Function at 0x1002d49e
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10089480
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x160
movzx eax, byte [ebp + 8]
test eax, eax
je 0x1002d4d1
push 0
call dword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x1002dc3e
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x10c], 0
mov byte [ebp - 0x20], 0
movzx eax, byte [ebp - 0x20]
test eax, eax
je 0x1002d50e
push 0
push 0x2e3
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
mov byte [ebp - 0x1d], 0
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x1002d525
push 0x16fc
call dword [sym.imp.USER32.dll_BeginDeferWindowPos]
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 4]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x10], 0xa4f833fc
mov dword [ebp - 0x54], 0xa1efe0c2
mov dword [ebp - 0xdc], 0xfffffffb
mov dword [ebp - 0xd8], 0xfffffffb
mov dword [ebp - 0xd4], 0xfffffffb
mov dword [ebp - 0xd0], 0xfffffffb
lea ecx, [ebp - 0x3d]
call fcn.10009433
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x150]
call fcn.100171b4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x128]
call fcn.10017163
and dword [ebp - 4], 0
mov dword [ebp - 0x34], 0
jmp 0x1002d5ad
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x1002d5c0
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x1c], 4
jmp 0x1002d5a6
mov dword [ebp - 0x10], 0
jmp 0x1002d5d0
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x1002d5ef
mov dword [ebp - 0xb4], 0x68876942
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x1c]
mov dword [ebp - 0xb4], eax
jmp 0x1002d5c9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 0
je 0x1002d60e
cmp dword [ebp - 0x10], 0
je 0x1002d60e
mov dword [ebp - 0x84], 1
jmp 0x1002d615
and dword [ebp - 0x84], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
cmp dword [ebp - 0x84], eax
jle 0x1002d630
mov dword [ebp - 0x58], 1
jmp 0x1002d634
and dword [ebp - 0x58], 0
cmp dword [ebp - 0x58], 0x13ca
jge 0x1002d646
mov dword [ebp - 0x78], 1
jmp 0x1002d64a
and dword [ebp - 0x78], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x78]
sub ecx, dword [ebp + eax - 0x1c]
push 4
pop eax
imul eax, eax, 0
imul ecx, dword [ebp + eax - 0x1c]
cmp ecx, 0x8ec
je 0x1002d673
mov dword [ebp - 0x60], 1
jmp 0x1002d677
and dword [ebp - 0x60], 0
mov eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0x10]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x1c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1c]
je 0x1002d69f
mov dword [ebp - 0x88], 1
jmp 0x1002d6a6
and dword [ebp - 0x88], 0
cmp dword [ebp - 0x88], 0xfffffff6
jge 0x1002d6b8
mov dword [ebp - 0x68], 1
jmp 0x1002d6bc
and dword [ebp - 0x68], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x68]
cmp eax, 0x1418
jle 0x1002d6d2
mov dword [ebp - 0x80], 1
jmp 0x1002d6d6
and dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x80]
cmp eax, 9
jle 0x1002d6eb
mov dword [ebp - 0x70], 1
jmp 0x1002d6ef
and dword [ebp - 0x70], 0
cmp dword [ebp - 0x70], 1
jl 0x1002d70a
mov eax, 0x39b8842b
test eax, eax
je 0x1002d70a
mov dword [ebp - 0x90], 1
jmp 0x1002d711
and dword [ebp - 0x90], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x54]
cmp dword [ebp - 0x10], eax
jg 0x1002d72e
mov dword [ebp - 0x5c], 1
jmp 0x1002d732
and dword [ebp - 0x5c], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x10], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 5
je 0x1002d74e
mov dword [ebp - 0x64], 1
jmp 0x1002d752
and dword [ebp - 0x64], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
cmp dword [ebp - 0x64], eax
jge 0x1002d76a
mov dword [ebp - 0x6c], 1
jmp 0x1002d76e
and dword [ebp - 0x6c], 0
push 3
lea ecx, [ebp - 0x128]
call fcn.100171a5
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.10017189
mov dword [ebp - 0x74], 1
mov dword [ebp - 0x30], 0xfffffffc
mov dword [ebp - 0xac], 0x4498b94b
mov dword [ebp - 0x7c], 0x783518f
mov eax, dword [ebp - 0x74]
neg eax
mov dword [ebp - 0x30], eax
je 0x1002d803
mov dword [ebp - 0xa8], 0x6eda
mov dword [ebp - 0xb0], 0xfffffff6
lea eax, [ebp - 0xb0]
push eax
push 0x5f35
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x7c]
push eax
push 0
push 0x267a
lea eax, [ebp - 0x30]
push eax
call fcn.1002c987
add esp, 0x24
jmp 0x1002d872
push 2
lea ecx, [ebp - 0xf4]
call fcn.10017107
mov dword [ebp - 4], 1
mov dword [ebp - 0xa0], 0
lea eax, [ebp - 0xf4]
push eax
push 0x35a6
push 0
lea eax, [ebp - 0x110]
push eax
call fcn.1002881d
add esp, 0x10
lea eax, [ebp - 0xf4]
push eax
push 0
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x7c]
push eax
push 0x13cc
lea eax, [ebp - 0xa0]
push eax
call fcn.10025612
add esp, 0x18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf4]
call fcn.10017189
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x14], eax
push 2
lea ecx, [ebp - 0xe8]
call fcn.10017107
mov dword [ebp - 4], 2
mov dword [ebp - 0x24], 0xfffffffb
lea eax, [ebp - 0x118]
push eax
push 0x557e
push 0
lea eax, [ebp - 0xe8]
push eax
push 0x637b
push 0x22a4
push 0x2d3f
push 0x9b
call fcn.1002a7ca
add esp, 0x20
mov dword [ebp - 0x24], 0
jmp 0x1002d8e3
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jg 0x1002d966
mov dword [ebp - 0x28], 0
mov dword [ebp - 0xa4], 0xef9d7865
mov dword [ebp - 0x28], 1
jmp 0x1002d90a
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1002d961
push dword [ebp - 0x24]
lea ecx, [ebp - 0xe8]
call fcn.100171a5
cmp dword [eax], 0xcf09
je 0x1002d92f
mov dword [ebp - 0x50], 1
jmp 0x1002d933
and dword [ebp - 0x50], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xa4], eax
push 0
push 0x49f2
push 0x722f
push 0x6f09
push 0x4fb3
push 0x640b
call fcn.1002def6
add esp, 0x18
jmp 0x1002d903
jmp 0x1002d8dc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe8]
call fcn.10017189
and dword [ebp - 0x44], 0
jmp 0x1002d98b
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x14]
add eax, 0x28
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x44], eax
jge 0x1002dc3e
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x10], 0
jne 0x1002dbb0
mov dword [ebp - 0x140], 1
mov byte [ebp - 0x1e], 0
push 0x1000
push 1
push 0x3362
push 0x7ef2
lea eax, [ebp - 0x1e]
push eax
push 0x7826
call fcn.10025612
add esp, 0x18
mov byte [ebp - 0x1f], 0
push 1
push 0x7e73
push 0x1e45
lea eax, [ebp - 0x1f]
push eax
call fcn.10026f1d
add esp, 0x10
push 0x5160
push 0
lea eax, [ebp - 0x4c]
push eax
push 0x32f
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x94]
push eax
push 0x6ce3
call fcn.1002c8f0
add esp, 0x20
mov dword [ebp - 0x3c], 9
mov dword [ebp - 0x12c], 7
mov dword [ebp - 0x108], 4
mov dword [ebp - 0x104], 0xffffffff
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0xf8], 0xc660f7e7
mov dword [ebp - 0x13c], 0x711e7bff
mov dword [ebp - 0x114], 0xfffffffb
mov dword [ebp - 0xfc], 0x9a278c00
mov dword [ebp - 0x18], 0
jmp 0x1002da8c
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1002daa2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x148], 0x89f42c60
jmp 0x1002da85
mov dword [ebp - 0x18], 0
jmp 0x1002dab2
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1002dac8
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x16c], 0x5f4e
jmp 0x1002daab
mov dword [ebp - 0x3c], 0
jmp 0x1002dad8
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xf
jg 0x1002dbab
mov dword [ebp - 0x100], 0x7a3a
mov dword [ebp - 0xc8], 0xa912
mov dword [ebp - 0xc4], 0xa912
mov dword [ebp - 0xc0], 0xa912
mov dword [ebp - 0xbc], 0xa912
lea ecx, [ebp - 0x45]
call fcn.10009433
push eax
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x160]
call fcn.100171b4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x138]
call fcn.10017163
mov dword [ebp - 4], 3
mov dword [ebp - 0x38], 0
jmp 0x1002db5d
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x1002db73
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x158], 0x1ad67a4b
jmp 0x1002db56
push 0
lea ecx, [ebp - 0x138]
call fcn.100171a5
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x8c]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x138]
call fcn.10017189
jmp 0x1002dad1
jmp 0x1002d97b
push 4
push 0x1000
mov eax, dword [ebp - 0x14]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x94]
add ecx, dword [eax + 0xc]
push ecx
push 0xce8f
push 0xe041
call fcn.10024b6c
pop ecx
pop ecx
call eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x14]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x98]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x4c]
call fcn.10024c15
add esp, 0xc
push 0
push 0x3a7b
push 0x4bc
push 0x7bf2
push 0x4464
push 0x5aa2
push 0x5a29
push 0x63b9
push 0x4479
call fcn.10027ad8
add esp, 0x24
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x4c]
mov dword [eax + 8], ecx
jmp 0x1002d97b
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret