Function at 0x403140
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x611364
mov eax, dword fs:[0]
push eax
sub esp, 0x6c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x6efdcc]
xor eax, esp
push eax
lea eax, [esp + 0x80]
mov dword fs:[0], eax
mov ebp, dword [0x8317f4]
mov eax, dword [ebp + 0x14]
lea edx, [esp + 0x34]
push edx
mov esi, 1
xor ebx, ebx
mov dword [ebp + 0xc], esi
mov dword [ebp + 0x498], 0x20
mov ecx, dword [eax]
push ebx
push eax
mov eax, dword [ecx + 0x20]
call eax
push 0x28a
push 0x311
push ebx
push ebx
lea ecx, [esp + 0x34]
push ecx
mov dword [esp + 0x48], 0x311
mov dword [esp + 0x4c], 0x28a
call dword [sym.imp.USER32.dll_SetRect]
mov edx, dword [ebp + 8]
push ebx
push 0xfffffffffffffff0
push edx
call dword [sym.imp.USER32.dll_GetWindowLongA]
push eax
lea eax, [esp + 0x2c]
push eax
call dword [sym.imp.USER32.dll_AdjustWindowRect]
mov ecx, dword [esp + 0x30]
sub ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
sub edx, dword [esp + 0x24]
mov eax, dword [ebp + 8]
push 2
push ecx
push edx
push ebx
push ebx
push ebx
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov edi, dword [esp + 0x34]
mov ecx, edi
mov dword [esp + 0x1c], ecx
fild dword [esp + 0x1c]
test ecx, ecx
jge 0x403214
fadd dword [0x6c2db0]
mov edx, dword [esp + 0x38]
fild dword [esp + 0x38]
test edx, edx
jge 0x403226
fadd dword [0x6c2db0]
fdivp st(1)
push 0x38
lea eax, [esp + 0x48]
push ebx
push eax
fstp dword [0x6ef020]
call fcn.005e2200
mov ecx, dword [esp + 0x44]
mov eax, dword [ebp + 8]
add esp, 0xc
mov dword [esp + 0x48], ecx
lea edx, [ebp + 0x18]
mov dword [esp + 0x64], esi
mov dword [esp + 0x44], edi
mov dword [esp + 0x50], esi
mov dword [esp + 0x5c], esi
mov dword [esp + 0x68], esi
mov edi, edx
mov dword [esp + 0x60], eax
mov ecx, 0xe
lea esi, [esp + 0x44]
mov dword [esp + 0x4c], 0x15
mov dword [esp + 0x54], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x6c], 0x4b
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x14]
lea edi, [esp + 0x1c]
push edi
push edx
mov edx, dword [ebp + 0xc]
push 0x40
push eax
push edx
mov dword [esp + 0x30], ebx
mov esi, dword [ecx]
mov eax, dword [esi + 0x40]
push ebx
push ecx
call eax
cmp eax, ebx
mov esi, dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
jge 0x4032ce
push ebx
push 0x6c0148
push 0x6c01b8
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
push ebx
call edi
push eax
call esi
mov ecx, dword [esp + 0x1c]
push ecx
mov ecx, ebp
call fcn.005bc090
mov ecx, ebp
call fcn.005be9d0
test al, al
jne 0x4032eb
push ebx
call edi
push eax
call esi
mov ecx, ebp
call fcn.005baff0
lea ecx, [esp + 0x1b]
call fcn.005bb910
push 0x66c
mov dword [esp + 0x8c], ebx
call fcn.005babf0
add esp, 4
mov dword [esp + 0x20], eax
mov byte [esp + 0x88], 1
cmp eax, ebx
je 0x403336
push 0xd
push 0xa
push str.Verdana
lea edx, [esp + 0x27]
push edx
mov ecx, eax
call fcn.005c24a0
jmp 0x403338
xor eax, eax
push ebx
push ebx
push ebx
push ebx
mov byte [esp + 0x98], bl
push ebx
mov ecx, eax
mov dword [0x8a6368], eax
call fcn.005c2350
push 0x66c
mov dword [0x6ef138], 5
call fcn.005babf0
add esp, 4
mov dword [esp + 0x20], eax
mov byte [esp + 0x88], 2
cmp eax, ebx
je 0x40338e
push 0xc
push 0xc
push str.System
lea ecx, [esp + 0x27]
push ecx
mov ecx, eax
call fcn.005c24a0
jmp 0x403390
xor eax, eax
push ebx
push ebx
push ebx
push ebx
mov byte [esp + 0x98], bl
push ebx
mov ecx, eax
mov dword [0x8d6940], eax
call fcn.005c2350
push 0x66c
call fcn.005babf0
add esp, 4
mov dword [esp + 0x20], eax
mov byte [esp + 0x88], 3
cmp eax, ebx
je 0x4033dc
push 0xc
push 0xa
push str.System
lea edx, [esp + 0x27]
push edx
mov ecx, eax
call fcn.005c24a0
jmp 0x4033de
xor eax, eax
push ebx
push ebx
push ebx
push ebx
mov byte [esp + 0x98], bl
push ebx
mov ecx, eax
mov dword [0x8d6944], eax
call fcn.005c2350
push 0x66c
call fcn.005babf0
add esp, 4
mov dword [esp + 0x20], eax
mov byte [esp + 0x88], 4
cmp eax, ebx
je 0x40342a
push 0xc
push 9
push str.System
lea ecx, [esp + 0x27]
push ecx
mov ecx, eax
call fcn.005c24a0
jmp 0x40342c
xor eax, eax
push ebx
push ebx
push ebx
push ebx
mov byte [esp + 0x98], bl
push ebx
mov ecx, eax
mov dword [0x8d6948], eax
call fcn.005c2350
call fcn.005c2950
mov ecx, dword [0x8317f4]
add ecx, 0x50
call fcn.005bb7b0
mov edx, dword [eax]
push 4
push 4
push ebx
push eax
mov eax, dword [edx + 0x10c]
call eax
mov ecx, dword [0x8317f4]
add ecx, 0x50
call fcn.005bb7b0
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10c]
push 2
push 2
push ebx
push eax
call edx
mov ecx, dword [0x8317f4]
add ecx, 0x50
call fcn.005bb7b0
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10c]
push ebx
push 3
push ebx
push eax
call edx
lea ecx, [esp + 0x1b]
mov dword [esp + 0x88], 0xffffffff
call fcn.005bb960
mov eax, 1
mov ecx, dword [esp + 0x80]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret