Function at 0x454350
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x21c
mov eax, dword [0x49ef38]
xor eax, esp
mov dword [esp + 0x218], eax
mov eax, dword [esp + 0x224]
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x234]
push ebx
mov ebx, dword [esp + 0x22c]
push ebp
mov ebp, dword [esp + 0x238]
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
test ebx, ebx
je 0x4543a5
push 0x18
jmp 0x4543a7
push 0xc
push 0x40
call edi
mov esi, eax
test esi, esi
je 0x4544bf
push 0x4c
push 0x40
call edi
mov dword [esp + 0x14], eax
test eax, eax
je 0x4544b4
mov dword [esi + 4], eax
test ebx, ebx
je 0x4543ea
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
mov dword [esi], 2
mov dword [esi + 8], eax
mov dword [esi + 0xc], ebx
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], ebp
jmp 0x4543f7
mov edx, dword [esp + 0x10]
mov dword [esi], 1
mov dword [esi + 8], edx
mov eax, dword [esp + 0x10]
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x454400
sub eax, edx
add eax, 5
push eax
push 0x40
call edi
mov edi, eax
test edi, edi
je 0x4544a2
mov eax, dword [str.._]
mov dword [edi], eax
mov cl, byte [0x489a6c]
mov eax, dword [esp + 0x10]
lea edx, [edi + 4]
mov byte [edi + 4], cl
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x454434
push 0
push 0
push 3
push 0
push 2
push 0x40000000
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [esp + 0x1c], eax
call edi
mov eax, dword [esp + 0x18]
cmp eax, 0xffffffff
je 0x4544a8
mov ecx, dword [esp + 0x14]
push 0
lea edx, [esp + 0x28]
push edx
push 0x4c
push ecx
push 0x4c
push ecx
push 0x220408
push eax
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x454501
mov eax, dword [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x14]
push ecx
call edi
push esi
call edi
jmp 0x4544c5
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [esp + 0x14]
push ecx
call edi
push esi
call edi
jmp 0x4544c5
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
push esi
call edi
jmp 0x4544c5
mov edi, dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4544d0
push eax
call edi
test ebx, ebx
je 0x4544d7
push ebx
call edi
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4544e2
push eax
call edi
test ebp, ebp
je 0x4545e7
lea ebx, [ebx]
mov esi, dword [ebp]
push ebp
call edi
mov ebp, esi
test esi, esi
jne 0x4544f0
jmp 0x4545e7
test ebx, ebx
je 0x45456d
mov edx, dword [ebx]
push edx
lea eax, [esp + 0x2c]
push str._Port_d_
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [ebx + 0x1f]
mov eax, dword [ecx*4 + 0x49d9ac]
add esp, 0xc
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x454527
lea edi, [esp + 0x28]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x454535
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
lea eax, [esp + 0x28]
rep movsb byte es:[edi], byte [esi]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x454552
mov edx, dword [str._:]
mov cl, byte [0x489a58]
mov dword [eax], edx
mov byte [eax + 4], cl
jmp 0x454572
mov byte [esp + 0x28], 0
mov eax, dword [esp + 0x20]
test eax, eax
je 0x45459a
mov edx, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x454580
lea edi, [esp + 0x28]
sub eax, edx
dec edi
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x454590
jmp 0x4545b8
mov eax, dword [esp + 0x10]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4545a0
lea edi, [esp + 0x28]
sub eax, edx
dec edi
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4545b0
mov ecx, eax
shr ecx, 2
mov esi, edx
mov edx, dword [esp + 0x14]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
movzx eax, byte [edx + 6]
mov esi, dword [esp + 0x18]
push eax
push esi
push 0
call fcn.00453f80
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x228]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00471f66
add esp, 0x21c
ret