xc
push 0x40
call edi
mov esi, eax
test esi, esi
je 0x456d6f
push 0x4c
push 0x40
call edi
mov dword [esp + 0x14], eax
test eax, eax
je 0x456d64
mov dword [esi + 4], eax
test ebx, ebx
je 0x456c9a
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
mov dword [esi], 2
mov dword [esi + 8], eax
mov dword [esi + 0xc], ebx
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], ebp
jmp 0x456ca7
mov edx, dword [esp + 0x10]
mov dword [esi], 1
mov dword [esi + 8], edx
mov eax, dword [esp + 0x10]
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x456cb0
sub eax, edx
add eax, 5
push eax
push 0x40
call edi
mov edi, eax
test edi, edi
je 0x456d52
mov eax, dword [str.._]
mov dword [edi], eax
mov cl, byte [0x492324]
mov eax, dword [esp + 0x10]
lea edx, [edi + 4]
mov byte [edi + 4], cl
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x456ce4
push 0
push 0
push 3
push 0
push 2
push 0x40000000
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [esp + 0x1c], eax
call edi
mov eax, dword [esp + 0x18]
cmp eax, 0xffffffff
je 0x456d58
mov ecx, dword [esp + 0x14]
push 0
lea edx, [esp + 0x28]
push edx
push 0x4c
push ecx
push 0x4c
push ecx
push 0x220408
push eax
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x456db1
mov eax, dword [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x14]
push ecx
call edi
push esi
call edi
jmp 0x456d75
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [esp + 0x14]
push ecx
call edi
push esi
call edi
jmp 0x456d75
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
push esi
call edi
jmp 0x456d75
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [esp + 0x10]
test eax, eax
je 0x456d80
push eax
call edi
test ebx, ebx
je 0x456d87
push ebx
call edi
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x456d92
push eax
call edi
test ebp, ebp
je 0x456e97
lea ebx, [ebx]
mov esi, dword [ebp]
push ebp
call edi
mov ebp, esi
test esi, esi
jne 0x456da0
jmp 0x456e97
test ebx, ebx
je 0x456e1d
mov edx, dword [ebx]
push edx
lea eax, [esp + 0x2c]
push str._Port_d_
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebx + 0x1f]
mov eax, dword [ecx*4 + 0x4a5968]
add esp, 0xc
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x456dd7
lea edi, [esp + 0x28]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x456de5
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
lea eax, [esp + 0x28]
rep movsb byte es:[edi], byte [esi]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x456e02
mov edx, dword [str._:]
mov cl, byte [0x492310]
mov dword [eax], edx
mov byte [eax + 4], cl
jmp 0x456e22
mov byte [esp + 0x28], 0
mov eax, dword [esp + 0x20]
test eax, eax
je 0x456e4a
mov edx, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x456e30
lea edi, [esp + 0x28]
sub eax, edx
dec edi
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x456e40
jmp 0x456e68
mov eax, dword [esp + 0x10]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x456e50
lea edi, [esp + 0x28]
sub eax, edx
dec edi
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x456e60
mov ecx, eax
shr ecx, 2
mov esi, edx
mov edx, dword [esp + 0x14]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
movzx eax, byte [edx + 6]
mov esi, dword [esp + 0x18]
push eax
push esi
push 0
call fcn.00456830
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x228]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004764f6
add esp, 0x21c
ret