Function at 0x402830
Capabilities:
Enumerate pe sections
Open clipboard
Parse pe header

Disassembly:
mov eax, dword [0x4043fc]
sub esp, 0x534
push edi
mov edi, dword [sym.imp.GDI32.dll_TextOutA]
push 0x80
push 0x5e
push 0x85
push 0xe4
push eax
call edi
mov ecx, dword [esp + 0x53c]
push 3
push 0xc
push ecx
push 8
mov dword [0x404034], 0x6b18
call fcn.004025a0
add esp, 0x10
cmp eax, 1
jge 0x402885
xor eax, eax
pop edi
add esp, 0x534
ret
push ebx
push ebp
push esi
call dword [0x40a130]
mov edx, dword [0x4043d8]
push 0x68
push 0xaa
push 0xb3
push 0x12
push edx
mov dword [0x40a16c], eax
call edi
lea eax, [esp + 0x70]
push 0x104
push eax
push 0
call dword [0x40a168]
mov ecx, dword [0x404428]
mov esi, dword [sym.imp.USER32.dll_OpenClipboard]
push ecx
call esi
mov edx, dword [0x404398]
push 0xef
push 0x36
push 0xbb
push 0x3d
push edx
mov dword [0x404128], 0x2c97
call edi
mov eax, dword [0x40441c]
push eax
call esi
mov ecx, dword [0x404388]
push 0xfa
push 0x7c
push 0x60
push 0x25
push ecx
call edi
mov edx, dword [0x40443c]
mov ebp, dword [sym.imp.USER32.dll_GetClassWord]
push 0x89
push edx
call ebp
mov eax, dword [0x404408]
push eax
call esi
mov ecx, dword [0x404324]
push ecx
call esi
mov eax, dword [0x40404c]
mov ecx, 0x4947
cdq
idiv ecx
mov dword [0x404010], edx
mov edx, dword [0x4043ec]
push edx
call esi
mov eax, dword [0x404318]
push 0x7d
push 0xfe
push 0x78
push 0xca
push eax
mov dword [0x404024], 0x7b0d
call edi
mov ecx, dword [0x4040ac]
lea eax, [ecx*8]
sub eax, ecx
shl eax, 7
add eax, ecx
lea edx, [eax + eax*2]
lea eax, [ecx + edx*4]
mov ecx, dword [0x404970]
mov edx, dword [0x404408]
mov dword [0x404104], eax
push edx
lea ebx, [ecx + 1]
call esi
push ebx
push 0
mov eax, dword [0x40a16c]
push eax
call dword [0x40a134]
test eax, eax
mov dword [esp + 0x10], eax
je 0x402b4e
mov ecx, dword [0x404034]
mov eax, 0x487ede05
imul ecx
sar edx, 6
mov ecx, edx
mov edi, dword [esp + 0x10]
shr ecx, 0x1f
dec ebx
add edx, ecx
mov ecx, ebx
mov dword [0x404034], edx
mov edx, ecx
mov esi, 0x404974
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0x404434]
push eax
call dword [sym.imp.USER32.dll_OpenClipboard]
mov ecx, dword [esp + 0x10]
mov edx, dword [0x40438c]
push 0xd9
mov dword [0x404128], 0x3e7a
movsx edi, byte [ecx]
push edx
call ebp
mov eax, dword [0x404310]
mov esi, ebx
sub esi, edi
push 0x44
push eax
dec esi
mov dword [0x404138], 0x304f
call ebp
push edi
mov edi, dword [esp + 0x14]
lea edx, [esp + 0x178]
lea ecx, [edi + esi + 1]
push ecx
push edx
call fcn.00402170
mov eax, dword [0x404088]
push esi
add eax, 0xffff85d3
lea ecx, [esp + 0x184]
mov dword [0x404154], eax
lea eax, [edi + 1]
push eax
push ecx
mov dword [esp + 0x40], eax
call fcn.004022a0
mov edx, dword [0x4043c0]
add esp, 0x18
push 0x86
push edx
call ebp
mov eax, dword [0x404320]
push 0x80
push pe_nt_image_headers32
push 0x47
push 0x5b
push eax
call dword [sym.imp.GDI32.dll_TextOutA]
mov ecx, dword [0x404484]
mov dword [0x404070], 0x1d0
push ecx
mov dword [0x404168], 0x1375
call dword [sym.imp.USER32.dll_OpenClipboard]
lea eax, [ebx + ebx*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea edx, [eax + eax*2]
mov eax, 0x51eb851f
lea ebx, [ebx + edx*4]
imul ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ecx, dword [0x40a16c]
push edx
push 0
push ecx
call dword [0x40a134]
mov edi, eax
test edi, edi
mov dword [esp + 0x24], edi
je 0x402b48
mov edx, dword [esp + 0x28]
push 0
push esi
push edi
push edx
call fcn.004024c0
mov ecx, dword [0x40400c]
mov esi, eax
mov eax, dword [0x404088]
add esp, 0x10
add eax, 0x1246
inc esi
mov dword [0x4040fc], eax
mov eax, 0x13e22cbd
imul ecx
sar edx, 4
mov ecx, edx
push esi
shr ecx, 0x1f
add edx, ecx
push 0
mov dword [0x40400c], edx
mov edx, dword [0x40a16c]
push edx
call dword [0x40a134]
mov ebx, eax
test ebx, ebx
jne 0x402b71
mov edi, dword [sym.imp.GDI32.dll_TextOutA]
mov eax, dword [0x40433c]
push 0x26
push 0x47
push 0xd
push 0xfa
push eax
call edi
mov ecx, dword [0x4044e0]
push 0x2d
push ecx
call ebp
jmp 0x402e93
mov edx, dword [0x404424]
push edx
call dword [sym.imp.USER32.dll_OpenClipboard]
lea ecx, [esi - 1]
mov esi, edi
mov eax, ecx
mov edi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push 0x31
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [0x404348]
push ecx
call ebp
mov edx, dword [esp + 0x24]
mov eax, dword [0x40a16c]
push edx
push 0
push eax
call dword [0x40a138]
mov ecx, dword [0x40449c]
mov esi, dword [sym.imp.USER32.dll_UpdateWindow]
push ecx
call esi
mov edx, dword [esp + 0x10]
mov eax, dword [0x40a16c]
push edx
push 0
push eax
call dword [0x40a138]
mov ecx, dword [0x40444c]
mov dword [0x4040a4], 0x1bf
push ecx
call esi
mov edx, dword [0x404330]
push 0x95
push edx
call ebp
mov eax, dword [0x404478]
push 0x5a
push eax
call ebp
mov ecx, dword [0x404018]
mov eax, 0x1948b0fd
imul ecx
sar edx, 3
mov ecx, edx
mov esi, dword [sym.imp.USER32.dll_OpenClipboard]
shr ecx, 0x1f
add edx, ecx
mov dword [0x404020], 0x5af6
mov dword [0x404018], edx
mov edx, dword [0x404448]
push edx
mov dword [0x404128], 0x518c
mov dword [str.p], 0x2bdf
call esi
mov ecx, 0x11
xor eax, eax
lea edi, [esp + 0x2c]
push 0x69
rep stosd dword es:[edi], eax
mov eax, dword [0x404198]
mov ecx, 0x2ca3
cdq
idiv ecx
mov dword [esp + 0x30], 0x44
mov dword [0x404050], edx
mov edx, dword [0x404400]
push edx
call ebp
mov eax, dword [0x404488]
push 0xb6
push eax
mov dword [esp + 0x280], 0x10007
call ebp
mov ecx, dword [0x40443c]
mov dword [0x40a120], ebx
push 0x6a
push ecx
call ebp
mov eax, dword [0x40a120]
cmp word [eax], 0x5a4d
jne 0x402e93
mov ecx, dword [eax + 0x3c]
mov edi, dword [0x4040a4]
mov eax, 0x8ca29c05
add ecx, ebx
imul edi
add edx, edi
mov dword [0x40a124], ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [0x4040a4], edx
mov eax, dword [ecx]
cmp eax, 0x4550
jne 0x402e93
lea ecx, [esp + 0x14]
lea edx, [esp + 0x2c]
push ecx
push edx
push 0
push 0
push 4
push 0
push 0
push 0
call dword [0x40a12c]
push eax
lea eax, [esp + 0x94]
push eax
call dword [0x40a14c]
mov ecx, dword [0x40a124]
mov eax, dword [esp + 0x14]
mov edx, dword [ecx + 0x34]
push edx
push eax
call dword [0x40a150]
mov ecx, dword [0x404098]
mov eax, 0x47dfda61
imul ecx
mov eax, dword [0x40a124]
push 0x40
sar edx, 0xd
mov ecx, edx
push 0x3000
shr ecx, 0x1f
add edx, ecx
mov ecx, dword [esp + 0x1c]
mov dword [0x4040d8], edx
mov edx, dword [eax + 0x50]
mov eax, dword [eax + 0x34]
push edx
push eax
push ecx
call dword [0x40a154]
mov edx, dword [0x4043fc]
push 0x61
push 0xa7
push 0xc
push 0x7d
push edx
call dword [sym.imp.GDI32.dll_TextOutA]
mov eax, dword [0x40a124]
push 0
mov ecx, dword [eax + 0x54]
mov edx, dword [eax + 0x34]
mov eax, dword [esp + 0x18]
push ecx
push ebx
push edx
push eax
call dword [0x40a158]
mov ecx, dword [0x4040f8]
xor edi, edi
add ecx, 0x3654
mov dword [0x4040bc], ecx
mov ecx, dword [0x40a124]
cmp word [ecx + 6], di
jbe 0x402e22
xor ebp, ebp
mov edx, dword [0x40a120]
push 0
mov eax, dword [edx + 0x3c]
mov edx, dword [0x404140]
add eax, ebp
add edx, 0xffffd2ce
mov dword [0x404078], edx
lea eax, [eax + ebx + 0xf8]
mov dword [0x40a128], eax
mov edx, dword [eax + 0x10]
push edx
mov edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
add edx, ebx
push edx
mov edx, dword [ecx + 0x34]
mov ecx, dword [esp + 0x20]
add eax, edx
push eax
push ecx
call dword [0x40a158]
mov edx, dword [0x4043b4]
push edx
call esi
mov ecx, dword [0x40a124]
xor eax, eax
inc edi
add ebp, 0x28
mov ax, word [ecx + 6]
cmp edi, eax
jl 0x402dbc
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x278]
push ecx
push edx
call dword [0x40a15c]
mov eax, dword [0x40a124]
mov dword [0x40416c], 0x75f5
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x28]
mov eax, dword [esp + 0x18]
add ecx, edx
lea edx, [esp + 0x278]
mov dword [esp + 0x328], ecx
push edx
push eax
call dword [0x40a160]
mov ecx, dword [esp + 0x18]
mov dword [0x404058], 0x6dc9
push ecx
call dword [0x40a164]
mov edx, dword [0x40436c]
push 0x9c
push 8
push 0xf
push 0x2b
push edx
call dword [sym.imp.GDI32.dll_TextOutA]
mov eax, dword [0x404398]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
mov ecx, dword [0x404014]
mov eax, 0x6bca1af3
imul ecx
sar edx, 4
mov eax, dword [esp + 0x548]
mov ecx, edx
shr ecx, 0x1f
pop esi
add edx, ecx
pop ebp
pop ebx
mov dword [0x404014], edx
pop edi
add esp, 0x534
ret