Function at 0x456670
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x21c
mov eax, dword [0x4a5eb0]
xor eax, esp
mov dword [esp + 0x218], eax
mov eax, dword [esp + 0x224]
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x234]
push ebx
mov ebx, dword [esp + 0x22c]
push ebp
mov ebp, dword [esp + 0x238]
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
test ebx, ebx
je 0x4566c5
push 0x18
jmp 0x4566c7
push 0xc
push 0x40
call edi
mov esi, eax
test esi, esi
je 0x4567df
push 0x4c
push 0x40
call edi
mov dword [esp + 0x14], eax
test eax, eax
je 0x4567d4
mov dword [esi + 4], eax
test ebx, ebx
je 0x45670a
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
mov dword [esi], 2
mov dword [esi + 8], eax
mov dword [esi + 0xc], ebx
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], ebp
jmp 0x456717
mov edx, dword [esp + 0x10]
mov dword [esi], 1
mov dword [esi + 8], edx
mov eax, dword [esp + 0x10]
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x456720
sub eax, edx
add eax, 5
push eax
push 0x40
call edi
mov edi, eax
test edi, edi
je 0x4567c2
mov eax, dword [str.._]
mov dword [edi], eax
mov cl, byte [0x490fa4]
mov eax, dword [esp + 0x10]
lea edx, [edi + 4]
mov byte [edi + 4], cl
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x456754
push 0
push 0
push 3
push 0
push 2
push 0x40000000
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [esp + 0x1c], eax
call edi
mov eax, dword [esp + 0x18]
cmp eax, 0xffffffff
je 0x4567c8
mov ecx, dword [esp + 0x14]
push 0
lea edx, [esp + 0x28]
push edx
push 0x4c
push ecx
push 0x4c
push ecx
push 0x220408
push eax
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x456821
mov eax, dword [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x14]
push ecx
call edi
push esi
call edi
jmp 0x4567e5
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [esp + 0x14]
push ecx
call edi
push esi
call edi
jmp 0x4567e5
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
push esi
call edi
jmp 0x4567e5
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4567f0
push eax
call edi
test ebx, ebx
je 0x4567f7
push ebx
call edi
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x456802
push eax
call edi
test ebp, ebp
je 0x456907
lea ebx, [ebx]
mov esi, dword [ebp]
push ebp
call edi
mov ebp, esi
test esi, esi
jne 0x456810
jmp 0x456907
test ebx, ebx
je 0x45688d
mov edx, dword [ebx]
push edx
lea eax, [esp + 0x2c]
push str._Port_d_
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebx + 0x1f]
mov eax, dword [ecx*4 + 0x4a4968]
add esp, 0xc
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x456847
lea edi, [esp + 0x28]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x456855
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
lea eax, [esp + 0x28]
rep movsb byte es:[edi], byte [esi]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x456872
mov edx, dword [str._:]
mov cl, byte [0x490f90]
mov dword [eax], edx
mov byte [eax + 4], cl
jmp 0x456892
mov byte [esp + 0x28], 0
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4568ba
mov edx, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4568a0
lea edi, [esp + 0x28]
sub eax, edx
dec edi
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4568b0
jmp 0x4568d8
mov eax, dword [esp + 0x10]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4568c0
lea edi, [esp + 0x28]
sub eax, edx
dec edi
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4568d0
mov ecx, eax
shr ecx, 2
mov esi, edx
mov edx, dword [esp + 0x14]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
movzx eax, byte [edx + 6]
mov esi, dword [esp + 0x18]
push eax
push esi
push 0
call fcn.004562a0
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x228]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00475d76
add esp, 0x21c
ret