Function at 0x402bf0
Capabilities:
Enumerate pe sections
Get graphical window text
Link many functions at runtime
Parse pe header

Disassembly:
jmp 0x402c00
jmp 0x402be0
sub esp, 0x534
push ebx
push ebp
push esi
call fcn.00401000
mov ecx, dword [0x40514c]
mov eax, 0x2e8ba2e9
imul ecx
mov ecx, dword [0x405010]
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
sar edx, 1
mov eax, edx
add ecx, 0xffffff4c
shr eax, 0x1f
add edx, eax
push 0x419014
mov dword [0x40514c], edx
mov dword [0x405074], ecx
call esi
push 0x419030
mov dword [0x4190bc], eax
call esi
mov edx, dword [0x4054c0]
mov ebx, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0x68
push edx
mov dword [0x4190b8], eax
call ebx
mov eax, dword [0x405138]
mov ecx, dword [0x4190b8]
add eax, 0xfffffefe
push 0x418ff0
push ecx
mov dword [0x4050a4], eax
call fcn.00402820
mov edx, dword [0x4054c0]
mov ebp, dword [sym.imp.USER32.dll_SendMessageA]
add esp, 8
mov dword [0x419074], eax
push 0x5d83
push 0x1297
push 0x381
push edx
call ebp
mov eax, dword [0x4190b8]
push 0x418fbc
push eax
call fcn.00402820
mov ecx, dword [0x405144]
mov dword [0x419094], eax
mov eax, 0x30c30c31
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
imul ecx
sar edx, 3
mov ecx, edx
add esp, 8
shr ecx, 0x1f
add edx, ecx
push 0x41904c
mov dword [0x405144], edx
mov edx, dword [0x4190bc]
push edx
call esi
mov ecx, dword [0x4190b8]
mov dword [0x419098], eax
mov eax, dword [0x40500c]
push 0x41903c
add eax, 0xffffae46
push ecx
mov dword [0x405030], eax
call fcn.00402820
mov edx, dword [0x405504]
add esp, 8
mov dword [0x41909c], eax
push 0x14
push edx
call ebx
mov eax, dword [0x4190b8]
push 0x41901c
push eax
call fcn.00402820
mov ecx, dword [0x4054e0]
add esp, 8
mov dword [0x4190a0], eax
push 0xc
push ecx
call ebx
mov edx, dword [0x4190b8]
push 0x419000
push edx
call fcn.00402820
add esp, 8
mov dword [0x4190a4], eax
mov eax, dword [0x4190b8]
mov dword [0x405058], 0x1761
push 0x418fdc
push eax
call esi
mov ecx, dword [0x4190b8]
push 0x418fac
push ecx
mov dword [0x4190a8], eax
mov dword [0x4050cc], 0x143f
call esi
mov edx, dword [0x4054c4]
push 0xea
push edx
mov dword [0x4190ac], eax
call ebx
mov eax, dword [0x4190b8]
push 0x418fcc
push eax
call esi
mov ecx, dword [0x4054ec]
push 0xdf
push ecx
mov dword [0x419078], eax
call dword [sym.imp.USER32.dll_GetClassWord]
mov edx, dword [0x4190b8]
push 0x418fa0
push edx
call esi
mov dword [0x41907c], eax
mov eax, dword [0x4054ac]
push 0x51
push eax
call ebx
mov ecx, dword [0x4190b8]
push 0x418f84
push ecx
call esi
mov ecx, dword [0x405138]
mov dword [0x419080], eax
mov eax, 0x8fb823ef
push 0x418f60
imul ecx
add edx, ecx
mov ecx, dword [0x4190b8]
sar edx, 7
mov eax, edx
push ecx
shr eax, 0x1f
add edx, eax
mov dword [0x405138], edx
call esi
mov edx, dword [0x405558]
push 0x36dd
push 0x7b0f
push 0x4a81
push edx
mov dword [0x4190b0], eax
call ebp
mov eax, dword [0x419074]
test eax, eax
je 0x4036b0
mov eax, dword [0x419094]
test eax, eax
je 0x4036b0
mov eax, dword [0x419098]
test eax, eax
je 0x4036b0
mov eax, dword [0x41909c]
test eax, eax
je 0x4036b0
mov eax, dword [0x4190a0]
test eax, eax
je 0x4036b0
mov eax, dword [0x4190a4]
test eax, eax
je 0x4036b0
mov eax, dword [0x4190a8]
test eax, eax
je 0x4036b0
mov eax, dword [0x4190ac]
test eax, eax
je 0x4036b0
mov eax, dword [0x419078]
test eax, eax
je 0x4036b0
mov ecx, dword [0x41907c]
test ecx, ecx
je 0x4036b0
mov ecx, dword [0x419080]
test ecx, ecx
je 0x4036b0
mov ecx, dword [0x4190b0]
test ecx, ecx
je 0x4036b0
push edi
call eax
mov ecx, dword [0x405094]
mov dword [0x4190b4], eax
mov eax, ecx
push 0x104
shl eax, 4
add eax, ecx
shl eax, 4
sub eax, ecx
lea ecx, [esp + 0x178]
push ecx
push 0
lea eax, [eax + eax*2]
shl eax, 4
mov dword [0x4050e8], eax
call dword [0x4190b0]
mov edx, dword [0x40555c]
push 0xb12
push 0x1050
push 0x783d
push edx
mov dword [0x40503c], 0x56a6
call ebp
mov eax, dword [0x405584]
push 0x22ef
push 0x5e34
push 0x3de7
push eax
call ebp
mov eax, dword [0x4051c4]
push 0xbc
lea ecx, [eax + eax*4]
shl ecx, 4
sub ecx, eax
lea ecx, [eax + ecx*4]
lea edx, [ecx + ecx*8]
mov ecx, dword [0x4050ec]
lea eax, [eax + edx*4]
shl eax, 1
mov dword [0x4051ac], eax
mov eax, 0xae4c415d
imul ecx
add edx, ecx
mov eax, dword [0x405564]
sar edx, 6
mov ecx, edx
push eax
shr ecx, 0x1f
add edx, ecx
mov dword [0x4050ec], edx
mov edx, dword [0x4051b8]
add edx, 0xffff8e81
mov dword [0x405028], edx
call ebx
mov ecx, dword [0x405108]
mov edx, dword [0x4054f4]
push 0x2f86
push 0x41c9
add ecx, 0xffffcbdd
push 0x284c
push edx
mov dword [0x4050ac], ecx
mov dword [0x40502c], 0x7a00
call ebp
mov ecx, dword [0x405020]
mov eax, 0x1b4e81b5
imul ecx
mov ecx, dword [0x405500]
push 0x1dc1
sar edx, 3
mov eax, edx
push 0x3afd
shr eax, 0x1f
add edx, eax
push 0x7df8
push ecx
mov dword [0x405020], edx
call ebp
mov esi, dword [0x4059b0]
push 0x62
mov edx, dword [0x4054b4]
push edx
call ebx
mov eax, dword [0x4051a4]
mov ecx, dword [0x4190b4]
inc esi
add eax, 0x7246
push esi
push 0
push ecx
mov dword [0x4051c8], eax
call dword [0x41907c]
mov edi, eax
test edi, edi
mov dword [esp + 0x10], edi
je 0x403273
mov edx, dword [0x405554]
push 0x5d74
push 0x78b5
dec esi
push 0x43da
push edx
mov dword [esp + 0x28], esi
call ebp
mov ecx, esi
mov esi, 0x4059b4
mov eax, ecx
push 0x3c1
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, 0x8fb823ef
and ecx, 3
push 0x3d75
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [0x4050ac]
push 0x2a7b
imul ecx
add edx, ecx
sar edx, 6
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov dword [0x4050ac], edx
mov edx, dword [0x4055a4]
push edx
call ebp
mov eax, dword [esp + 0x10]
mov edx, dword [0x405554]
push pe_nt_image_headers32
push edx
movsx ecx, byte [eax]
mov dword [esp + 0x1c], ecx
call dword [sym.imp.USER32.dll_GetClassWord]
mov esi, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ecx, dword [0x405080]
mov edi, esi
mov eax, 0x4ec4ec4f
sub edi, edx
imul ecx
mov ecx, dword [0x405504]
push 0xa1
sar edx, 2
mov eax, edx
push ecx
shr eax, 0x1f
add edx, eax
dec edi
mov dword [0x405080], edx
call ebx
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
push 1
push edx
lea ecx, [eax + edi + 1]
lea edx, [esp + 0x78]
push ecx
push edx
call fcn.004024b0
mov ecx, dword [0x405108]
mov eax, 0xa0a0a0a1
imul ecx
add edx, ecx
mov ecx, dword [esp + 0x20]
sar edx, 6
mov eax, edx
push 0
shr eax, 0x1f
add edx, eax
lea eax, [ecx + 1]
mov dword [0x405108], edx
push edi
lea edx, [esp + 0x88]
push eax
mov dword [esp + 0x34], eax
push edx
call fcn.00402630
mov eax, dword [0x405520]
add esp, 0x20
push 0x4d73
push 0x3bf6
push 0x7ad7
push eax
call ebp
mov ecx, dword [0x405204]
mov eax, 0x200a0321
imul ecx
mov eax, dword [str.7trH]
push 0x6d
sar edx, 0xa
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov dword [str.k4_], edx
lea edx, [eax + eax*2]
lea ecx, [eax + edx*4]
mov edx, dword [0x4054e0]
shl ecx, 4
add ecx, eax
push edx
shl ecx, 6
add ecx, eax
mov dword [0x405070], ecx
call dword [sym.imp.USER32.dll_GetClassWord]
mov eax, dword [0x40559c]
push 0x21
push eax
call ebx
lea eax, [esi + esi*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
mov eax, 0x51eb851f
lea esi, [esi + ecx*4]
mov ecx, dword [0x4190b4]
imul esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
push edx
push 0
push ecx
call dword [0x41907c]
mov esi, eax
test esi, esi
mov dword [esp + 0x14], esi
je 0x403273
mov edx, dword [esp + 0x18]
push 0
push edi
push esi
push edx
call fcn.00402b00
mov ecx, dword [0x4054d0]
add esp, 0x10
mov edi, eax
mov eax, dword [0x405208]
push 0x4c97
push 0x51d9
add eax, 0xffffd393
push 0x4da3
push ecx
mov dword [0x405018], eax
inc edi
call ebp
mov edx, dword [0x4190b4]
push edi
push 0
push edx
call dword [0x41907c]
test eax, eax
mov dword [esp + 0x18], eax
jne 0x40329f
mov ecx, dword [0x40511c]
mov eax, 0x15390949
imul ecx
sar edx, 4
mov eax, edx
mov dword [0x405224], 0x604
shr eax, 0x1f
add edx, eax
mov dword [0x40511c], edx
jmp 0x40367b
mov ecx, dword [0x405150]
push 0x1d
add ecx, 0x4a15
mov dword [0x4051c8], ecx
lea ecx, [edi - 1]
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0x405524]
push eax
call ebx
mov ecx, dword [esp + 0x14]
mov edx, dword [0x4190b4]
push ecx
push 0
push edx
call dword [0x419080]
mov eax, dword [0x4054e0]
push 0x28
push eax
call ebx
mov ecx, dword [esp + 0x10]
mov edx, dword [0x4190b4]
push ecx
push 0
push edx
call dword [0x419080]
mov eax, dword [0x405540]
mov esi, dword [sym.imp.USER32.dll_GetClassWord]
push 0xc9
push eax
call esi
mov ecx, dword [0x4050f0]
mov eax, 0x43b3d5b
imul ecx
sar edx, 2
mov ecx, edx
push 0xc1
shr ecx, 0x1f
add edx, ecx
mov dword [0x4050f0], edx
mov edx, dword [0x405528]
push edx
call ebx
mov ecx, dword [0x4050d4]
mov eax, 0x342da7f3
imul ecx
mov ecx, dword [0x405590]
push 0x3b37
sar edx, 5
mov eax, edx
push 0xa86
shr eax, 0x1f
add edx, eax
push 0x1311
push ecx
mov dword [0x4050d4], edx
call ebp
mov edx, dword [0x405538]
push 0xc1
push edx
mov dword [0x405104], 0x2284
mov dword [0x405228], 0xca0
call esi
mov eax, dword [0x40558c]
push 0x2adb
push 0x7cb1
push 0x2f51
push eax
call ebp
mov eax, 0x663d81
imul dword [0x4051f0]
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov dword [str.sON], edx
mov ecx, dword [0x4051f8]
mov eax, 0x8d3dcb09
imul ecx
add edx, ecx
mov ecx, 0x11
sar edx, 5
mov eax, edx
lea edi, [esp + 0x2c]
shr eax, 0x1f
add edx, eax
xor eax, eax
rep stosd dword es:[edi], eax
mov eax, 0x4325c53f
mov dword [0x4051f8], edx
imul dword [0x4051f0]
sar edx, 6
mov ecx, edx
mov eax, 0x87e5753
shr ecx, 0x1f
add edx, ecx
mov ecx, dword [0x4051a4]
mov dword [0x4051f0], edx
imul ecx
mov ecx, dword [0x405024]
mov edi, dword [esp + 0x18]
sar edx, 6
mov eax, edx
push 0x8b
shr eax, 0x1f
add edx, eax
mov eax, 0x4896a299
mov dword [0x405064], edx
imul ecx
sar edx, 0xd
mov ecx, edx
mov dword [0x4051c4], 0x2803
shr ecx, 0x1f
add edx, ecx
mov dword [esp + 0x30], 0x44
mov dword [0x40525c], edx
mov edx, dword [0x4055ac]
push edx
mov dword [esp + 0x280], 0x10007
mov dword [0x419068], edi
call esi
mov eax, dword [0x419068]
cmp word [eax], 0x5a4d
jne 0x40367b
mov eax, dword [eax + 0x3c]
mov ecx, dword [0x405568]
add eax, edi
push 0xd8
push ecx
mov dword [0x41906c], eax
call ebx
mov edx, dword [0x41906c]
cmp dword [edx], 0x4550
jne 0x40367b
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x2c]
push eax
push ecx
push 0
push 0
push 4
push 0
push 0
push 0
call dword [0x419074]
lea edx, [esp + 0x194]
push eax
push edx
call dword [0x419094]
mov eax, dword [0x40550c]
push 0x3c
push eax
call ebx
mov ecx, dword [0x41906c]
mov eax, dword [esp + 0x1c]
mov edx, dword [ecx + 0x34]
push edx
push eax
call dword [0x419098]
mov ecx, dword [0x40556c]
push 0xdf
push ecx
call esi
mov eax, dword [0x41906c]
mov ecx, dword [esp + 0x1c]
push 0x40
push 0x3000
mov edx, dword [eax + 0x50]
mov eax, dword [eax + 0x34]
push edx
push eax
push ecx
call dword [0x41909c]
mov eax, dword [0x41906c]
mov ecx, dword [esp + 0x1c]
mov dword [0x40500c], 0x7c18
push 0
mov edx, dword [eax + 0x54]
mov eax, dword [eax + 0x34]
push edx
push edi
push eax
push ecx
call dword [0x4190a0]
mov edx, dword [0x4055b0]
push 0x1e01
push 0x789
push 0x2fdd
push edx
call ebp
mov ecx, dword [0x41906c]
xor eax, eax
mov dword [esp + 0x14], eax
cmp word [ecx + 6], ax
jbe 0x4035f7
mov dword [esp + 0x10], eax
mov eax, dword [0x419068]
push 0
mov edx, dword [eax + 0x3c]
mov eax, dword [esp + 0x14]
add edx, eax
mov dword [0x405034], 0x240f
lea eax, [edx + edi + 0xf8]
mov dword [0x419070], eax
mov edx, dword [eax + 0x10]
push edx
mov edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
add edx, edi
push edx
mov edx, dword [ecx + 0x34]
mov ecx, dword [esp + 0x28]
add eax, edx
push eax
push ecx
call dword [0x4190a0]
mov edx, dword [0x405600]
push 0xc0
push edx
call esi
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
add ecx, 0x28
xor edx, edx
mov dword [esp + 0x10], ecx
mov ecx, dword [0x41906c]
inc eax
mov dx, word [ecx + 6]
mov dword [esp + 0x14], eax
cmp eax, edx
jl 0x403581
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x278]
push eax
push ecx
call dword [0x4190a4]
mov edx, dword [0x4055fc]
push 0x6480
push 0x32cf
push 0x3b5a
push edx
call ebp
mov eax, dword [0x41906c]
push 0xeb
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x28]
add ecx, edx
mov edx, dword [0x405524]
push edx
mov dword [esp + 0x330], ecx
call esi
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x278]
push eax
push ecx
call dword [0x4190a8]
mov edx, dword [esp + 0x20]
mov dword [0x4051c4], 0xd2d
push edx
call dword [0x4190ac]
mov eax, dword [0x40514c]
add eax, 0x2903
mov dword [0x405198], eax
mov ecx, dword [0x405228]
mov eax, 0xc42dc9b
imul ecx
sar edx, 0xa
mov ecx, edx
push 0x71
shr ecx, 0x1f
add edx, ecx
mov dword [0x405058], edx
mov edx, dword [0x4054ec]
push edx
call ebx
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x534
ret
mov eax, dword [0x4054e8]
push 7
push eax
call ebx
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x534
ret