Function at 0x1002e293
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008185c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x118
push esi
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x1002e2d6
push 0x8be
push 0x1847
push 0x11e7
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
jmp 0x1002ea48
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 4]
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xf0], 0xffffffff
mov dword [ebp - 0xcc], 0x10977a12
mov dword [ebp - 0xc4], 4
mov dword [ebp - 0xe0], 0x4ff5452f
push 2
lea ecx, [ebp - 0x108]
call fcn.100169cf
and dword [ebp - 4], 0
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0x48], 0
jmp 0x1002e34d
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x1002e369
push dword [ebp - 0x48]
lea ecx, [ebp - 0x108]
call fcn.10016a3c
mov dword [eax], 5
jmp 0x1002e346
push 1
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0xe0]
push eax
call fcn.10025acb
add esp, 0x1c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x108]
call fcn.10016a37
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x1c], 0x860b4ffb
mov dword [ebp - 0x44], 0
jmp 0x1002e3d8
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x1002e3ee
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xc0], 0
jmp 0x1002e3d1
mov dword [ebp - 0x1c], 2
jmp 0x1002e3fe
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x1002e526
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x24], 2
jmp 0x1002e41f
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1002e521
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0xc0], 0x62da
jne 0x1002e445
mov dword [ebp - 0xb4], 1
jmp 0x1002e44c
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0xc0], 0
jne 0x1002e467
xor eax, eax
inc eax
jne 0x1002e467
and dword [ebp - 0xa0], 0
jmp 0x1002e471
mov dword [ebp - 0xa0], 1
cmp dword [ebp - 0xa0], 0x4c03
jle 0x1002e489
mov dword [ebp - 0x98], 1
jmp 0x1002e490
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xc0]
cmp dword [ebp - 0x98], eax
jne 0x1002e4ab
mov dword [ebp - 0x74], 1
jmp 0x1002e4af
and dword [ebp - 0x74], 0
mov eax, dword [ebp - 0xb4]
sub eax, dword [ebp - 0x74]
cmp eax, 0xd5d70512
jbe 0x1002e4cb
mov dword [ebp - 0x94], 1
jmp 0x1002e4d2
and dword [ebp - 0x94], 0
mov eax, dword [ebp - 0x94]
sub eax, dword [ebp - 0x24]
cmp eax, 0xccfd66c4
je 0x1002e4ee
mov dword [ebp - 0xe8], 1
jmp 0x1002e4f5
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xc0]
mov dword [ebp - 0x10c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp + eax - 0xc0]
mov dword [ebp + ecx*4 - 0xc0], eax
jmp 0x1002e418
jmp 0x1002e3f7
mov byte [ebp - 0x18], 0
movzx eax, byte [ebp - 0x18]
test eax, eax
je 0x1002e557
push 0
push 0x4233
push 0x2da2
push 0xde0
push 0x3776
push 0x68
push 0xbcb
call fcn.10027386
add esp, 0x1c
and dword [ebp - 0x50], 0
jmp 0x1002e56d
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x14]
add eax, 0x28
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x50], eax
jge 0x1002ea48
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x10], 0
jne 0x1002e72a
push dword [ebp - 0x14]
push dword [ebp - 0xd8]
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0xac]
push 0
call fcn.1002c23d
add esp, 0x14
mov dword [ebp - 0x2c], 0xf7e2799a
mov dword [ebp - 0xd4], 8
mov dword [ebp - 0x114], 7
mov dword [ebp - 0x2c], 0
jmp 0x1002e5d4
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x15
jne 0x1002e703
mov dword [ebp - 0x30], 1
mov dword [ebp - 0xd0], 0x467bb1a8
mov dword [ebp - 0xdc], 0xfffffff7
mov dword [ebp - 0xec], 0x2b948214
mov dword [ebp - 0x30], 0
jmp 0x1002e613
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xfffffff1
jne 0x1002e6d0
mov dword [ebp - 0x4c], 0xffffffff
mov byte [ebp - 0x16], 0
movzx eax, byte [ebp - 0x16]
test eax, eax
je 0x1002e644
push 0x7862
push 0x42dc
push 0
call fcn.10030b5f
add esp, 0xc
mov dword [ebp - 0x4c], 0
jmp 0x1002e654
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jl 0x1002e6cb
mov dword [ebp - 0x34], 0x2c9cc141
mov dword [ebp - 0x34], 1
jmp 0x1002e671
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x15
je 0x1002e6b8
mov dword [ebp - 0x38], 0x69576881
mov dword [ebp - 0x38], 0
jmp 0x1002e68e
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x13
jg 0x1002e6b6
mov byte [ebp - 0x17], 0
movzx eax, byte [ebp - 0x17]
test eax, eax
je 0x1002e6b4
push 0x315d
push 0
push 0x144f
call fcn.100286ee
add esp, 0xc
jmp 0x1002e687
jmp 0x1002e66a
mov byte [ebp - 0x1d], 0
push 0
lea eax, [ebp - 0x1d]
push eax
call fcn.1002c602
pop ecx
pop ecx
jmp 0x1002e64d
jmp 0x1002e60c
push 1
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.10027386
add esp, 0x1c
jmp 0x1002e5cd
mov byte [ebp - 0x15], 0
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x1002e725
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
jmp 0x1002e55d
push 1
lea ecx, [ebp - 0x64]
call fcn.100169cf
mov dword [ebp - 4], 1
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x58], 9
lea eax, [ebp - 0x28]
push eax
push 0
push 0x3a6
lea eax, [ebp - 0x64]
push eax
push 0x609b
call fcn.1002f639
add esp, 0x14
mov dword [ebp - 0x28], 0
jmp 0x1002e775
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1002e78b
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xfc], 0x1d6b3bfa
jmp 0x1002e76e
mov dword [ebp - 0x10], 0
jmp 0x1002e79b
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jg 0x1002e985
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0x84], 0xc8ddac0f
mov dword [ebp - 0x70], 0xdae4
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x3c], 0
jmp 0x1002e7d7
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x1002e7ed
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x124], 0xfffffff9
jmp 0x1002e7d0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xfc], 0
jne 0x1002e842
push 0
lea ecx, [ebp - 0x64]
call fcn.10016a3c
cmp dword [eax], 1
jg 0x1002e814
mov dword [ebp - 0x7c], 1
jmp 0x1002e818
and dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xa8], eax
mov esi, dword [ebp - 0xa8]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x64]
call fcn.10016a3c
sub esi, dword [eax]
mov dword [ebp - 0x84], esi
jne 0x1002e842
and dword [ebp - 0x68], 0
jmp 0x1002e849
mov dword [ebp - 0x68], 1
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x68], eax
jl 0x1002e85d
mov dword [ebp - 0x8c], 1
jmp 0x1002e864
and dword [ebp - 0x8c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xfc]
cmp dword [ebp - 0x8c], eax
je 0x1002e884
mov dword [ebp - 0xb0], 1
jmp 0x1002e88b
and dword [ebp - 0xb0], 0
mov esi, dword [ebp - 0xb0]
add esi, 0x4868fdad
push 0
lea ecx, [ebp - 0x64]
call fcn.10016a3c
cmp esi, dword [eax]
jne 0x1002e8ae
mov dword [ebp - 0x6c], 1
jmp 0x1002e8b2
and dword [ebp - 0x6c], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x64]
call fcn.10016a3c
mov ecx, dword [ebp - 0x6c]
cmp ecx, dword [eax]
je 0x1002e8cd
mov dword [ebp - 0x78], 1
jmp 0x1002e8d1
and dword [ebp - 0x78], 0
mov eax, dword [ebp - 0x70]
add eax, dword [ebp - 0x78]
mov ecx, 0xfc4f
sub ecx, eax
je 0x1002e8eb
push dword [ebp - 0x10]
lea ecx, [ebp - 0x64]
call fcn.10016a3c
push 0
lea ecx, [ebp - 0x64]
call fcn.10016a3c
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
je 0x1002e915
mov eax, 0xec56
test eax, eax
je 0x1002e915
mov dword [ebp - 0x88], 1
jmp 0x1002e91c
and dword [ebp - 0x88], 0
cmp dword [ebp - 0x88], 1
jne 0x1002e935
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x1002e935
and dword [ebp - 0x90], 0
jmp 0x1002e93f
mov dword [ebp - 0x90], 1
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x58], eax
mov esi, dword [ebp - 0x58]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x64]
call fcn.10016a3c
cmp dword [eax], esi
jl 0x1002e966
mov dword [ebp - 0x9c], 1
jmp 0x1002e96d
and dword [ebp - 0x9c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9c]
mov dword [ebp + eax - 0x124], ecx
jmp 0x1002e794
mov dword [ebp - 0x10], 0x1c
jmp 0x1002e995
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 8
jge 0x1002e9d7
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfc]
mov dword [ebp - 0x110], eax
mov eax, 0x8025
test eax, eax
jne 0x1002e9c3
mov dword [ebp - 0xa4], 1
jmp 0x1002e9ca
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0xa4]
neg eax
mov dword [ebp - 0x58], eax
jmp 0x1002e98e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.10016a37
push 4
push 0x1000
mov eax, dword [ebp - 0x14]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xac]
add ecx, dword [eax + 0xc]
push ecx
push 0x77ea
push 0x6a16
call fcn.10025039
pop ecx
pop ecx
call eax
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x14]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc8]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x54]
call fcn.100250bb
add esp, 0xc
push 0
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.1002f928
add esp, 0xc
jmp 0x1002e55d
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret