Function at 0x401a30
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 0x38
push ebx
push ebp
push esi
mov esi, dword [0x4292cc]
push edi
lea ecx, [esp + 0x18]
call fcn.004159a0
mov edi, esi
push esi
mov dword [esp + 0x14], edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [esi + eax*2]
mov dword [esp + 0x14], eax
movzx eax, word [esi]
mov ebp, 0x20
test ax, ax
je 0x401a7c
cmp ax, bp
ja 0x401a78
movzx eax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x401a67
mov dword [esp + 0x10], edi
mov ebx, 1
cmp word [esi], bp
jbe 0x401a8e
add esi, 2
cmp word [esi], bp
ja 0x401a86
movzx eax, word [esi]
test ax, ax
je 0x401aa7
cmp ax, bp
ja 0x401aa7
movzx eax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x401a96
movzx eax, word [esi]
cmp eax, 0x2f
je 0x401ab8
cmp eax, 0x2d
jne 0x401d66
cmp word [esi + 2], 0x21
lea edi, [esi + 2]
je 0x401d5d
push 0x42298c
push edi
call fcn.00403920
add esp, 8
test eax, eax
je 0x401b32
movzx eax, word [esi + 6]
lea ecx, [esi + 6]
cmp eax, 0x30
jb 0x401ae9
cmp eax, 0x39
jbe 0x401afd
cmp eax, 0x61
jb 0x401af3
cmp eax, 0x7a
jbe 0x401afd
cmp eax, 0x41
jb 0x401b11
cmp eax, 0x5a
ja 0x401b11
mov dword [0x4292c4], ecx
mov word [0x4292c8], 0x101
jmp 0x401a81
cmp ax, bp
ja 0x401d66
mov dword [0x4292c4], 0x422530
mov word [0x4292c8], 0x101
jmp 0x401a81
push 0x422984
push edi
call fcn.00403920
add esp, 8
test eax, eax
je 0x401b5a
lea ecx, [esi + 6]
push ecx
push str.OverwriteMode
call fcn.004019a0
add esp, 8
jmp 0x401a81
push 0x42297c
push edi
call fcn.00403920
add esp, 8
test eax, eax
je 0x401ba2
movzx eax, word [esi + 6]
lea ecx, [esi + 6]
cmp eax, 0x30
jb 0x401d66
cmp eax, 0x32
ja 0x401d66
cmp word [esi + 8], bp
ja 0x401d66
push ecx
push str.GUIMode
call fcn.004019a0
add esp, 8
jmp 0x401a81
push 0x422974
push edi
call fcn.00403920
add esp, 8
test eax, eax
je 0x401bca
lea edx, [esi + 6]
push edx
push str.GUIFlags
call fcn.004019a0
add esp, 8
jmp 0x401a81
push 0x42296c
push edi
call fcn.00403920
add esp, 8
test eax, eax
je 0x401bf2
lea eax, [esi + 6]
push eax
push str.MiscFlags
call fcn.004019a0
add esp, 8
jmp 0x401a81
push 0x422964
push edi
call fcn.00403920
add esp, 8
test eax, eax
je 0x401c36
movzx eax, word [esi + 6]
lea ecx, [esi + 6]
cmp eax, 0x30
je 0x401c19
cmp eax, 0x31
jne 0x401d66
cmp word [esi + 8], bp
ja 0x401d66
push ecx
push str.SelfDelete
call fcn.004019a0
add esp, 8
jmp 0x401a81
push 0x42295c
push edi
call fcn.00403920
add esp, 8
test eax, eax
je 0x401c5d
cmp word [esi + 6], bp
ja 0x401d66
mov byte [0x4292ca], bl
jmp 0x401a81
push 0x422954
push edi
call fcn.00403920
add esp, 8
test eax, eax
je 0x401c9b
movzx eax, word [esi + 6]
lea ecx, [esi + 6]
cmp eax, 0x30
jb 0x401d66
cmp eax, 0x39
ja 0x401d66
push ecx
call fcn.0041a958
add esp, 4
mov dword [0x4283c0], eax
jmp 0x401a81
push 0x42294c
push edi
call fcn.00403920
add esp, 8
test eax, eax
je 0x401cc3
lea ecx, [esi + 8]
push ecx
push str.BeginPromptTimeout
call fcn.004019a0
add esp, 8
jmp 0x401a81
movzx eax, word [edi]
cmp eax, 0x70
je 0x401d27
cmp eax, 0x50
je 0x401d27
cmp eax, 0x79
je 0x401cda
cmp eax, 0x59
jne 0x401ceb
cmp word [esi + 4], bp
ja 0x401ceb
mov byte [0x4292c9], bl
jmp 0x401a81
cmp eax, 0x3f
je 0x401cfa
cmp eax, 0x68
je 0x401cfa
cmp eax, 0x48
jne 0x401d0b
cmp word [esi + 4], bp
ja 0x401d0b
mov byte [0x4292cb], bl
jmp 0x401a81
push edi
call fcn.00401880
add esp, 4
test eax, eax
je 0x401d66
cmp eax, ebx
je 0x401dcc
mov esi, eax
jmp 0x401a81
lea ecx, [esp + 0x24]
call fcn.004159a0
lea edx, [esp + 0x24]
push edx
add esi, 4
push esi
call fcn.00403960
lea esi, [eax - 2]
mov eax, dword [esp + 0x2c]
push eax
call fcn.00401010
mov ecx, dword [esp + 0x30]
push ecx
call fcn.0041a71a
add esp, 0x10
jmp 0x401a81
mov edi, esi
add esi, 4
test edi, edi
jne 0x401d68
mov edi, esi
mov ebp, dword [esp + 0x10]
cmp ebp, edi
je 0x401de3
push ebp
lea ecx, [esp + 0x40]
call fcn.00415ee0
lea eax, [esp + 0x3c]
sub edi, ebp
push eax
sar edi, 1
push edi
lea ecx, [esp + 0x38]
call fcn.00415910
mov ecx, dword [esp + 0x30]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00415f20
mov edx, dword [esp + 0x30]
push edx
call fcn.0041a71a
mov eax, dword [esp + 0x40]
push eax
call fcn.0041a71a
add esp, 8
lea ecx, [esp + 0x18]
call fcn.00415b20
lea ecx, [esp + 0x18]
call fcn.00416090
mov ecx, dword [esp + 0x18]
push ebx
push ecx
jmp 0x401de9
mov edx, dword [esp + 0x18]
push edx
call fcn.0041a71a
add esp, 4
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x38
ret
push ebx
push 0x422948
push str.SfxVarCmdLine1
call fcn.004064a0
add esp, 0xc
push esi
lea ecx, [esp + 0x34]
call fcn.00415ee0
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x30]
sub eax, esi
push edx
sar eax, 1
push eax
lea ecx, [esp + 0x44]
call fcn.00415910
mov eax, dword [esp + 0x3c]
push eax
lea ecx, [esp + 0x1c]
call fcn.00415f20
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.0041a71a
mov edx, dword [esp + 0x34]
push edx
call fcn.0041a71a
add esp, 8
lea ecx, [esp + 0x18]
call fcn.00415b20
lea ecx, [esp + 0x18]
call fcn.00416090
mov eax, dword [esp + 0x18]
push eax
call fcn.0041a71a
add esp, 4
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x38
ret