Function at 0x419850
Capabilities:
Access peb ldr_data
Enumerate pe sections

Disassembly:
push 0xffffffffffffffff
push 0x4faa26
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
push ebp
push esi
mov esi, dword [esp + 0x2c]
xor eax, eax
push edi
mov al, byte [esi]
lea eax, [eax + eax*2]
mov ax, word [eax*4 + 0x51a0b8]
and eax, 0x8000
or ah, 0x40
shr eax, 0xe
and eax, 0xffff
mov eax, dword [eax + esi]
push eax
call sub.WSOCK32.dll_ntohl
mov ebx, eax
xor eax, eax
mov al, byte [esi]
lea ecx, [eax + eax*2]
mov ax, word [ecx*4 + 0x51a0b8]
and eax, 0x8000
or ah, 0x40
shr eax, 0xe
and eax, 0xffff
mov ax, word [eax + esi + 4]
push eax
call sub.WSOCK32.dll_ntohs
mov edi, eax
xor eax, eax
mov al, byte [esi]
lea edx, [eax + eax*2]
mov ax, word [edx*4 + 0x51a0b8]
and ax, 0x8000
mov cx, ax
neg cx
sbb ecx, ecx
and ecx, 2
inc ecx
and ecx, 0xffff
mov cl, byte [ecx + esi + 6]
mov byte [esp + 0x30], cl
mov cx, ax
neg cx
sbb ecx, ecx
and ecx, 2
inc ecx
and ecx, 0xffff
neg ax
sbb eax, eax
mov dl, byte [ecx + esi + 7]
and eax, 2
mov byte [esp + 0x10], dl
inc eax
and eax, 0xffff
mov eax, dword [eax + esi + 8]
push eax
call sub.WSOCK32.dll_ntohl
mov ebp, eax
xor eax, eax
mov al, byte [esi]
lea eax, [eax + eax*2]
mov ax, word [eax*4 + 0x51a0b8]
and eax, 0x8000
or ah, 0x40
shr eax, 0xe
and eax, 0xffff
mov ax, word [eax + esi + 0xc]
push eax
call sub.WSOCK32.dll_ntohs
mov esi, eax
mov eax, dword [0xcf37a0]
cmp ebp, eax
mov dword [esp + 0x14], esi
jne 0x419b12
push ebx
call fcn.004cbc20
mov esi, eax
add esp, 4
test esi, esi
jne 0x4199e8
push edi
call fcn.004cbf80
add esp, 4
test eax, eax
je 0x4199c9
push 0xc4
call fcn.004ed8ee
add esp, 4
mov dword [esp + 0x18], eax
test eax, eax
mov dword [esp + 0x28], esi
je 0x4199b8
mov ecx, dword [esp + 0x30]
push 1
push ecx
push edi
push ebx
mov ecx, eax
call fcn.004c77a0
mov dword [esp + 0x28], 0xffffffff
mov esi, eax
jmp 0x419a53
xor eax, eax
mov dword [esp + 0x28], 0xffffffff
mov esi, eax
jmp 0x419a53
mov edx, dword [esp + 0x30]
and edi, 0xffff
and edx, 0xff
push edx
push edi
push ebx
call fcn.004c4c20
add esp, 0xc
mov esi, eax
jmp 0x419a53
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x50]
mov cl, byte [esp + 0x30]
and edi, 0x3fff
mov word [esi + 0x3c], di
mov byte [esi + 0x40], cl
mov ecx, dword [0x636ac8]
test ecx, ecx
je 0x419a4f
lea edx, [edi + 0x4000]
lea eax, [esp + 0x30]
mov dword [esp + 0x30], edx
lea edx, [esp + 0x18]
push eax
push edx
call fcn.0040b280
mov eax, dword [esp + 0x18]
test eax, eax
je 0x419a4f
mov ecx, dword [0x636ac8]
xor eax, eax
mov ax, word [esi + 0x3c]
push 0
add eax, 0x4000
push eax
call fcn.00411c60
and eax, 0x3fff
mov word [esi + 0x3e], ax
jmp 0x419a53
mov word [esi + 0x3e], di
test esi, esi
je 0x419c52
mov edi, dword [esp + 0x14]
and edi, 0xffff
push edi
call fcn.004c58f0
mov word [esi + 0x44], ax
mov ecx, dword [0x636ac8]
add esp, 4
test ecx, ecx
je 0x419ad5
mov dx, word [esi + 0x3c]
lea eax, [esp + 0x30]
add dx, 0x4000
push eax
mov dword [esp + 0x34], edx
lea edx, [esp + 0x1c]
push edx
call fcn.0040b280
mov eax, dword [esp + 0x18]
test eax, eax
je 0x419ad5
cmp word [esi + 0x44], 0
jne 0x419ad5
mov ax, word [esi + 0x3c]
lea ecx, [esp + 0x30]
lea edx, [esp + 0x18]
add ax, 0x4000
push ecx
mov ecx, dword [0x636ac8]
push edx
mov dword [esp + 0x38], eax
call fcn.0040b280
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x14]
mov word [esi + 0x46], cx
jmp 0x419ae2
push edi
call fcn.004c58f0
add esp, 4
mov word [esi + 0x46], ax
mov ecx, dword [0xcf3ea4]
mov edx, dword [ecx]
call dword [edx + 0x14]
mov eax, dword [esp + 0x10]
mov ecx, dword [0xcf3ea4]
and eax, 0xff
push eax
push ecx
mov ecx, esi
call fcn.004c6660
mov ecx, dword [0xcf3ea4]
mov edx, dword [ecx]
jmp 0x419c4f
push ebp
call fcn.004cbc20
add esp, 4
mov dword [esp + 0x14], eax
test eax, eax
je 0x419c52
push ebx
call fcn.004cbc20
mov ebp, eax
add esp, 4
test ebp, ebp
jne 0x419ba9
push edi
call fcn.004cbf80
add esp, 4
test eax, eax
je 0x419b8a
push 0xc4
call fcn.004ed8ee
add esp, 4
mov dword [esp + 0x18], eax
test eax, eax
mov dword [esp + 0x28], 1
je 0x419b7c
mov ecx, dword [esp + 0x30]
push 1
push ecx
push edi
push ebx
mov ecx, eax
call fcn.004c77a0
mov dword [esp + 0x28], 0xffffffff
mov ebp, eax
jmp 0x419bb1
xor eax, eax
mov dword [esp + 0x28], 0xffffffff
mov ebp, eax
jmp 0x419bb1
mov edx, dword [esp + 0x30]
and edi, 0xffff
and edx, 0xff
push edx
push edi
push ebx
call fcn.004c4c20
add esp, 0xc
mov ebp, eax
jmp 0x419bb1
mov eax, dword [ebp]
mov ecx, ebp
call dword [eax + 0x50]
test ebp, ebp
je 0x419c52
mov edi, esi
and edi, 0xffff
push edi
call fcn.004c58f0
mov word [ebp + 0x44], ax
mov ecx, dword [0x636ac8]
add esp, 4
mov dword [esp + 0x30], eax
test ecx, ecx
je 0x419c20
mov si, word [ebp + 0x3c]
mov ebx, dword [ecx + 8]
mov edx, dword [ecx + 4]
add si, 0x4000
mov eax, esi
sub ebx, edx
and eax, 0xffff
sar ebx, 2
and eax, 0x80000007
jns 0x419c03
dec eax
or eax, 0xfffffff8
inc eax
shl eax, 0xa
xor edx, edx
div ebx
mov eax, dword [ecx + 4]
mov edx, dword [eax + edx*4]
test edx, edx
je 0x419c20
cmp word [edx + 4], si
je 0x419c65
mov edx, dword [edx]
test edx, edx
jne 0x419c14
push edi
call fcn.004c58f0
add esp, 4
mov word [ebp + 0x46], ax
mov esi, dword [esp + 0x14]
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 0x14]
mov ecx, dword [esp + 0x10]
and ecx, 0xff
push ecx
push esi
mov ecx, ebp
call fcn.004c6660
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x10]
mov ecx, dword [esp + 0x20]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1c
ret
test edx, edx
je 0x419c20
cmp word [esp + 0x30], 0
jne 0x419c20
mov edi, dword [ecx + 8]
mov edx, dword [ecx + 4]
mov eax, esi
sub edi, edx
and eax, 0xffff
sar edi, 2
and eax, 0x80000007
jns 0x419c8f
dec eax
or eax, 0xfffffff8
inc eax
shl eax, 0xa
xor edx, edx
mov ecx, dword [ecx + 4]
div edi
mov edx, dword [ecx + edx*4]
test edx, edx
je 0x419cac
cmp word [edx + 4], si
je 0x419cac
mov edx, dword [edx]
test edx, edx
jne 0x419ca0
mov edx, dword [edx + 0x14]
mov word [ebp + 0x46], dx
jmp 0x419c2d