Function at 0x1002bc02
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe0
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x1002bc3b
mov eax, dword [ebp + 8]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
mov eax, dword [eax]
mov eax, dword [eax]
and dword [eax + 0x10], 0
jmp 0x1002c233
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0xc], 0
jmp 0x1002bc60
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jge 0x1002bc76
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xb8], 1
jmp 0x1002bc59
mov dword [ebp - 0xc], 0
jmp 0x1002bc86
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 2
jge 0x1002bc99
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x74], 0xba394643
jmp 0x1002bc7f
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x74], 0
jmp 0x1002bcbe
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x74]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x74], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x74], 0
jg 0x1002bd22
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x90], 0xb2bc40ed
push 0
push 0x7834
call fcn.1002bbc0
pop ecx
pop ecx
mov dword [ebp - 0x2c], 0
jmp 0x1002bcfa
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x1002bd20
mov dword [ebp - 0xb4], 0x79e672ca
mov dword [ebp - 0xb4], 0xffffffff
mov dword [ebp - 0x90], 0xa233712
jmp 0x1002bcf3
jmp 0x1002bca9
mov byte [ebp - 0x15], 0
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x1002bd40
push 0x565
push 0x1cb2
push 0
call dword [sym.imp.USER32.dll_RemoveMenu]
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 4]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0xd4], 1
mov byte [ebp - 0x19], 0
push 0
push 0x5532
lea eax, [ebp - 0x19]
push eax
push 0x68d1
call fcn.1002c5c6
add esp, 0x10
mov byte [ebp - 0x17], 0
movzx eax, byte [ebp - 0x17]
test eax, eax
je 0x1002bd8f
push 0x3b17
push 0x3ed0
push 0
call fcn.10024240
add esp, 0xc
mov dword [ebp - 0x24], 0xcff0ea75
mov dword [ebp - 0x5c], 0xfffffffa
mov dword [ebp - 0x94], 0xc0f1fa6f
mov dword [ebp - 0x80], 6
mov dword [ebp - 0x78], 0xce85662b
mov dword [ebp - 0x24], 0
jmp 0x1002bdc5
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffe7
jle 0x1002be5f
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0xa4], 0xffffffff
mov dword [ebp - 0x98], 0xfffffff7
mov dword [ebp - 0x88], 0xf8ef5d3c
push 0x1a99
lea eax, [ebp - 0x80]
push eax
push 0x1f7f
lea eax, [ebp - 0x94]
push eax
push 0
lea eax, [ebp - 0x88]
push eax
push 0x1749
push 0x43a8
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x78]
push eax
push 0x7e78
lea eax, [ebp - 0x98]
push eax
push 0x1633
call fcn.1002715b
add esp, 0x40
cmp dword [ebp - 0x5c], 0
je 0x1002be5a
jmp 0x1002be5f
jmp 0x1002bdbe
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 4], eax
and dword [ebp - 0x44], 0
jmp 0x1002be8a
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 4]
add eax, 0x28
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x44], eax
jge 0x1002c233
mov eax, dword [ebp - 4]
cmp dword [eax + 0x10], 0
jne 0x1002bff3
push 0x4f8a
push dword [ebp - 0x60]
push dword [ebp - 0xa8]
push 0
push 0x30c
push dword [ebp - 4]
lea eax, [ebp - 0x40]
push eax
call fcn.100265c3
add esp, 0x1c
mov dword [ebp - 0x14], 0
jmp 0x1002bedd
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1002bef3
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xc4], 1
jmp 0x1002bed6
mov dword [ebp - 0x14], 0
jmp 0x1002bf03
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1002bf16
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x6c], 0xba394643
jmp 0x1002befc
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x6c], 0
jmp 0x1002bf3b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x6c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6c], 0
jg 0x1002bfd0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x8c], 0xb2bc40ed
mov byte [ebp - 0x16], 0
push 1
lea eax, [ebp - 0x16]
push eax
call fcn.10023ae6
pop ecx
pop ecx
mov dword [ebp - 0x34], 0
jmp 0x1002bf7e
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x1002bfcb
mov dword [ebp - 0xa0], 0x79e672ca
push 0x13c6
push 0
push 0x447f
lea eax, [ebp - 0xa0]
push eax
call fcn.10026fc9
add esp, 0x10
push 0x2b8f
push 0xfa1
push 0x77c5
push 0
lea eax, [ebp - 0x8c]
push eax
call fcn.1002503c
add esp, 0x14
jmp 0x1002bf77
jmp 0x1002bf26
mov byte [ebp - 0x18], 0
movzx eax, byte [ebp - 0x18]
test eax, eax
je 0x1002bfee
push 0x565
push 0x1cb2
push 0
call dword [sym.imp.USER32.dll_RemoveMenu]
jmp 0x1002be7a
push 4
push 0x1000
mov eax, dword [ebp - 4]
push dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x60]
add ecx, dword [eax + 0xc]
push ecx
push 0xd3b
push 0xe23
call fcn.10022f14
pop ecx
pop ecx
call eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 4]
push dword [eax + 0x10]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x7c]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x40]
call fcn.100230eb
add esp, 0xc
mov dword [ebp - 0x28], 0x9b55bb2c
mov dword [ebp - 0x10], 0
jmp 0x1002c052
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1002c068
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xd0], 1
jmp 0x1002c04b
mov dword [ebp - 0x10], 0
jmp 0x1002c078
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1002c08e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xc0], 0xfffffffe
jmp 0x1002c071
mov dword [ebp - 0x28], 0xb
jmp 0x1002c09e
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x11
je 0x1002c21c
mov dword [ebp - 0x20], 0x417be18
mov dword [ebp - 0x20], 2
jmp 0x1002c0bf
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x1002c217
mov dword [ebp - 8], 0
jmp 0x1002c0d9
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x1002c0ec
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x3c], 0xffffffff
jmp 0x1002c0d2
mov dword [ebp - 8], 0
jmp 0x1002c0fc
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x1002c112
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xe0], 0x7b30498
jmp 0x1002c0f5
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x3c], 0
jmp 0x1002c137
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x3c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3c], 2
jg 0x1002c212
mov dword [ebp - 0x84], 0x5da2282d
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3c]
mov eax, dword [ebp + eax*4 - 0xd0]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xd0], ecx
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x64], eax
jl 0x1002c187
mov dword [ebp - 0x58], 1
jmp 0x1002c18b
and dword [ebp - 0x58], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3c]
imul eax, dword [ebp - 0x28]
test eax, eax
je 0x1002c1ac
mov eax, 0x34bd
test eax, eax
jne 0x1002c1ac
and dword [ebp - 0x54], 0
jmp 0x1002c1b3
mov dword [ebp - 0x54], 1
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x54]
jge 0x1002c1c4
mov dword [ebp - 0x50], 1
jmp 0x1002c1c8
and dword [ebp - 0x50], 0
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x50]
mov dword [ebp - 0x4c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4c]
mov dword [ebp + eax - 0xc0], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0x4c], eax
jge 0x1002c1f9
mov dword [ebp - 0x48], 1
jmp 0x1002c1fd
and dword [ebp - 0x48], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x48]
mov dword [ebp + eax - 0xe0], ecx
jmp 0x1002c122
jmp 0x1002c0b8
jmp 0x1002c097
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 4]
push eax
push 1
call fcn.10024240
add esp, 0xc
jmp 0x1002be7a
mov esp, ebp
pop ebp
ret