Function at 0x42a530
Capabilities:
Enumerate gui resources
Terminate process

Disassembly:
sub esp, 0x734
mov eax, dword [0x4c4004]
xor eax, esp
mov dword [esp + 0x72c], eax
mov eax, dword [0x4def88]
push ebx
push ebp
push esi
push edi
push 0x2762
push eax
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
mov ebp, eax
push 0
push 0
push 0x1004
push ebp
call ebx
mov esi, eax
xor edi, edi
test esi, esi
jle 0x42a595
nop dword [eax]
push 2
push edi
push 0x102c
push ebp
call ebx
cmp eax, 2
je 0x42a5f2
inc edi
cmp edi, esi
jl 0x42a580
mov edx, 0x4add54
mov ecx, str.STRT
call fcn.00477440
push eax
lea eax, [esp + 0x534]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0x530]
mov edx, 0x4add24
push 0x30
push eax
mov ecx, str.STRT
call fcn.00477440
push eax
push dword [esp + 0x20]
call dword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
mov ecx, dword [esp + 0x73c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0048d925
add esp, 0x734
ret
cmp edi, esi
jge 0x42a595
xor eax, eax
push 0x206
push eax
mov word [esp + 0x330], ax
lea eax, [esp + 0x332]
push eax
call fcn.0048e880
add esp, 0xc
mov dword [esp + 0x24], 1
lea eax, [esp + 0x328]
mov dword [esp + 0x34], 0x104
mov dword [esp + 0x30], eax
lea eax, [esp + 0x1c]
push eax
push edi
push 0x1073
push ebp
call ebx
cmp dword [esp + 0x18], 0
mov ecx, str.STRT
mov edx, 0x4add4c
je 0x42a655
mov edx, 0x4add98
call fcn.00477440
mov ebp, dword [sym.imp.SHLWAPI.dll_StrCpyW]
push eax
lea eax, [esp + 0x124]
push eax
call ebp
mov esi, dword [sym.imp.SHLWAPI.dll_StrCatW]
lea eax, [esp + 0x328]
push eax
lea eax, [esp + 0x124]
push eax
call esi
mov edx, 0x4add90
mov ecx, str.STRT
call fcn.00477440
push eax
lea eax, [esp + 0x124]
push eax
call esi
push 0x24
mov edx, 0x4ad0a4
mov ecx, str.STRT
call fcn.00477440
mov esi, dword [sym.imp.USER32.dll_MessageBoxW]
push eax
lea eax, [esp + 0x128]
push eax
push dword [0x4def88]
call esi
cmp eax, 6
jne 0x42a5d7
push 0xc4
lea eax, [esp + 0x60]
mov dword [esp + 0x5c], 0x30
push 0
push eax
call fcn.0048e880
add esp, 0xc
mov dword [esp + 0x24], 0
lea eax, [esp + 0x58]
mov dword [esp + 0x34], 0x64
mov dword [esp + 0x30], eax
lea eax, [esp + 0x1c]
push eax
push edi
push 0x1073
push 0x2762
push dword [0x4def88]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebx
lea eax, [esp + 0x58]
push eax
call fcn.004937f5
add esp, 4
cmp dword [esp + 0x18], 0
jne 0x42a783
mov ecx, eax
call fcn.00474420
test eax, eax
jne 0x42a80d
mov edx, 0x4addd4
mov ecx, str.STRT
call fcn.00477440
push eax
lea eax, [esp + 0x124]
push eax
call ebp
push 0x30
mov edx, 0x4adde4
mov ecx, str.STRT
call fcn.00477440
push eax
lea eax, [esp + 0x128]
push eax
push dword [esp + 0x20]
call esi
jmp 0x42a80d
mov esi, eax
push esi
push 0
push 0x100001
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
test edi, edi
je 0x42a7cf
push esi
push 0x4743e0
call dword [sym.imp.USER32.dll_EnumWindows]
push 0xbb8
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x42a83f
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push edi
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
jne 0x42a80d
mov edx, 0x4addd4
mov ecx, str.STRT
call fcn.00477440
push eax
lea eax, [esp + 0x124]
push eax
call ebp
push 0x30
mov edx, 0x4adde4
mov ecx, str.STRT
call fcn.00477440
push eax
lea eax, [esp + 0x128]
push eax
push dword [esp + 0x20]
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x2762
push dword [0x4def88]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edx, 1
mov ecx, eax
call fcn.00473c30
mov eax, 1
jmp 0x42a5d9
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x42a80d