Function at 0x4078c0
Capabilities:
Terminate process

Disassembly:
push 0xffffffffffffffff
push 0x414763
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb1c
push ebx
push ebp
push esi
mov ebp, ecx
push edi
xor ebx, ebx
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x66]
mov word [esp + 0x64], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0xc6]
mov word [esp + 0xc4], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x26]
mov word [esp + 0x24], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [esp + 0xb3c]
cmp eax, 1
jne 0x40794d
mov esi, dword [sym.imp.MSVCRT.dll_wcscpy]
lea eax, [esp + 0x64]
push str.WINWORD.EXE
push eax
call esi
push str.WINWORD
jmp 0x407afe
cmp eax, 2
jne 0x407973
mov esi, dword [sym.imp.MSVCRT.dll_wcscpy]
lea edx, [esp + 0x64]
push str.EXCEL.EXE
push edx
call esi
lea eax, [esp + 0x2c]
push str.EXCEL
push eax
jmp 0x407b03
cmp eax, 3
jne 0x407999
mov esi, dword [sym.imp.MSVCRT.dll_wcscpy]
lea ecx, [esp + 0x64]
push str.POWERPNT.EXE
push ecx
call esi
lea edx, [esp + 0x2c]
push str.POWERPOINT
push edx
jmp 0x407b03
cmp eax, 4
jne 0x4079d3
mov esi, dword [sym.imp.MSVCRT.dll_wcscpy]
lea eax, [esp + 0x64]
push str.HWPW.EXE
push eax
call esi
lea ecx, [esp + 0xcc]
push str.HWP.EXE
push ecx
call esi
lea edx, [esp + 0x34]
push 0x41d080
push edx
call esi
add esp, 0x18
jmp 0x407b08
cmp eax, 5
jne 0x4079f4
mov esi, dword [sym.imp.MSVCRT.dll_wcscpy]
lea eax, [esp + 0x64]
push str.HUN2K.EXE
push eax
call esi
push str.HUN2K
jmp 0x407afe
cmp eax, 6
jne 0x407a2e
mov esi, dword [sym.imp.MSVCRT.dll_wcscpy]
lea edx, [esp + 0x64]
push str.ACROBAT.EXE
push edx
call esi
lea eax, [esp + 0xcc]
push str.ACRORD32.EXE
push eax
call esi
lea ecx, [esp + 0x34]
push str.ACROBAT
push ecx
call esi
add esp, 0x18
jmp 0x407b08
cmp eax, 7
jne 0x407a54
mov esi, dword [sym.imp.MSVCRT.dll_wcscpy]
lea edx, [esp + 0x64]
push str.NOTEPAD.EXE
push edx
call esi
lea eax, [esp + 0x2c]
push str.NOTEPAD
push eax
jmp 0x407b03
cmp eax, 8
jne 0x407a7a
mov esi, dword [sym.imp.MSVCRT.dll_wcscpy]
lea ecx, [esp + 0x64]
push str.TARO13.EXE
push ecx
call esi
lea edx, [esp + 0x2c]
push str.TARO13
push edx
jmp 0x407b03
cmp eax, 9
jne 0x407a98
mov esi, dword [sym.imp.MSVCRT.dll_wcscpy]
lea eax, [esp + 0x64]
push str.MSPAINT.EXE
push eax
call esi
push str.MSPAINT
jmp 0x407afe
cmp eax, 0xa
jne 0x407abb
mov esi, dword [sym.imp.MSVCRT.dll_wcscpy]
lea edx, [esp + 0x64]
push str.WINPROJ.EXE
push edx
call esi
lea eax, [esp + 0x2c]
push str.WINPROJ
push eax
jmp 0x407b03
cmp eax, 0xb
jne 0x407ade
mov esi, dword [sym.imp.MSVCRT.dll_wcscpy]
lea ecx, [esp + 0x64]
push str.HH.EXE
push ecx
call esi
lea edx, [esp + 0x2c]
push 0x41cef0
push edx
jmp 0x407b03
cmp eax, 0xc
jne 0x407c52
mov esi, dword [sym.imp.MSVCRT.dll_wcscpy]
lea eax, [esp + 0x64]
push str.WMPLAYER.EXE
push eax
call esi
push str.Window_MediaPlayer
lea ecx, [esp + 0x30]
push ecx
call esi
add esp, 0x10
lea ecx, [esp + 0xa4]
call fcn.0040fd50
push ecx
mov dword [esp + 0xb38], ebx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x423b84
call sub.MFC42u.DLL_CString::CString_3
lea ecx, [esp + 0x108]
call fcn.0040ccd0
lea ecx, [esp + 0x18]
mov byte [esp + 0xb34], 1
call sub.MFC42u.DLL_CString::CString_1
lea ecx, [esp + 0xa4]
mov byte [esp + 0xb34], 2
call fcn.0040fee0
lea ecx, [esp + 0xa4]
call fcn.00410090
mov ebx, eax
xor esi, esi
test ebx, ebx
jle 0x407c16
mov edi, dword [sym.imp.MSVCRT.dll__wcsicmp]
lea edx, [esp + 0x714]
lea ecx, [esp + 0xa4]
push edx
push esi
call fcn.004100a0
push ecx
lea eax, [esp + 0x720]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call sub.MFC42u.DLL_CString::CString_2
lea ecx, [esp + 0x108]
call fcn.0040cd70
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x108]
call fcn.0040cdc0
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xb38], 3
call sub.MFC42u.DLL_CString::operator_2
lea ecx, [esp + 0x14]
mov byte [esp + 0xb34], 2
call sub.MFC42u.DLL_CString::CString
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x64]
push edx
push eax
call edi
add esp, 8
test eax, eax
je 0x407c72
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0xc4]
push ecx
push edx
call edi
add esp, 8
test eax, eax
je 0x407c72
inc esi
cmp esi, ebx
jl 0x407b7b
lea ecx, [esp + 0x18]
mov byte [esp + 0xb34], 1
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x104]
mov byte [esp + 0xb34], 0
call fcn.0040cd60
lea ecx, [esp + 0xa4]
mov dword [esp + 0xb34], 0xffffffff
call fcn.0040fda0
mov eax, 1
mov ecx, dword [esp + 0xb2c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xb28
ret 4
mov eax, dword [esp + 0x714]
test eax, eax
mov esi, eax
je 0x407c16
lea ecx, [esp + 0x14]
call sub.MFC42u.DLL_CString::CString_1
lea ecx, [esp + 0x20]
mov byte [esp + 0xb34], 4
call sub.MFC42u.DLL_CString::CString_1
lea ecx, [esp + 0x1c]
mov byte [esp + 0xb34], 5
call sub.MFC42u.DLL_CString::CString_1
lea eax, [esp + 0x10]
push str.SOMER029
push eax
mov ecx, 0x425780
mov byte [esp + 0xb3c], 6
call fcn.0040eb80
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0xb38], 7
call sub.MFC42u.DLL_CString::operator_2
lea ecx, [esp + 0x10]
mov byte [esp + 0xb34], 6
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x10]
push str.SOMER030
push ecx
mov ecx, 0x425780
call fcn.0040eb80
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0xb38], 8
call sub.MFC42u.DLL_CString::operator_2
lea ecx, [esp + 0x10]
mov byte [esp + 0xb34], 6
call sub.MFC42u.DLL_CString::CString
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
push edx
lea ecx, [esp + 0x28]
push eax
push ecx
lea edx, [esp + 0x20]
push str._s__s_n_n_s
push edx
call sub.MFC42u.DLL_CString::Format
add esp, 0x14
lea eax, [esp + 0x10]
mov ecx, 0x425780
push str.SOMWT001
push eax
call fcn.0040eb80
mov eax, dword [eax]
mov ecx, dword [esp + 0x14]
mov edx, dword [ebp + 4]
push 0x31
push eax
push ecx
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
lea ecx, [esp + 0x10]
sete bl
call sub.MFC42u.DLL_CString::CString
test bl, bl
je 0x407dd8
push esi
push 0
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x407dd8
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x1c]
mov byte [esp + 0xb34], 5
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x20]
mov byte [esp + 0xb34], 4
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x14]
mov byte [esp + 0xb34], 2
call sub.MFC42u.DLL_CString::CString
jmp 0x407c16
lea ecx, [esp + 0x1c]
mov byte [esp + 0xb34], 5
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x20]
mov byte [esp + 0xb34], 4
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x14]
mov byte [esp + 0xb34], 2
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x18]
mov byte [esp + 0xb34], 1
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x104]
mov byte [esp + 0xb34], 0
call fcn.0040cd60
lea ecx, [esp + 0xa4]
mov dword [esp + 0xb34], 0xffffffff
call fcn.0040fda0
xor eax, eax
jmp 0x407c57