Function at 0x426720
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
push ebx
push esi
push edi
mov edi, dword [ecx + 0x18]
mov dword [ebp - 0x28], ecx
cmp edi, 0x50ba08
je 0x426a09
mov eax, dword [ecx + 0x14]
xor edx, edx
xor esi, esi
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x2c], eax
test edi, edi
je 0x426a09
test eax, eax
je 0x4269e8
mov ebx, dword [ebp + 8]
cmp eax, 0x16
jb 0x4269df
mov edx, dword [edi + 4]
mov dword [ebp - 0x24], edx
test edx, edx
je 0x426a09
cmp edx, eax
jae 0x426a09
lea esi, [edx + 8]
cmp esi, eax
ja 0x426a09
xor ecx, ecx
mov dword [ebp - 0x34], edi
cmp esi, 0x16
mov dword [ebp - 0x30], esi
lea eax, [edi + 8]
mov dword [ebp - 0x10], 0
cmovae ecx, eax
test ecx, ecx
jne 0x4267b2
xor bl, bl
mov byte [ebp - 5], 0xff
jmp 0x42696a
movzx eax, word [ecx + 0xc]
push eax
call dword [sym.imp.WS2_32.dll_ntohs]
movzx eax, ax
mov ecx, eax
mov dword [ebp - 0xc], ecx
cmp eax, 0x800
je 0x4268e3
cmp eax, 0x86dd
je 0x4267de
mov bl, 1
jmp 0x426963
xor ecx, ecx
lea eax, [edi + 0x16]
cmp esi, 0x3e
cmovae ecx, eax
test ecx, ecx
jne 0x4267fb
mov ecx, dword [ebp - 0xc]
xor bl, bl
mov byte [ebp - 5], 0xff
jmp 0x426967
mov dl, byte [ecx + 6]
lea ebx, [ecx + 0x28]
mov byte [ebp - 1], dl
lea ecx, [ebx + 7]
test esi, esi
je case.0x426837.139
cmp ecx, edi
jb case.0x426837.139
lea eax, [esi + edi]
cmp ecx, eax
jae case.0x426837.139
movzx eax, dl
cmp eax, 0x8c
ja case.0x426837.1
movzx eax, byte [eax + 0x426a34]
jmp dword [eax*4 + 0x426a14]
movzx eax, byte [ebx + 1]
mov dl, byte [ebx]
add eax, ebx
lea ebx, [eax + 8]
jmp 0x426801
movzx eax, word [ebx + 2]
push eax
call dword [sym.imp.WS2_32.dll_ntohs]
mov ecx, 0xfff8
test cx, ax
jne 0x426877
mov dl, byte [ebx]
mov eax, ebx
lea ebx, [eax + 8]
jmp 0x426801
movzx eax, byte [ebx + 1]
mov dl, byte [ebx]
lea eax, [ebx + eax*4]
lea ebx, [eax + 8]
jmp 0x426801
mov al, byte [ebp - 1]
mov bl, 1
mov ecx, dword [ebp - 0xc]
mov byte [ebp - 5], al
jmp 0x426967
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x10]
push eax
push ebx
lea eax, [ebp - 0x34]
push eax
call fcn.00426150
mov ecx, dword [ebp - 0xc]
mov bl, al
mov al, byte [ebp - 1]
mov byte [ebp - 5], al
jmp 0x426967
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x10]
push eax
push ebx
lea eax, [ebp - 0x34]
push eax
call fcn.00426210
mov ecx, dword [ebp - 0xc]
mov bl, al
mov al, byte [ebp - 1]
mov byte [ebp - 5], al
jmp 0x426967
mov ecx, dword [ebp - 0xc]
mov bl, 1
mov byte [ebp - 5], dl
jmp 0x426967
mov ecx, dword [ebp - 0xc]
xor bl, bl
mov byte [ebp - 5], dl
jmp 0x426967
cmp esi, 0x20
jb 0x426961
lea eax, [edi + 0x16]
test eax, eax
je 0x426961
mov cl, byte [eax + 9]
mov byte [ebp - 5], cl
cmp cl, 6
je 0x426906
cmp cl, 0x11
je 0x426906
mov ecx, dword [ebp - 0xc]
mov bl, 1
jmp 0x426967
movzx edx, byte [eax]
and edx, 0xf
shl edx, 2
lea eax, [edx + 0x1a]
cmp esi, eax
jae 0x42691d
mov ecx, dword [ebp - 0xc]
xor bl, bl
jmp 0x426967
lea eax, [edi + 0x16]
add eax, edx
cmp cl, 6
je 0x42694a
cmp cl, 0x11
je 0x426933
mov ecx, dword [ebp - 0xc]
xor bl, bl
jmp 0x426967
lea ecx, [ebp - 0x10]
push ecx
push eax
lea eax, [ebp - 0x34]
mov ecx, ebx
push eax
call fcn.00426210
mov ecx, dword [ebp - 0xc]
mov bl, al
jmp 0x426967
lea ecx, [ebp - 0x10]
push ecx
push eax
lea eax, [ebp - 0x34]
mov ecx, ebx
push eax
call fcn.00426150
mov ecx, dword [ebp - 0xc]
mov bl, al
jmp 0x426967
xor bl, bl
mov byte [ebp - 5], 0xff
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp + 0xc]
mov byte [ebp - 0x14], bl
test eax, eax
je 0x42698a
push dword [ebp - 0x14]
mov eax, dword [eax]
push dword [ebp - 0x10]
push dword [ebp - 5]
push ecx
mov ecx, dword [ebp + 0xc]
push edx
push dword [ebp + 0x10]
call dword [eax + 4]
test bl, bl
mov ebx, dword [ebp - 0x18]
je 0x4269c7
inc dword [ebp - 0x1c]
add dword [ebp - 0x20], esi
test ebx, ebx
je 0x4269cf
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0x18]
add eax, ecx
cmp ebx, eax
jae 0x426a09
sub eax, ebx
cmp eax, ecx
ja 0x426a09
test esi, esi
je 0x4269c3
cmp eax, esi
jb 0x4269f9
push esi
push edi
push ebx
call fcn.004a7490
add esp, 0xc
add ebx, esi
jmp 0x4269cc
test ebx, ebx
cmove ebx, edi
mov dword [ebp - 0x18], ebx
mov eax, dword [ebp - 0x2c]
add edi, esi
sub eax, esi
mov dword [ebp - 0x2c], eax
jne 0x42675e
mov esi, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x28]
pop edi
mov dword [ecx + 0x14], esi
test edx, edx
pop esi
setne al
pop ebx
mov esp, ebp
pop ebp
ret 0xc
call fcn.004ad988
mov dword [eax], 0x22
call fcn.004ad8cb
pop edi
pop esi
xor al, al
pop ebx
mov esp, ebp
pop ebp
ret 0xc