Function at 0x415180
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x24
push ebx
mov ebx, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
push esi
push edi
push 5
mov edi, ecx
mov esi, edx
push 0x4e42d0
push edi
mov dword [esp + 0x2c], edi
call ebx
add esp, 0xc
test eax, eax
jne 0x415262
push 3
lea eax, [edi + 0xa]
push 0x4e42dc
push eax
call ebx
add esp, 0xc
mov edx, 0x10
test eax, eax
mov ecx, 0xa
sete bl
test eax, eax
push str.Active
cmove ecx, edx
add edi, ecx
push edi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x4151ec
mov al, 1
jmp 0x415201
push str.Exist
push edi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x415219
mov al, 3
push dword [ebp + 8]
lea ecx, [eax + ebx]
mov edx, esi
call fcn.004143e0
add esp, 4
test eax, eax
jne 0x415313
mov eax, dword [0x4f70f4]
test byte [eax + 0x100], 1
jne 0x415244
mov ecx, dword [0x4f99cc]
push 1
push 0
push 0xffffffffffffffff
push 0x4e413c
call fcn.004b3f70
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x4fc1c4]
push 0x4cdc40
push 0
push 0x4e413c
call fcn.0044d370
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x4e42f4
push edi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x415362
mov eax, dword [ebp + 8]
cmp word [eax], 0
je 0x41529d
push 0x4cdc40
push str.Parameter_3_must_be_blank_in_this_case.
mov ecx, 0x4fbb78
call fcn.0044dc10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x415330
mov cl, byte [eax + 0x17]
test cl, cl
jne 0x4152b4
mov edx, dword [eax + 0xc]
jmp 0x4152b6
mov edx, eax
test byte [edx + 0x15], 2
je 0x415330
test cl, cl
jne 0x4152c3
mov eax, dword [eax + 0xc]
mov esi, dword [0x4fa3a8]
mov edi, dword [eax]
test esi, esi
je 0x4152e1
nop
cmp byte [esi], 6
jne 0x4152da
cmp dword [esi + 0xc], edi
je 0x41530d
mov esi, dword [esi + 0x10]
test esi, esi
jne 0x4152d0
call fcn.004145a0
mov esi, eax
test esi, esi
jne 0x4152f3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [edi]
push edi
call dword [eax + 4]
mov byte [esi], 6
mov dword [esi + 0xc], edi
mov dword [esi + 4], 0x4cdc40
mov dword [esi + 8], 0x4cdc40
mov dword [0x4fa3b4], esi
mov ecx, dword [0x4f99cc]
push 1
push 0
push 0xffffffffffffffff
push 0x4cdd08
call fcn.004b3f70
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp word [esi], 0
jne 0x41533a
xor esi, esi
jmp 0x41530d
mov ecx, esi
call fcn.00414620
mov esi, eax
test esi, esi
jne 0x41530d
push 0x4cdc40
push str.Parameter_2_must_match_an_existing_If_expression.
mov ecx, 0x4fbb78
call fcn.0044dc10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ebx, dword [ebp + 8]
mov edx, str.UseErrorLevel
mov ecx, ebx
mov dword [esp + 0x18], ebx
call fcn.004afc80
test eax, eax
setne byte [esp + 0x1c]
xor eax, eax
mov dword [esp + 0x28], eax
cmp dword [ebp + 0xc], eax
jne 0x4153fe
mov dl, 1
mov ecx, esi
call fcn.00414200
movzx eax, ax
mov dword [esp + 0x28], eax
test ax, ax
jne 0x4153fe
push 0
push dword [ebp + 0x10]
mov ecx, 0x4fbb78
push esi
call fcn.004331f0
mov dword [ebp + 0xc], eax
test eax, eax
jne 0x4153fe
movzx ecx, word [esi]
test cx, cx
jne 0x4153d0
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x4153fe
cmp byte [eax + 0x17], cl
jne 0x4153ca
mov eax, dword [eax + 0xc]
test byte [eax + 0x15], 2
je 0x4153fe
cmp byte [esp + 0x1c], 0
jne 0x415227
test cx, cx
mov edx, str.Parameters_of_hotkey_functions_must_be_optional.
mov eax, str.Target_label_does_not_exist.
mov ecx, 0x4fbb78
push esi
cmove eax, edx
push eax
call fcn.0044dc10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [esp + 0x13]
mov ecx, edi
push eax
lea edx, [esp + 0x28]
call fcn.00416bd0
mov edi, eax
add esp, 4
test edi, edi
je 0x41542f
mov esi, dword [edi + 0x20]
test esi, esi
je 0x41542f
mov eax, dword [0x4fa3b4]
cmp dword [esi + 4], eax
je 0x415431
mov esi, dword [esi + 8]
test esi, esi
jne 0x415423
xor esi, esi
mov eax, dword [esp + 0x28]
xor dl, dl
movzx ecx, ax
mov dword [esp + 0x14], edx
mov byte [esp + 0x12], dl
mov dword [esp + 0x28], 1
sub ecx, 1
je 0x415604
sub ecx, 1
je 0x415604
sub ecx, 1
je 0x415604
test edi, edi
jne 0x4154be
test ax, ax
je 0x415474
mov edx, eax
xor ecx, ecx
jmp 0x415483
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x415608
xor edx, edx
mov ecx, eax
push dword [esp + 0x1c]
push dword [esp + 0x28]
push dword [esp + 0x28]
call fcn.00415a80
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x4154a9
movzx eax, byte [esp + 0x1c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [edi + 0x24]
mov edx, 1
mov dword [esp + 0x14], edx
mov byte [esp + 0x12], dl
jmp 0x41572b
cmp word [edi + 6], ax
je 0x4154e3
mov word [edi + 6], ax
test ax, ax
jne 0x4154d3
mov byte [edi + 0x19], 1
jmp 0x4154dd
cmp byte [edi + 0x12], 0
jne 0x4154dd
mov byte [edi + 0x14], 1
mov dl, 1
mov dword [esp + 0x14], edx
mov ecx, dword [ebp + 0xc]
test ecx, ecx
je 0x4155b9
test esi, esi
je 0x415550
cmp ecx, dword [esi]
je 0x4155c1
cmp byte [esi + 0x1c], 0
je 0x415537
cmp byte [0x4f9a6c], 0
je 0x415537
mov dword [esp + 0x2c], ecx
mov ecx, esi
call fcn.0049f390
lea ecx, [esp + 0x2c]
mov bl, al
call fcn.0049f390
mov ecx, dword [esp + 0x14]
cmp al, bl
mov ebx, dword [ebp + 8]
movzx ecx, cl
cmovne ecx, dword [esp + 0x28]
mov dword [esp + 0x14], ecx
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
mov ecx, dword [esi]
test ecx, ecx
je 0x415549
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp + 0xc]
mov dword [esi], eax
jmp 0x4155c1
push dword [esp + 0x24]
push ecx
mov ecx, edi
call fcn.00416280
mov esi, eax
test esi, esi
jne 0x41559e
cmp byte [esp + 0x1c], al
je 0x415584
mov ecx, dword [0x4f99cc]
push 1
push eax
push 0xffffffffffffffff
push 0x4e44e0
call fcn.004b3f70
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push dword [esp + 0x20]
mov ecx, 0x4fbb78
push 0x4e1bcc
call fcn.0044dc10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [0x4f9a6f], 0
mov ecx, 1
mov byte [esp + 0x12], 1
mov dword [esp + 0x14], ecx
je 0x4155c1
mov dl, cl
jmp 0x4155c5
test esi, esi
je 0x41572f
mov dl, byte [esp + 0x13]
mov eax, dword [esp + 0x24]
test al, al
mov byte [esi + 0x19], al
sete al
lea eax, [eax*2 + 2]
or byte [edi + 0x13], al
cmp byte [edi + 0x14], 0
jne 0x415727
test dl, dl
jne 0x4155f3
cmp byte [esp + 0x24], dl
je 0x415727
mov edx, 1
mov dword [esp + 0x14], edx
mov byte [edi + 0x14], dl
jmp 0x41572b
test edi, edi
jne 0x415646
cmp byte [esp + 0x1c], 0
je 0x41562c
mov ecx, dword [0x4f99cc]
push 1
push 0
push 0xffffffffffffffff
push 0x4e4464
call fcn.004b3f70
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push dword [esp + 0x20]
mov ecx, 0x4fbb78
push 0x4e4468
call fcn.0044dc10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test esi, esi
jne 0x41568e
cmp word [edi + 6], si
jne 0x41568e
cmp byte [esp + 0x1c], 0
je 0x415674
mov ecx, dword [0x4f99cc]
push 1
push 0
push 0xffffffffffffffff
push 0x4e4490
call fcn.004b3f70
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push dword [esp + 0x20]
mov ecx, 0x4fbb78
push str.Nonexistent_hotkey_variant__IfWin_.
call fcn.0044dc10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp ax, 3
jne 0x4156ab
xor eax, eax
cmp word [edi + 6], ax
je 0x4156a1
cmp byte [edi + 0x19], al
jmp 0x4156a4
cmp byte [esi + 0x1c], al
setne al
inc eax
movzx eax, ax
movzx ecx, word [edi + 6]
cmp ax, 1
jne 0x4156f6
test cx, cx
je 0x4156d8
cmp byte [edi + 0x19], 0
je 0x4156ca
xor al, al
mov dl, al
mov dword [esp + 0x14], edx
jmp 0x41572b
mov al, 1
mov byte [edi + 0x19], 1
mov dl, al
mov dword [esp + 0x14], edx
jmp 0x41572b
cmp byte [esi + 0x1c], 0
je 0x4156e8
xor al, al
mov dl, al
mov dword [esp + 0x14], edx
jmp 0x41572b
mov al, 1
mov byte [esi + 0x1c], 1
mov dl, al
mov dword [esp + 0x14], edx
jmp 0x41572b
test cx, cx
je 0x415710
cmp byte [edi + 0x19], 0
je 0x41572b
mov edx, 1
mov byte [edi + 0x19], 0
mov dword [esp + 0x14], edx
jmp 0x41572b
cmp byte [esi + 0x1c], 0
je 0x41572b
mov edx, 1
mov word [esi + 0x1b], 0
mov dword [esp + 0x14], edx
jmp 0x41572b
mov edx, dword [esp + 0x14]
test esi, esi
jne 0x41573a
cmp word [edi + 6], 0
je 0x415650
movzx eax, word [ebx]
test ax, ax
je 0x4158b5
mov ecx, eax
nop dword [eax + eax]
movzx ebx, cx
test ebx, 0xffffff80
jne 0x41576e
push 2
push ebx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
add esp, 8
test eax, eax
je 0x41576e
and ebx, 0xffffffdf
add ebx, 0xffffffbe
cmp ebx, 0x13
ja case.0x415781.67
movzx eax, byte [ebx + 0x415a6c]
jmp dword [eax*4 + 0x415a50]
mov eax, dword [esp + 0x18]
add eax, 2
mov dword [esp + 0x2c], eax
movzx ebx, word [eax]
test ebx, 0xffffff80
jne 0x4157b1
push 2
push ebx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
add esp, 8
test eax, eax
je 0x4157b1
and ebx, 0xffffffdf
cmp bx, 0x4e
jne 0x4157fa
cmp word [edi + 6], 0
mov eax, dword [esp + 0x2c]
je 0x4157de
cmp byte [edi + 0x19], 0
jne 0x41589c
mov edx, 1
mov byte [edi + 0x19], 1
mov dword [esp + 0x14], edx
jmp 0x4158a0
cmp byte [esi + 0x1c], 0
jne 0x41589c
mov edx, 1
mov byte [esi + 0x1c], 1
mov dword [esp + 0x14], edx
jmp 0x4158a0
push 3
push 0x4e4140
push dword [esp + 0x20]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
add esp, 0xc
test eax, eax
mov eax, dword [esp + 0x18]
jne 0x41589c
add eax, 4
cmp word [edi + 6], 0
je 0x415839
cmp byte [edi + 0x19], 0
je 0x415850
mov edx, 1
mov byte [edi + 0x19], 0
mov dword [esp + 0x14], edx
jmp 0x415854
cmp byte [esi + 0x1c], 0
je 0x415850
mov edx, 1
mov word [esi + 0x1b], 0
mov dword [esp + 0x14], edx
jmp 0x415854
mov edx, dword [esp + 0x14]
cmp byte [esp + 0x12], 0
je 0x4158a0
xor dl, dl
mov dword [esp + 0x14], edx
jmp 0x4158a0
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
test esi, esi
je 0x4158a0
cmp word [eax + 2], 0x30
setne al
mov byte [esi + 0x1a], al
mov eax, dword [esp + 0x18]
jmp 0x4158a0
mov eax, dword [esp + 0x18]
test esi, esi
je 0x41589c
add eax, 2
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
mov dword [esi + 0x10], eax
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
add eax, 2
mov dword [esp + 0x18], eax
movzx eax, word [eax]
mov ecx, eax
test ax, ax
jne 0x415750
test dl, dl
je 0x4158be
call fcn.00414680
cmp byte [esp + 0x1c], 0
je 0x415a23
mov ecx, dword [0x4f99cc]
push 1
push 0
push 0xffffffffffffffff
push 0x4cdd08
call fcn.004b3f70
cmp byte [edi + 0x12], 0
jne 0x415a23
cmp byte [edi + 0x18], 0
jne 0x415a23
cmp byte [0x4f9a6c], 0
je 0x415a00
cmp word [edi + 6], 0
jne 0x415a23
mov esi, dword [edi + 0x20]
test esi, esi
je 0x415a23
mov ecx, esi
call fcn.0049f390
test al, al
jne 0x415a00
mov esi, dword [esi + 8]
test esi, esi
jne 0x415916
mov eax, dword [esp + 0x28]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x18]
test esi, esi
je 0x41589c
add eax, 2
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov edx, dword [0x4f70f0]
add esp, 4
movzx ecx, al
mov byte [esi + 0x17], al
cmp ecx, edx
jle 0x415968
mov byte [esi + 0x17], dl
jmp case.0x415781.67
mov edx, dword [esp + 0x14]
cmp al, 1
mov eax, dword [esp + 0x18]
jae 0x4158a0
mov byte [esi + 0x17], 1
jmp 0x4158a0
push str.UseErrorLevel
push dword [esp + 0x1c]
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov edx, dword [esp + 0x1c]
add esp, 8
test eax, eax
mov eax, dword [esp + 0x18]
jne 0x4158a0
add eax, 0x18
jmp 0x4158a0
mov eax, dword [esp + 0x18]
test esi, esi
je 0x41589c
add eax, 2
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
add esp, 4
cmp eax, 0x64
ja case.0x415781.67
test eax, eax
je 0x4159f0
cmp byte [edi + 0x14], 0
jne 0x4159f0
mov byte [edi + 0x14], 1
mov edx, 1
mov byte [esi + 0x18], al
mov eax, dword [esp + 0x18]
mov dword [esp + 0x14], edx
jmp 0x4158a0
mov edx, dword [esp + 0x14]
mov byte [esi + 0x18], al
mov eax, dword [esp + 0x18]
jmp 0x4158a0
cmp word [edi + 6], 0
je 0x415a2e
cmp byte [edi + 0x19], 0
je 0x415a23
mov ecx, dword [0x4f99cc]
push 1
push 0
push 0xffffffffffffffff
push 0x4e44e8
call fcn.004b3f70
mov eax, dword [esp + 0x28]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [edi + 0x20]
test eax, eax
je 0x415a23
cmp byte [eax + 0x1c], 0
jne 0x415a0d
mov eax, dword [eax + 8]
test eax, eax
jne 0x415a35
mov eax, dword [esp + 0x28]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret