Function at 0x434260
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x1c
push ebx
mov ebx, dword [esp + 0x28]
push esi
push edi
mov edi, ecx
mov esi, eax
movzx eax, byte [edi + 1]
cmp eax, dword [ebx + 0x2c]
jae 0x4344a0
mov eax, dword [ebx + 0x24]
cmp eax, 5
je 0x43428c
cmp eax, 6
jne 0x4344a0
movzx ecx, word [edi + 6]
push ebp
mov ebp, dword [sym.imp.WS2_32.dll_ntohs]
push ecx
call ebp
movzx eax, ax
add dword [esi], eax
mov esi, dword [esi]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x30]
mov edx, dword [eax + 0x2878]
add edx, dword [eax + 0x2874]
cmp esi, edx
ja 0x434495
movzx eax, byte [edi + 1]
mov edx, dword [ebx + 0x28]
movzx ebx, word [edi + 2]
mov ecx, eax
shl ecx, 4
sub ecx, eax
movzx eax, word [edi + 4]
lea esi, [edx + ecx*4]
push eax
mov dword [esp + 0x28], esi
call ebp
movzx ebp, ax
movzx eax, word [esi + 0x26]
mov dx, ax
mov ecx, ebx
shr ecx, 0xc
shr dx, 0xc
mov dword [esp + 0x18], ebp
movzx ecx, cx
movzx edx, dx
cmp ebx, eax
jae 0x434301
add ecx, 0x10
cmp cx, dx
jb 0x43445d
movzx eax, cx
add edx, 7
cmp eax, edx
jge 0x43445d
movzx ecx, word [esi + 0x26]
cmp ebx, ecx
jne 0x43432c
movzx edx, word [esi + 0x28]
cmp ebp, edx
jbe 0x43445d
mov eax, dword [edi + 0xc]
mov esi, dword [sym.imp.WS2_32.dll_ntohl]
push eax
call esi
mov ecx, dword [edi + 8]
push ecx
mov dword [esp + 0x20], eax
call esi
mov edx, dword [edi + 0x14]
push edx
mov dword [esp + 0x14], eax
call esi
mov ebp, eax
mov eax, dword [edi + 0x10]
push eax
mov dword [esp + 0x24], ebp
call esi
cmp ebp, eax
jae 0x434495
mov ecx, dword [esp + 0x14]
add ecx, ebp
mov dword [esp + 0x28], ecx
cmp ecx, eax
ja 0x434495
mov edx, dword [esp + 0x10]
cmp dword [esp + 0x1c], edx
jae 0x434495
mov ecx, dword [esp + 0x24]
mov esi, dword [ecx + 0x38]
lea ebp, [ecx + 0x34]
cmp esi, ebp
je 0x4343c4
movzx edx, word [ecx + 0x26]
movzx ecx, word [esi + 8]
cmp ebx, edx
jb 0x4343a1
cmp cx, dx
jb 0x4343bd
jmp 0x4343a6
cmp cx, dx
jae 0x4343c4
movzx ecx, cx
cmp ecx, ebx
jb 0x4343c4
ja 0x4343bd
movzx ecx, word [esi + 0xa]
cmp ecx, dword [esp + 0x18]
jbe 0x434467
mov esi, dword [esi + 4]
cmp esi, ebp
jne 0x434392
push 8
push eax
push 0
call fcn.00436870
add esp, 0xc
test eax, eax
je 0x434495
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x34]
push ecx
push eax
push edi
push edx
call fcn.00436220
mov esi, eax
add esp, 0x10
test esi, esi
je 0x434495
mov ecx, dword [esp + 0x1c]
mov edx, dword [esi + 0x44]
mov eax, ecx
shr eax, 5
lea eax, [edx + eax*4]
and ecx, 0x1f
mov edx, 1
shl edx, cl
test dword [eax], edx
jne 0x43445d
dec dword [esi + 0x40]
or dword [eax], edx
mov ecx, dword [esi + 0x48]
mov eax, dword [ecx + 0xc]
cmp dword [esp + 0x28], eax
jbe 0x43442d
sub eax, dword [esp + 0x20]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [ecx + 8]
add ecx, dword [esp + 0x20]
push eax
add edi, 0x18
push edi
push ecx
call fcn.00412180
add esp, 0xc
cmp dword [esi + 0x40], 0
ja 0x43445d
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x34]
push edx
call fcn.00435f30
add esp, 4
pop ebp
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x1c
ret
movzx edx, word [esi + 0xa]
cmp edx, dword [esp + 0x18]
jb 0x4343c4
mov cl, byte [esi + 0xc]
and cl, 0xf
cmp cl, 0xc
jne 0x434495
mov edx, dword [esi + 0x48]
cmp eax, dword [edx + 0xc]
jne 0x434495
mov eax, dword [esp + 0x10]
cmp eax, dword [esi + 0x3c]
je 0x4343f7
pop ebp
pop edi
pop esi
or eax, 0xffffffff
pop ebx
add esp, 0x1c
ret
pop edi
pop esi
or eax, 0xffffffff
pop ebx
add esp, 0x1c
ret