Function at 0x1002cb7d
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008cc35
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1e4
push esi
movzx eax, byte [ebp + 0x1c]
test eax, eax
je 0x1002cc03
mov eax, dword [ebp + 8]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x34]
mov dword [eax], 0
jmp 0x1002cbe1
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x34]
mov dword [ecx], eax
mov eax, dword [ebp - 0x34]
cmp dword [eax], 2
jge 0x1002cbfe
mov eax, dword [ebp - 0x34]
push dword [eax]
mov ecx, dword [ebp - 0x158]
call fcn.10019299
and dword [eax], 0
jmp 0x1002cbd6
jmp 0x1002d7d8
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x14], 0xe8cff0ea
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x58], 6
mov dword [ebp - 0x84], 0xfffffff9
mov dword [ebp - 0x1c], 0x14f16367
mov dword [ebp - 0x1a8], 0xfffffffd
mov dword [ebp - 0x8c], 0x33d73c12
mov dword [ebp - 0x108], 0xfffffff7
mov dword [ebp - 0x1b8], 0xfffffffd
mov dword [ebp - 0x148], 0x49d95921
mov dword [ebp - 0x14], 0x13
jmp 0x1002cc83
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffee
jg 0x1002ccc1
mov dword [ebp - 0xc0], 8
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xc0], eax
push 0xe07
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x14]
push eax
push 0x298f
push 0
lea eax, [ebp - 0x2c]
push eax
call fcn.10029be0
add esp, 0x18
jmp 0x1002cc7c
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x58], eax
jl 0x1002ccd5
mov dword [ebp - 0xcc], 1
jmp 0x1002ccdc
and dword [ebp - 0xcc], 0
mov dword [ebp - 0x14], 0x537c57f3
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0xcc]
je 0x1002ccf7
mov dword [ebp - 0x78], 1
jmp 0x1002ccfb
and dword [ebp - 0x78], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x78], eax
jne 0x1002cd0c
mov dword [ebp - 0x7c], 1
jmp 0x1002cd10
and dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x7c]
sub eax, dword [ebp - 0x58]
js 0x1002cd2a
cmp dword [ebp - 0x58], 0
je 0x1002cd2a
mov dword [ebp - 0x12c], 1
jmp 0x1002cd31
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x84], 9
jne 0x1002cd4f
mov dword [ebp - 0xac], 1
jmp 0x1002cd56
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x84]
jle 0x1002cd73
mov dword [ebp - 0xc4], 1
jmp 0x1002cd7a
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0xc4]
test eax, eax
je 0x1002ce0c
mov dword [ebp - 0x1c0], 0x161e
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0x10], 0
jmp 0x1002cdb0
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x1002cdc6
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1f0], 0xeda781b5
jmp 0x1002cda9
mov dword [ebp - 0x10], 0
jmp 0x1002cdd6
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1002cdec
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x17c], 0xe520c3d8
jmp 0x1002cdcf
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x17c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x17c], eax
jmp 0x1002cf01
mov dword [ebp - 0x100], 1
mov dword [ebp - 0xf4], 0xfffffffc
mov dword [ebp - 0x138], 0x9421a0e
mov dword [ebp - 0x1c], 0
jmp 0x1002ce3a
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xb
jge 0x1002ce6d
mov byte [ebp - 0x1d], 0
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x1002ce60
push 0
push 0x12b5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [ebp - 0x8c], 0
je 0x1002ce6b
jmp 0x1002ce33
jmp 0x1002ce33
mov dword [ebp - 0x1c], 0x19
jmp 0x1002ce7d
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xfffffff9
jl 0x1002cf01
mov dword [ebp - 0x118], 0x6751
mov dword [ebp - 0x110], 0xf5756627
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x1002ceb1
push 0
push 0x3742
call fcn.100306fc
pop ecx
pop ecx
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x148]
push eax
push 0x66b2
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0xf4]
push eax
push 0
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.10034a1c
add esp, 0x2c
jmp 0x1002ce76
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 4]
mov dword [ebp - 0xd8], eax
push 2
lea ecx, [ebp - 0xf0]
call fcn.100191fb
and dword [ebp - 4], 0
mov dword [ebp - 0x48], 0
jmp 0x1002cf2e
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x1002cf4a
push dword [ebp - 0x48]
lea ecx, [ebp - 0xf0]
call fcn.10019299
mov dword [eax], 0x57fd5464
jmp 0x1002cf27
push 0
lea ecx, [ebp - 0xf0]
call fcn.10019299
mov dword [eax], 6
jmp 0x1002cf83
push 0
lea ecx, [ebp - 0xf0]
call fcn.10019299
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xb4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xf0]
call fcn.10019299
cmp dword [eax], 0xfffffff6
jge 0x1002cfef
mov dword [ebp - 0x94], 0x1bf2
mov dword [ebp - 0x14c], 0
mov byte [ebp - 0x20], 0
movzx eax, byte [ebp - 0x20]
test eax, eax
je 0x1002cfc9
push 0
push 0x77f9
push 0xa9
call fcn.1002bd5b
add esp, 0xc
push 0
lea ecx, [ebp - 0xf0]
call fcn.10019299
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x14c], eax
jmp 0x1002cf5f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf0]
call fcn.1001927d
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0xd4], 0x3843046b
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0xc8], 0xa42b4837
push 2
lea ecx, [ebp - 0x168]
call fcn.100191fb
mov dword [ebp - 4], 1
mov dword [ebp - 0x1ac], 0xfffffffc
mov dword [ebp - 0x88], 0xfffffffe
mov dword [ebp - 0xfc], 0xfffffff9
mov dword [ebp - 0x54], 0xbd7a89a4
lea eax, [ebp - 0x30]
push eax
push 0x3920
push 0x2344
lea eax, [ebp - 0x168]
push eax
push 1
push 0x32e4
call fcn.10029be0
add esp, 0x18
mov dword [ebp - 0x30], 0
jmp 0x1002d08d
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x1002d0a3
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x1d4], 0xfffffff6
jmp 0x1002d086
mov dword [ebp - 0x44], 0
jmp 0x1002d0b3
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xfffffff2
jge 0x1002d48e
mov dword [ebp - 0x90], 1
mov dword [ebp - 0x74], 0x9dd952ea
push 3
lea ecx, [ebp - 0xe4]
call fcn.100191fb
mov byte [ebp - 4], 2
mov dword [ebp - 0xf8], 0xead
mov dword [ebp - 0x15c], 0xfffffffd
push 2
lea ecx, [ebp - 0x188]
call fcn.100191fb
mov byte [ebp - 4], 3
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xe4]
push eax
push 0x93a
push 0x62da
push 0
call fcn.1002b722
add esp, 0x14
mov dword [ebp - 0x38], 0
jmp 0x1002d133
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x1002d14f
push dword [ebp - 0x38]
lea ecx, [ebp - 0x188]
call fcn.10019299
mov dword [eax], 6
jmp 0x1002d12c
push 0
lea eax, [ebp - 0x90]
push eax
push 0x606d
call fcn.1003125f
add esp, 0xc
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x120], 0
je 0x1002d44b
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0x1d4]
cmp eax, 0xcf8314cd
jne 0x1002d1d1
mov eax, 0x149c99c4
test eax, eax
jne 0x1002d1d1
and dword [ebp - 0x128], 0
jmp 0x1002d1db
mov dword [ebp - 0x128], 1
push 0
lea ecx, [ebp - 0xe4]
call fcn.10019299
mov esi, eax
push 2
lea ecx, [ebp - 0xe4]
call fcn.10019299
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x1002d209
mov dword [ebp - 0x9c], 1
jmp 0x1002d210
and dword [ebp - 0x9c], 0
push 0
lea ecx, [ebp - 0xe4]
call fcn.10019299
mov ecx, dword [ebp - 0x9c]
cmp ecx, dword [eax]
jl 0x1002d233
mov dword [ebp - 0xbc], 1
jmp 0x1002d23a
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0xbc]
jg 0x1002d251
mov dword [ebp - 0xa4], 1
jmp 0x1002d258
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x74], eax
push 2
lea ecx, [ebp - 0xe4]
call fcn.10019299
cmp dword [eax], 0x127c80b1
jge 0x1002d27f
mov dword [ebp - 0x64], 1
jmp 0x1002d283
and dword [ebp - 0x64], 0
push 0
lea ecx, [ebp - 0x168]
call fcn.10019299
mov ecx, dword [ebp - 0x64]
mov dword [eax], ecx
mov eax, dword [ebp - 0x64]
sub eax, dword [ebp - 0x5c]
je 0x1002d44b
mov dword [ebp - 0x50], 0xfffffff8
mov eax, dword [ebp - 0x74]
sub eax, 0x685684c
cmp eax, 3
ja 0x1002d2be
mov dword [ebp - 0x70], 1
jmp 0x1002d2c2
and dword [ebp - 0x70], 0
push 1
lea ecx, [ebp - 0x168]
call fcn.10019299
mov ecx, dword [ebp - 0x70]
cmp ecx, dword [eax]
jge 0x1002d2df
mov dword [ebp - 0x80], 1
jmp 0x1002d2e3
and dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x50]
imul eax, dword [ebp - 0x80]
add eax, 4
jne 0x1002d301
mov eax, 0xaf05e375
test eax, eax
jne 0x1002d301
and dword [ebp - 0x134], 0
jmp 0x1002d30b
mov dword [ebp - 0x134], 1
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], eax
jl 0x1002d32b
mov dword [ebp - 0x130], 1
jmp 0x1002d332
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0xf8]
jne 0x1002d359
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1d4], 0
jne 0x1002d359
and dword [ebp - 0x98], 0
jmp 0x1002d363
mov dword [ebp - 0x98], 1
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x98], eax
jge 0x1002d379
xor eax, eax
jne 0x1002d379
cmp dword [ebp - 0xfc], 0
push 1
lea ecx, [ebp - 0x168]
call fcn.10019299
cmp dword [eax], 0xfffffff8
jne 0x1002d397
mov dword [ebp - 0xa0], 1
jmp 0x1002d39e
and dword [ebp - 0xa0], 0
cmp dword [ebp - 0xa0], 0x2ed8
jge 0x1002d3b6
mov dword [ebp - 0x104], 1
jmp 0x1002d3bd
and dword [ebp - 0x104], 0
push 1
lea ecx, [ebp - 0x188]
call fcn.10019299
imul eax, dword [ebp - 0x50], 0xffffffff
add eax, 0x87a
cmp eax, 0xe52bdabf
jbe 0x1002d3e6
mov dword [ebp - 0xa8], 1
jmp 0x1002d3ed
and dword [ebp - 0xa8], 0
cmp dword [ebp - 0xa8], 1
je 0x1002d402
mov dword [ebp - 0xb0], 1
jmp 0x1002d409
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0xb0], eax
jle 0x1002d420
mov dword [ebp - 0xb8], 1
jmp 0x1002d427
and dword [ebp - 0xb8], 0
cmp dword [ebp - 0xb8], 0xa76c1e80
jbe 0x1002d43c
mov dword [ebp - 0x6c], 1
jmp 0x1002d440
and dword [ebp - 0x6c], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xc8], eax
jmp 0x1002d46b
mov dword [ebp - 0x10c], 9
lea eax, [ebp - 0x10c]
push eax
push 0x747a
push 0
call fcn.1003074c
add esp, 0xc
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x188]
call fcn.1001927d
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xe4]
call fcn.1001927d
jmp 0x1002d0ac
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x168]
call fcn.1001927d
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1a4], 0x647c2c9e
mov dword [ebp - 0x1a0], 0x647c2c9e
mov dword [ebp - 0x19c], 0x647c2c9e
mov dword [ebp - 0x198], 0x647c2c9e
mov dword [ebp - 0x114], 0xfff7
mov dword [ebp - 0x3c], 0
jmp 0x1002d4f4
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x1002d50a
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x174], 0xec2e0cf5
jmp 0x1002d4ed
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x174], 0x1a
jmp 0x1002d538
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x174]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x174], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x174], 1
je 0x1002d693
push 2
lea ecx, [ebp - 0x144]
call fcn.100191fb
mov dword [ebp - 4], 4
mov dword [ebp - 0x4c], 0xd86e52d8
push 0x790b
push 0x7ec9
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x1dc]
push eax
push 1
call fcn.1002b722
add esp, 0x14
mov dword [ebp - 0x4c], 0
jmp 0x1002d599
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jg 0x1002d67f
mov dword [ebp - 0x24], 1
push 2
lea ecx, [ebp - 0x194]
call fcn.100191fb
mov byte [ebp - 4], 5
push 0
push 0x4d39
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x1b0]
push eax
push 0x6dc2
call fcn.1002bcb4
add esp, 0x14
mov dword [ebp - 0x24], 1
jmp 0x1002d5ed
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1002d66b
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x24]
push eax
push 1
push 0x505e
lea eax, [ebp - 0x194]
push eax
push 0x6139
call fcn.1002b7c9
add esp, 0x18
push dword [ebp - 0x24]
lea ecx, [ebp - 0x144]
call fcn.10019299
mov esi, eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x144]
call fcn.10019299
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x1002d649
mov dword [ebp - 0xd0], 1
jmp 0x1002d650
and dword [ebp - 0xd0], 0
imul eax, dword [ebp - 0xd0], 0x715c
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1a4], eax
jmp 0x1002d5e6
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x194]
call fcn.1001927d
jmp 0x1002d592
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x144]
call fcn.1001927d
jmp 0x1002d51d
push 0x447a
push 0x43a1
lea eax, [ebp - 0x114]
push eax
push 0
call fcn.1002f49e
add esp, 0x10
and dword [ebp - 0x60], 0
jmp 0x1002d6c4
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x18]
add eax, 0x28
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x60], eax
jge 0x1002d7d8
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0x10], 0
jne 0x1002d6fe
push dword [ebp - 0xd8]
push dword [ebp - 0x11c]
push 0
lea eax, [ebp - 0x68]
push eax
push dword [ebp - 0x18]
call fcn.1002ecc7
add esp, 0x14
jmp 0x1002d6b4
push 4
push 0x1000
mov eax, dword [ebp - 0x18]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xd8]
add ecx, dword [eax + 0xc]
push ecx
push 0x2511
push 0x1da9
call fcn.100280f5
pop ecx
pop ecx
call eax
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x18]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x124]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x68]
call fcn.10028117
add esp, 0xc
mov dword [ebp - 0x1c8], 0xfffffffb
mov byte [ebp - 0x1e], 0
movzx eax, byte [ebp - 0x1e]
test eax, eax
je 0x1002d776
push 0x4fd7
push 0
push 0x126
call fcn.10032f1f
add esp, 0xc
mov byte [ebp - 0x1f], 0
push 0x654e
lea eax, [ebp - 0x1f]
push eax
push 0x408f
push 0x2939
push 0x2e81
push 0
push 0x7b7d
call fcn.1002b86b
add esp, 0x1c
push 0x41cc
push 0x1285
lea eax, [ebp - 0x18]
push eax
push 0
push 0x15fa
push 0x6f8f
push 0x67
push 0x107
push 0x7b5f
lea eax, [ebp - 0x68]
push eax
call fcn.10032db8
add esp, 0x28
jmp 0x1002d6b4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret