Function at 0x403110
Capabilities:
Enumerate pe sections
Link many functions at runtime
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x534
push ebx
push esi
push edi
call fcn.00401000
mov eax, dword [0x405430]
mov ebx, dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
push 0
push 0xdf
push eax
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x418dc8
mov dword [0x4050c8], 0x25b8
call esi
mov ecx, dword [0x4054cc]
mov edi, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0x12
push ecx
mov dword [0x418e50], eax
call edi
push 0x418dac
call esi
mov edx, dword [0x405444]
push 0xe0
push edx
mov dword [0x418e54], eax
call edi
mov eax, dword [0x418e50]
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x418d88
push eax
call esi
mov ecx, dword [0x405454]
mov edi, dword [sym.imp.USER32.dll_GetClassWord]
push 0x82
push ecx
mov dword [0x418e0c], eax
call edi
mov edx, dword [0x418e50]
push 0x418d54
push edx
call esi
mov dword [0x418e2c], eax
mov eax, dword [0x4054a4]
push 0xe6
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [0x418e54]
push 0x418de4
push ecx
call esi
mov edx, dword [0x418e50]
push 0x418dd4
push edx
mov dword [0x418e30], eax
mov dword [0x405110], 0x64ba
call esi
mov dword [0x418e34], eax
mov eax, dword [0x4054e8]
push 0xc5
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [0x418e50]
push 0x418db4
push ecx
call esi
mov ecx, dword [0x418dfc]
mov dword [0x418e38], eax
mov eax, 0x342da7f3
push 0x418d98
imul ecx
mov ecx, dword [0x418e50]
sar edx, 5
mov eax, edx
push ecx
shr eax, 0x1f
add edx, eax
mov dword [0x418dfc], edx
call esi
mov dword [0x418e3c], eax
mov eax, dword [0x405148]
mov edx, eax
push 0x418d74
shl edx, 5
add edx, eax
shl edx, 6
add edx, eax
lea ecx, [eax + edx*4]
lea edx, [eax + ecx*2]
mov eax, dword [0x418e50]
push eax
mov dword [0x405078], edx
call esi
mov ecx, dword [0x405468]
push 1
push 0x5f
push 0xd9
push ecx
mov dword [0x418e40], eax
call dword [sym.imp.USER32.dll_SetScrollPos]
mov edx, dword [0x418e50]
push 0x418d44
push edx
call esi
mov dword [0x418e44], eax
mov eax, dword [0x4054fc]
push 0xea
push eax
call edi
mov ecx, dword [0x418e50]
push 0x418d64
push ecx
call esi
mov edx, dword [0x40547c]
push 5
push edx
mov dword [0x418e10], eax
call edi
mov eax, dword [0x418e50]
push 0x418d38
push eax
call esi
mov ecx, dword [0x405470]
push 0
push 0xc2
push ecx
mov dword [0x418e14], eax
call ebx
mov edx, dword [0x418e50]
push 0x418d1c
push edx
call esi
mov dword [0x418e18], eax
mov eax, dword [0x405400]
push 0x6c
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [0x418e50]
push 0x418cf8
push ecx
call esi
mov edx, dword [0x405504]
push 0x66
push edx
mov dword [0x418e48], eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x418e0c]
test eax, eax
je 0x403b26
mov eax, dword [0x418e2c]
test eax, eax
je 0x403b26
mov eax, dword [0x418e30]
test eax, eax
je 0x403b26
mov eax, dword [0x418e34]
test eax, eax
je 0x403b26
mov eax, dword [0x418e38]
test eax, eax
je 0x403b26
mov eax, dword [0x418e3c]
test eax, eax
je 0x403b26
mov eax, dword [0x418e40]
test eax, eax
je 0x403b26
mov eax, dword [0x418e44]
test eax, eax
je 0x403b26
mov eax, dword [0x418e10]
test eax, eax
je 0x403b26
mov ecx, dword [0x418e14]
test ecx, ecx
je 0x403b26
mov ecx, dword [0x418e18]
test ecx, ecx
je 0x403b26
mov ecx, dword [0x418e48]
test ecx, ecx
je 0x403b26
call eax
mov dword [0x418e4c], eax
mov eax, dword [0x4054bc]
push 0
push 0x5f
push eax
call ebx
lea ecx, [ebp - 0x268]
push 0x104
push ecx
push 0
call dword [0x418e48]
mov edx, dword [0x405448]
push 0
push 0x80
push edx
call ebx
mov eax, dword [0x405490]
push 0x9b
push eax
call edi
mov ecx, dword [0x405504]
push 0x11f5
push 0x417f
push 0x70b4
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [0x4054c0]
push 0
push 9
push edx
call ebx
mov ecx, dword [0x4050f0]
mov eax, 0x478bbced
imul ecx
mov ecx, dword [0x405418]
push 0
sar edx, 6
mov eax, edx
push 0x66
shr eax, 0x1f
add edx, eax
push ecx
mov dword [0x4050f0], edx
call ebx
mov edx, dword [0x405528]
push 0x99
push edx
call edi
mov eax, dword [0x405410]
push 1
push eax
call edi
mov ecx, dword [0x405410]
push 0
push 0xa7
push ecx
call ebx
mov ecx, dword [0x405028]
mov esi, dword [0x414844]
push 1
lea eax, [ecx + ecx*8]
shl eax, 5
sub eax, ecx
lea edx, [eax + eax*2]
lea eax, [ecx + edx*2]
mov ecx, dword [section..data]
shl eax, 2
lea edx, [ecx + ecx*4]
mov dword [0x4050ec], eax
lea edx, [edx + edx*8]
lea edx, [ecx + edx*4]
lea edx, [edx + edx*8]
lea ecx, [ecx + edx*4]
mov dword [0x405040], ecx
imul ecx, ecx, 0x6899
mov dword [0x405164], ecx
mov ecx, 0x5064
cdq
idiv ecx
mov dword [0x4050d0], edx
mov edx, dword [0x405484]
push 0xd0
push 0x4e
push edx
call dword [sym.imp.USER32.dll_SetScrollPos]
mov eax, dword [0x405528]
push 0xd9
push eax
inc esi
call edi
mov ecx, dword [0x418e4c]
push esi
push 0
push ecx
call dword [0x418e14]
mov edi, eax
test edi, edi
mov dword [ebp - 4], edi
je 0x4036ed
mov edx, dword [0x4054b0]
push 0x1cb0
push 0x5b0c
dec esi
push 0x1145
push edx
mov dword [ebp - 8], esi
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, esi
mov esi, 0x414848
mov eax, ecx
push 0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push 0x82
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [0x405474]
push ecx
call ebx
mov edx, dword [0x405438]
push 0x2e
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 4]
mov edx, dword [0x405424]
push 0
push 0x59
movsx ecx, byte [eax]
push edx
mov dword [ebp - 0xc], ecx
call ebx
mov esi, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
mov edi, esi
push 0x3de1
sub edi, eax
mov eax, dword [0x405524]
push 0x4a43
push 0x3526
push eax
dec edi
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [0x40552c]
push 1
push 0x13
push 0x53
push ecx
call dword [sym.imp.USER32.dll_SetScrollPos]
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
push 1
push edx
lea ecx, [eax + edi + 1]
lea edx, [ebp - 0x164]
push ecx
push edx
call fcn.00402c50
mov eax, dword [0x405498]
add esp, 0x10
push 0
push 0xe9
push eax
call ebx
mov ecx, dword [ebp - 4]
push 0
push edi
lea edx, [ebp - 0x164]
lea eax, [ecx + 1]
push eax
push edx
mov dword [ebp - 8], eax
call fcn.00402de0
mov eax, dword [0x4054a0]
add esp, 0x10
push 0x3d
push eax
call dword [sym.imp.USER32.dll_GetClassWord]
push 0
push 0x3c
mov ecx, dword [0x405434]
push ecx
call ebx
mov edx, dword [0x405464]
push 0
push 0x14
push edx
call ebx
mov eax, dword [0x4054a4]
push 1
push 7
push 0x83
push eax
call dword [sym.imp.USER32.dll_SetScrollPos]
lea eax, [esi + esi*4]
mov dword [0x40517c], 0x3a69
lea eax, [eax + eax*4]
lea eax, [eax + eax*2]
lea ecx, [eax + eax*4]
mov eax, 0x51eb851f
lea esi, [esi + ecx*4]
mov ecx, dword [0x418e4c]
imul esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
push edx
push 0
push ecx
call dword [0x418e14]
mov esi, eax
test esi, esi
mov dword [ebp - 0xc], esi
je 0x4036ed
mov edx, dword [ebp - 8]
push 0
push edi
push esi
push edx
call fcn.00403030
mov ecx, dword [0x4050b8]
mov edi, eax
mov eax, 0x9434110b
add esp, 0x10
imul ecx
add edx, ecx
mov ecx, dword [0x418e4c]
sar edx, 0xe
mov eax, edx
inc edi
shr eax, 0x1f
push edi
add edx, eax
push 0
push ecx
mov dword [0x405158], 0x4d62
mov dword [0x40515c], edx
call dword [0x418e14]
test eax, eax
mov dword [ebp - 8], eax
jne 0x40372b
mov edx, dword [0x40553c]
push 0x2f6b
push 0x63f4
push 0x6c8f
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [str.JvfG_bi]
lea ecx, [eax + eax*4]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*8]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*8]
lea edx, [eax + eax*2]
mov dword [0x418dfc], edx
jmp 0x403af5
mov ecx, dword [str.q_]
imul ecx, ecx, 0x49ac
mov dword [0x4050f0], ecx
lea ecx, [edi - 1]
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov eax, 0x4d4873ed
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [0x405118]
imul ecx
mov ecx, dword [ebp - 0xc]
sar edx, 5
mov eax, edx
push ecx
shr eax, 0x1f
add edx, eax
push 0
mov dword [0x405118], edx
mov edx, dword [0x418e4c]
push edx
call dword [0x418e18]
mov eax, dword [0x405544]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0x4831
push 0x7fc4
push 0x2cb9
push eax
call esi
mov ecx, dword [ebp - 4]
mov edx, dword [0x418e4c]
push ecx
push 0
push edx
call dword [0x418e18]
mov ecx, dword [0x4050a8]
mov eax, 0x3e88cb3d
imul ecx
sar edx, 5
mov eax, edx
mov ecx, 0x276
shr eax, 0x1f
add edx, eax
mov eax, dword [0x405088]
mov dword [0x4050a8], edx
push 0x7b
cdq
idiv ecx
mov ecx, dword [0x405148]
mov eax, 0x4c346405
mov dword [0x405050], 0x8af
mov dword [0x4050e4], edx
mov edx, dword [0x4050c4]
add edx, 0xffffdc15
mov dword [str.FZvWF2], edx
imul ecx
mov ecx, dword [0x40546c]
sar edx, 6
mov eax, edx
push ecx
shr eax, 0x1f
add edx, eax
mov dword [0x405148], edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [0x40541c]
push 1
push 0x99
push 0x32
push edx
call dword [sym.imp.USER32.dll_SetScrollPos]
mov eax, dword [section..data]
mov ecx, 0x5cb3
cdq
idiv ecx
mov dword [0x405194], 0x67ab
mov dword [0x4051ac], 0x3c83
push 0xc7
mov dword [0x405100], edx
mov edx, dword [0x4054d0]
push edx
call dword [sym.imp.USER32.dll_GetClassWord]
mov eax, dword [0x40547c]
push 0x4b10
push 0x4d68
push 0x2f69
push eax
call esi
mov ecx, 0x11
xor eax, eax
lea edi, [ebp - 0x60]
push 0x1a86
rep stosd dword es:[edi], eax
mov ecx, dword [0x40544c]
push 0x1038
push 0xe02
push ecx
call esi
mov edx, dword [0x405590]
push 0x262d
push 0x2d95
push 0x3da3
push edx
mov dword [ebp - 0x60], 0x44
mov dword [0x405188], 0x67d8
mov dword [ebp - 0x534], 0x10007
call esi
mov edi, dword [ebp - 8]
mov dword [str.b], 0x7ca4
mov dword [0x418e00], edi
cmp word [edi], 0x5a4d
jne 0x403af5
mov eax, dword [edi + 0x3c]
mov ecx, dword [0x405020]
add eax, edi
add ecx, 0xffff91bd
mov dword [0x418e04], eax
mov dword [str.b], ecx
cmp dword [eax], 0x4550
jne 0x403af5
lea edx, [ebp - 0x1c]
lea eax, [ebp - 0x60]
push edx
push eax
push 0
push 0
push 4
push 0
push 0
push 0
call dword [0x418e0c]
lea ecx, [ebp - 0x268]
push eax
push ecx
call dword [0x418e2c]
mov ecx, dword [0x4051dc]
mov eax, 0x5d9f7391
imul ecx
mov ecx, dword [0x418e04]
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, dword [ebp - 0x1c]
mov dword [0x4051dc], edx
mov edx, dword [ecx + 0x34]
push edx
push eax
call dword [0x418e30]
mov ecx, dword [0x4054c8]
push 0x4c16
push 0x3225
push 0x721b
push ecx
call esi
mov eax, dword [0x418e04]
mov ecx, dword [ebp - 0x1c]
push 0x40
push 0x3000
mov edx, dword [eax + 0x50]
mov eax, dword [eax + 0x34]
push edx
push eax
push ecx
call dword [0x418e34]
mov edx, dword [0x405428]
mov esi, dword [sym.imp.USER32.dll_GetClassWord]
push 0x56
push edx
call esi
mov eax, dword [0x418e04]
push 0
mov ecx, dword [eax + 0x54]
mov edx, dword [eax + 0x34]
mov eax, dword [ebp - 0x1c]
push ecx
push edi
push edx
push eax
call dword [0x418e38]
mov ecx, dword [0x40557c]
push 0x63
push ecx
call esi
mov ecx, dword [0x418e04]
xor esi, esi
cmp word [ecx + 6], si
jbe 0x403a74
mov dword [ebp - 4], esi
mov edx, dword [0x418e00]
push 0
mov eax, dword [edx + 0x3c]
mov edx, dword [ebp - 4]
add eax, edx
mov dword [0x4051b8], 0x6ea9
lea eax, [eax + edi + 0xf8]
mov dword [0x418e08], eax
mov edx, dword [eax + 0x10]
push edx
mov edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
add edx, edi
push edx
mov edx, dword [ecx + 0x34]
mov ecx, dword [ebp - 0x1c]
add eax, edx
push eax
push ecx
call dword [0x418e38]
mov edx, dword [0x40556c]
push 1
push 0xb8
push 0x18
push edx
call dword [sym.imp.USER32.dll_SetScrollPos]
mov eax, dword [ebp - 4]
mov ecx, dword [0x418e04]
add eax, 0x28
inc esi
mov dword [ebp - 4], eax
xor eax, eax
mov ax, word [ecx + 6]
cmp esi, eax
jl 0x403a01
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x534]
push ecx
push edx
call dword [0x418e3c]
mov eax, dword [0x405400]
push 0xe5
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x418e04]
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x28]
mov eax, dword [ebp - 0x18]
add ecx, edx
lea edx, [ebp - 0x534]
mov dword [ebp - 0x484], ecx
push edx
push eax
mov dword [0x40507c], 0x2bc9
call dword [0x418e40]
mov ecx, dword [0x405544]
push 1
push 0xc2
push 0x60
push ecx
call dword [sym.imp.USER32.dll_SetScrollPos]
mov edx, dword [ebp - 0x18]
push edx
call dword [0x418e44]
mov eax, dword [0x4055a4]
push 0xa5
push eax
call dword [sym.imp.USER32.dll_GetClassWord]
mov ecx, dword [0x40549c]
push 1
push 0x32
push 0xdf
push ecx
call dword [sym.imp.USER32.dll_SetScrollPos]
mov edx, dword [0x405568]
push 0
push 0xe6
push edx
call ebx
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
int3