Function at 0x41aea0
Capabilities:
Enumerate pe sections

Disassembly:
mov eax, dword [0x4471cc]
mov ecx, dword [0x4471c8]
mov edx, dword [0x4471c4]
sub esp, 8
push eax
mov eax, dword [0x4471c0]
push ecx
movzx ecx, word [0x447692]
push edx
push eax
push 0
push ecx
call sub.gnwie.dll_DCONTsetchildpos
mov edx, dword [0x44709c]
mov eax, dword [0x447098]
mov ecx, dword [0x447094]
push edx
mov edx, dword [0x447090]
push eax
movzx eax, word [0x447692]
push ecx
push edx
push 1
push eax
call sub.gnwie.dll_DCONTsetchildpos
mov ecx, dword [0x4470bc]
mov edx, dword [0x4470b8]
mov eax, dword [0x4470b4]
push ecx
mov ecx, dword [0x4470b0]
push edx
movzx edx, word [0x447692]
push eax
push ecx
push 2
push edx
call sub.gnwie.dll_DCONTsetchildpos
mov eax, dword [0x4470dc]
mov ecx, dword [0x4470d8]
mov edx, dword [0x4470d4]
add esp, 0x48
push eax
mov eax, dword [0x4470d0]
push ecx
movzx ecx, word [0x447692]
push edx
push eax
push 3
push ecx
call sub.gnwie.dll_DCONTsetchildpos
mov edx, dword [0x44715c]
mov eax, dword [0x447158]
mov ecx, dword [0x447154]
push edx
mov edx, dword [0x447150]
push eax
movzx eax, word [0x447692]
push ecx
push edx
push 4
push eax
call sub.gnwie.dll_DCONTsetchildpos
mov ecx, dword [0x4471dc]
mov edx, dword [0x4471d8]
mov eax, dword [0x4471d4]
push ecx
mov ecx, dword [0x4471d0]
push edx
movzx edx, word [0x447692]
push eax
push ecx
push 5
push edx
call sub.gnwie.dll_DCONTsetchildpos
movzx ecx, word [0x447674]
add esp, 0x48
lea eax, [esp]
push eax
push ecx
call sub.gnwie.dll_Wquerywinpos
push 0x82
mov edx, dword [0x4476ec]
mov eax, dword [0x4476e8]
mov ecx, dword [0x4476f8]
push edx
push eax
mov eax, dword [esp + 0x18]
lea edx, [ecx*4]
mov ecx, dword [0x447888]
sub eax, edx
mov edx, dword [esp + 0x14]
push eax
lea eax, [edx + ecx*4]
movzx ecx, word [0x44768e]
push eax
push ecx
call sub.gnwie.dll_SHLsetpos
movzx edx, word [0x44769e]
push edx
mov byte [0x44753f], 0
call sub.gnwie.dll_Wsetfocus
add esp, 0x2c
ret
sub esp, 8
push esi
lea eax, [esp + 4]
push eax
push 0
call sub.gnwie.dll_Wquerywinsize
mov ecx, dword [0x447884]
mov eax, dword [esp + 0x10]
mov esi, dword [0x447880]
sub eax, ecx
cdq
push 0x82
sub eax, edx
push ecx
movzx ecx, word [0x44772a]
sar eax, 1
push esi
push eax
mov eax, dword [esp + 0x1c]
sub eax, esi
cdq
sub eax, edx
sar eax, 1
push eax
push ecx
call sub.gnwie.dll_SHLsetpos
movzx edx, word [0x44772a]
push edx
call sub.gnwie.dll_SHLupdatesizes
movzx eax, word [0x447736]
push eax
call sub.gnwie.dll_Wsetfocus
add esp, 0x28
call fcn.004188f0
pop esi
add esp, 8
ret
sub esp, 8
push esi
lea eax, [esp + 4]
push eax
push 0
call sub.gnwie.dll_Wquerywinsize
mov ecx, dword [0x4476e0]
mov eax, dword [esp + 0x10]
mov esi, dword [0x4476dc]
sub eax, ecx
cdq
push 0x82
sub eax, edx
push ecx
movzx ecx, word [0x44789e]
sar eax, 1
push esi
push eax
mov eax, dword [esp + 0x1c]
sub eax, esi
cdq
sub eax, edx
sar eax, 1
push eax
push ecx
call sub.gnwie.dll_SHLsetpos
movzx edx, word [0x44789e]
push edx
call sub.gnwie.dll_SHLupdatesizes
movzx eax, word [0x4478a6]
push eax
call sub.gnwie.dll_Wsetfocus
add esp, 0x28
pop esi
add esp, 8
ret
mov eax, dword [esp + 8]
push ebx
mov ebx, 1
sub eax, ebx
je 0x41b429
sub eax, 5
je 0x41b3f5
sub eax, ebx
jne case.0x41aed7.2
mov eax, dword [esp + 0x10]
cmp eax, 0x63
ja case.0x41aed7.2
movzx eax, byte [eax + 0x41b4a8]
jmp dword [eax*4 + 0x41b480]
call fcn.00418f30
mov ecx, dword [0x448ec0]
movzx eax, word [ecx + 8]
cmp ax, bx
jne 0x41af79
cmp word [ecx + 2], 2
je 0x41af1b
add ecx, 0x1c
push 0x43ab1e
push ecx
call fcn.0040ad50
movzx ecx, word [0x447686]
push ecx
call sub.gnwie.dll_INPTFDwrite
add esp, 0xc
movzx eax, word [0x44767c]
push 0
lea edx, [esp + 0x10]
push edx
push 3
push eax
mov byte [esp + 0x1c], bl
mov byte [esp + 0x1d], bl
mov byte [esp + 0x1e], bl
call sub.gnwie.dll_BTNGenable
movzx edx, word [0x44767c]
push ebx
lea ecx, [esp + 0x20]
push ecx
push 3
push edx
mov byte [esp + 0x2c], 0
mov byte [esp + 0x2d], 0
mov byte [esp + 0x2e], bl
call sub.gnwie.dll_BTNGenable
mov eax, dword [0x448ec0]
add esp, 0x20
mov word [eax + 2], 2
call fcn.004172f0
pop ebx
jmp fcn.00418980
test ax, ax
jne 0x41afce
movzx edx, word [0x44767c]
push 0
lea ecx, [esp + 0x10]
push ecx
push 3
push edx
mov byte [esp + 0x1c], bl
mov byte [esp + 0x1d], bl
mov byte [esp + 0x1e], bl
call sub.gnwie.dll_BTNGenable
mov byte [esp + 0x1c], bl
call fcn.0041ffe0
movzx edx, word [0x44767c]
push ebx
lea ecx, [esp + 0x20]
push ecx
test al, al
sete al
push 3
push edx
mov byte [esp + 0x2d], al
mov byte [esp + 0x2e], bl
call sub.gnwie.dll_BTNGenable
add esp, 0x20
call fcn.004172f0
pop ebx
jmp fcn.00418980
call fcn.00418f30
mov eax, dword [0x448ec0]
push 0x33e
push eax
push 0x447200
call fcn.00404360
add esp, 0xc
call fcn.004188f0
pop ebx
jmp 0x418720
mov eax, dword [esp + 0x14]
sub eax, 0
je 0x41b06b
sub eax, ebx
je 0x41b041
sub eax, ebx
jne case.0x41aed7.2
pop ebx
mov dword [esp + 0x10], 3
mov ecx, dword [0x44766c]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], 7
movzx edx, word [0x447670]
mov dword [esp + 4], edx
jmp fcn.0043919e
pop ebx
mov dword [esp + 0x10], 2
mov eax, dword [0x44766c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 7
movzx ecx, word [0x447670]
mov dword [esp + 4], ecx
jmp fcn.0043919e
mov edx, dword [0x44766c]
movzx eax, word [0x447670]
push ebx
push edx
push 7
push eax
call fcn.0043919e
add esp, 0x10
pop ebx
ret
mov eax, dword [esp + 0x14]
sub eax, 0
je 0x41b0de
sub eax, ebx
je 0x41b0b3
sub eax, ebx
jne case.0x41aed7.2
movzx ecx, word [0x447676]
push 0x710
push ecx
call fcn.0041ff80
add esp, 8
pop ebx
ret
pop ebx
mov dword [esp + 0x10], 0
mov edx, dword [0x44766c]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 7
movzx eax, word [0x447670]
mov dword [esp + 4], eax
jmp fcn.0043919e
push esi
mov esi, dword [0x448fe0]
call fcn.00418d20
call fcn.00418f30
cmp ax, 0x2a
je 0x41b16f
movzx edx, word [0x44768c]
push 0
lea ecx, [esp + 0x14]
push ecx
push 3
push edx
mov byte [esp + 0x20], bl
mov byte [esp + 0x21], bl
mov byte [esp + 0x22], bl
call sub.gnwie.dll_BTNGenable
movzx ecx, word [0x44768a]
push 0
lea eax, [esp + 0x24]
push eax
push 3
push ecx
call sub.gnwie.dll_BTNGenable
movzx edx, word [0x447688]
push 4
push edx
call sub.gnwie.dll_BTNset
add esp, 0x28
mov eax, esi
call fcn.00418ff0
mov eax, dword [0x448ec0]
movzx eax, word [eax]
cmp ax, 2
je 0x41b172
test ax, ax
je 0x41b172
movzx ecx, word [0x447676]
push 0
push 0x63
push 7
push ecx
call fcn.0043919e
add esp, 0x10
pop esi
pop ebx
ret
cmp dword [0x4478b4], 0
jne 0x41b19a
movzx edx, word [0x44768c]
mov ecx, dword [0x447674]
push 0
push 0
push edx
call fcn.0041a7f0
add esp, 0xc
test ax, ax
jne 0x41b16f
pop esi
pop ebx
jmp 0x419600
movzx eax, word [0x44767a]
push eax
mov bl, 3
call fcn.00418890
mov ecx, dword [0x448ec0]
mov word [0x4476e4], ax
mov word [ecx], ax
movsx eax, ax
add esp, 4
sub eax, 0
je 0x41b24f
sub eax, 1
je 0x41b1fb
sub eax, 1
jne case.0x41aed7.2
movzx edx, word [0x447682]
push 2
push edx
call sub.gnwie.dll_BTNset
movzx eax, word [0x447684]
push 2
push eax
call sub.gnwie.dll_BTNset
add esp, 0x10
pop ebx
ret
movsx ecx, word [0x4478b8]
mov edx, dword [0x448fe0]
push 0
push ecx
push 0x54
push edx
call fcn.00407c10
movsx eax, word [0x4478b8]
mov ecx, dword [0x448fe0]
mov edx, dword [ecx + 0xd8]
mov dword [edx + 0x100], eax
movzx eax, word [0x447682]
push 4
push eax
call sub.gnwie.dll_BTNset
movzx ecx, word [0x447684]
push 4
push ecx
call sub.gnwie.dll_BTNset
add esp, 0x20
pop ebx
ret
movsx edx, word [0x4478b8]
mov eax, dword [0x448fe0]
push 0
push edx
push 0x54
push eax
call fcn.00407c10
movsx ecx, word [0x4478b8]
mov edx, dword [0x448fe0]
mov eax, dword [edx + 0xd8]
mov dword [eax + 0x100], ecx
movzx ecx, word [0x447682]
push 2
push ecx
call sub.gnwie.dll_BTNset
movzx edx, word [0x447684]
push 4
push edx
call sub.gnwie.dll_BTNset
add esp, 0x20
pop ebx
ret
call fcn.00418f30
mov eax, dword [0x448ec0]
cmp word [eax], 2
jne case.0x41aed7.2
movzx ecx, word [0x447682]
push ecx
call sub.gnwie.dll_BTNgetstatus
add esp, 4
test al, al
jne 0x41b2de
movzx edx, word [0x447684]
push 4
push edx
call sub.gnwie.dll_BTNset
add esp, 8
pop ebx
ret
movzx eax, word [0x447684]
push 0
push eax
call sub.gnwie.dll_BTNset
add esp, 8
pop ebx
ret
movzx ecx, word [0x44767c]
push ecx
mov bl, 3
call fcn.00418890
add esp, 4
mov word [0x4476e4], ax
call fcn.00418f30
movsx eax, word [0x4476e4]
sub eax, 0
je 0x41b36d
sub eax, 1
je 0x41b34b
sub eax, 1
jne 0x41b383
mov edx, dword [0x448a34]
mov eax, dword [edx]
mov ecx, dword [0x448ec0]
push eax
add ecx, 0x1c
push ecx
call fcn.0040ad50
add esp, 8
call fcn.004172f0
pop ebx
jmp fcn.00418980
mov edx, dword [0x448ec0]
add edx, 0x1c
push 0x43ab1e
push edx
call fcn.0040ad50
add esp, 8
call fcn.004172f0
pop ebx
jmp fcn.00418980
mov eax, dword [0x448ec0]
add eax, 0x1c
push 0x43b164
push eax
call fcn.0040ad50
add esp, 8
call fcn.004172f0
pop ebx
jmp fcn.00418980
movzx ecx, word [0x44768c]
push 0
push 0
push ecx
mov ecx, dword [0x447674]
call fcn.0041ab40
add esp, 0xc
pop ebx
jmp 0x419670
mov edx, dword [0x448ec0]
mov ax, word [0x447676]
mov word [edx + 0x33c], ax
call fcn.0041fe70
pop ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x62
mov dword [esp + 8], 7
mov ecx, dword [0x448ec0]
movzx edx, word [ecx + 0x33c]
mov dword [esp + 4], edx
jmp fcn.0043919e
cmp dword [esp + 0x10], ebx
jne case.0x41aed7.2
pop ebx
mov dword [esp + 0x10], 0
mov eax, dword [0x44766c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 7
movzx ecx, word [0x447670]
mov dword [esp + 4], ecx
jmp fcn.0043919e
mov edx, dword [0x4470ec]
mov eax, dword [0x4470e8]
mov ecx, dword [0x4470e4]
push edx
mov edx, dword [0x4470e0]
push eax
movzx eax, word [0x4476a0]
push ecx
push edx
push eax
call sub.gnwie.dll_Wsetwinpos
mov ecx, dword [0x44710c]
mov edx, dword [0x447108]
mov eax, dword [0x447104]
push ecx
mov ecx, dword [0x447100]
push edx
movzx edx, word [0x4476a2]
push eax
push ecx
push edx
call sub.gnwie.dll_Wsetwinpos
add esp, 0x28
pop ebx
ret