Function at 0x41e9d0
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x1c
push ebx
mov ebx, dword [esp + 0x28]
push esi
push edi
mov edi, ecx
mov esi, eax
movzx eax, byte [edi + 1]
cmp eax, dword [ebx + 0x2c]
jae 0x41ec10
mov eax, dword [ebx + 0x24]
cmp eax, 5
je 0x41e9fc
cmp eax, 6
jne 0x41ec10
movzx ecx, word [edi + 6]
push ebp
mov ebp, dword [sym.imp.WS2_32.dll_ntohs]
push ecx
call ebp
movzx eax, ax
add dword [esi], eax
mov esi, dword [esi]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x30]
mov edx, dword [eax + 0x2878]
add edx, dword [eax + 0x2874]
cmp esi, edx
ja 0x41ec05
movzx eax, byte [edi + 1]
mov edx, dword [ebx + 0x28]
movzx ebx, word [edi + 2]
mov ecx, eax
shl ecx, 4
sub ecx, eax
movzx eax, word [edi + 4]
lea esi, [edx + ecx*4]
push eax
mov dword [esp + 0x28], esi
call ebp
movzx ebp, ax
movzx eax, word [esi + 0x26]
mov dx, ax
mov ecx, ebx
shr ecx, 0xc
shr dx, 0xc
mov dword [esp + 0x18], ebp
movzx ecx, cx
movzx edx, dx
cmp ebx, eax
jae 0x41ea71
add ecx, 0x10
cmp cx, dx
jb 0x41ebcd
movzx eax, cx
add edx, 7
cmp eax, edx
jge 0x41ebcd
movzx ecx, word [esi + 0x26]
cmp ebx, ecx
jne 0x41ea9c
movzx edx, word [esi + 0x28]
cmp ebp, edx
jbe 0x41ebcd
mov eax, dword [edi + 0xc]
mov esi, dword [sym.imp.WS2_32.dll_ntohl]
push eax
call esi
mov ecx, dword [edi + 8]
push ecx
mov dword [esp + 0x20], eax
call esi
mov edx, dword [edi + 0x14]
push edx
mov dword [esp + 0x14], eax
call esi
mov ebp, eax
mov eax, dword [edi + 0x10]
push eax
mov dword [esp + 0x24], ebp
call esi
cmp ebp, eax
jae 0x41ec05
mov ecx, dword [esp + 0x14]
add ecx, ebp
mov dword [esp + 0x28], ecx
cmp ecx, eax
ja 0x41ec05
mov edx, dword [esp + 0x10]
cmp dword [esp + 0x1c], edx
jae 0x41ec05
mov ecx, dword [esp + 0x24]
mov esi, dword [ecx + 0x38]
lea ebp, [ecx + 0x34]
cmp esi, ebp
je 0x41eb34
movzx edx, word [ecx + 0x26]
movzx ecx, word [esi + 8]
cmp ebx, edx
jb 0x41eb11
cmp cx, dx
jb 0x41eb2d
jmp 0x41eb16
cmp cx, dx
jae 0x41eb34
movzx ecx, cx
cmp ecx, ebx
jb 0x41eb34
ja 0x41eb2d
movzx ecx, word [esi + 0xa]
cmp ecx, dword [esp + 0x18]
jbe 0x41ebd7
mov esi, dword [esi + 4]
cmp esi, ebp
jne 0x41eb02
push 8
push eax
xor ebx, ebx
call fcn.00420fa0
add esp, 8
test eax, eax
je 0x41ec05
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x34]
push ecx
push eax
push edi
push edx
call fcn.00420950
mov esi, eax
add esp, 0x10
test esi, esi
je 0x41ec05
mov ecx, dword [esp + 0x1c]
mov edx, dword [esi + 0x44]
mov eax, ecx
shr eax, 5
lea eax, [edx + eax*4]
and ecx, 0x1f
mov edx, 1
shl edx, cl
test dword [eax], edx
jne 0x41ebcd
dec dword [esi + 0x40]
or dword [eax], edx
mov ecx, dword [esi + 0x48]
mov eax, dword [ecx + 0xc]
cmp dword [esp + 0x28], eax
jbe 0x41eb9d
sub eax, dword [esp + 0x20]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [ecx + 8]
add ecx, dword [esp + 0x20]
push eax
add edi, 0x18
push edi
push ecx
call fcn.0040a440
add esp, 0xc
cmp dword [esi + 0x40], 0
ja 0x41ebcd
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x34]
push edx
call fcn.00420660
add esp, 4
pop ebp
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x1c
ret
movzx edx, word [esi + 0xa]
cmp edx, dword [esp + 0x18]
jb 0x41eb34
mov cl, byte [esi + 0xc]
and cl, 0xf
cmp cl, 0xc
jne 0x41ec05
mov edx, dword [esi + 0x48]
cmp eax, dword [edx + 0xc]
jne 0x41ec05
mov eax, dword [esp + 0x10]
cmp eax, dword [esi + 0x3c]
je 0x41eb67
pop ebp
pop edi
pop esi
or eax, 0xffffffff
pop ebx
add esp, 0x1c
ret
pop edi
pop esi
or eax, 0xffffffff
pop ebx
add esp, 0x1c
ret