Function at 0x402e00
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x128
mov dword [ebp - 0x30], 0x224
mov dword [ebp - 0xc], 0x89
mov dword [ebp - 0x1c], 0x309
mov dword [ebp - 0x20], 0x155
mov dword [ebp - 0x10], 0x217
mov dword [ebp - 0x38], 0x176
mov dword [ebp - 0xf4], 0x2fb
mov dword [ebp - 0x18], 0x336
mov dword [ebp - 0x88], 0x344
mov dword [ebp - 0x2c], 0x2c4
mov dword [ebp - 0x44], 0x94
mov dword [ebp - 0x3c], 0x281
mov dword [ebp - 0x4c], 0x12e
mov dword [ebp - 0x34], 0x283
mov dword [ebp - 0x50], 0x15a
mov dword [ebp - 0x48], 0x86
mov dword [ebp - 0x24], 0x343
mov dword [ebp - 8], 0x101
mov dword [ebp - 4], 0x2e6
mov dword [ebp - 0x40], 0x37a
mov dword [ebp - 0x14], 0x137
mov dword [ebp - 0x28], 0x59
mov eax, dword [ebp - 0x1c]
sub eax, 0x186
push eax
mov ecx, dword [ebp - 0x88]
add ecx, 0xc
push ecx
mov edx, dword [ebp - 4]
add edx, 0x53
push edx
call fcn.00415fd0
add esp, 0xc
mov dword [ebp - 0x54], 0
jmp 0x402edd
mov eax, dword [ebp - 0x54]
add eax, 1
mov dword [ebp - 0x54], eax
mov ecx, dword [0x512e1c]
sub ecx, 0x225
cmp dword [ebp - 0x54], ecx
jge 0x402ef9
mov edx, dword [ebp - 0x40]
sub edx, 1
mov dword [ebp - 0x40], edx
jmp 0x402ed4
mov dword [ebp - 0x58], 0
jmp 0x402f0b
mov eax, dword [ebp - 0x58]
add eax, 1
mov dword [ebp - 0x58], eax
mov ecx, dword [0x512e10]
sub ecx, 0x18a6b
cmp dword [ebp - 0x58], ecx
jge 0x40303a
mov edx, dword [0x512e18]
cmp edx, dword [ebp - 0x48]
jge 0x40302f
mov eax, dword [ebp - 0x18]
cmp eax, dword [0x512e14]
jge 0x402f46
mov dword [ebp - 0x8c], 1
jmp 0x402f50
mov dword [ebp - 0x8c], 0
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xfc], ecx
mov edx, dword [0x512e18]
mov dword [ebp - 0x100], edx
mov eax, dword [0x512e18]
sub eax, 1
mov dword [0x512e18], eax
mov ecx, dword [ebp - 0xfc]
cmp ecx, dword [ebp - 0x100]
jge 0x402f8c
mov dword [ebp - 0x90], 1
jmp 0x402f96
mov dword [ebp - 0x90], 0
mov edx, dword [0x512e3c]
add edx, 1
mov dword [0x512e3c], edx
mov eax, dword [ebp - 0x38]
and eax, dword [0x512e3c]
or eax, dword [ebp - 0x8c]
or eax, dword [ebp - 0x90]
je 0x40302f
mov ecx, dword [ebp - 0x2c]
cmp ecx, dword [ebp - 0x44]
jge 0x402fd0
mov dword [ebp - 0x98], 1
jmp 0x402fda
mov dword [ebp - 0x98], 0
mov edx, dword [ebp - 0x28]
and edx, dword [0x512e14]
cmp edx, dword [ebp - 0x4c]
jge 0x402ff4
mov dword [ebp - 0x94], 1
jmp 0x402ffe
mov dword [ebp - 0x94], 0
mov eax, dword [ebp - 0x94]
and eax, dword [0x512e24]
xor eax, dword [0x512e08]
or eax, dword [ebp - 0x98]
je 0x40302f
mov ecx, dword [0x512e38]
sub ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x40]
jge 0x40302f
mov edx, dword [ebp - 0x24]
sub edx, 1
mov dword [ebp - 0x24], edx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x402f02
mov dword [ebp - 0x5c], 0
jmp 0x40304c
mov eax, dword [ebp - 0x5c]
add eax, 1
mov dword [ebp - 0x5c], eax
mov ecx, dword [0x512e08]
sub ecx, 0x368
cmp dword [ebp - 0x5c], ecx
jge 0x40306e
mov edx, dword [0x512e38]
sub edx, 1
mov dword [0x512e38], edx
jmp 0x403043
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
mov ecx, dword [0x512e34]
cmp ecx, dword [ebp - 4]
jge 0x40308b
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x60], 0
jmp 0x40309d
mov eax, dword [ebp - 0x60]
add eax, 1
mov dword [ebp - 0x60], eax
mov ecx, dword [ebp - 0x4c]
sub ecx, 0x187ce
cmp dword [ebp - 0x60], ecx
jge 0x40315f
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov edx, dword [ebp - 0xf4]
and edx, dword [ebp - 0x3c]
cmp edx, dword [0x512e34]
jge 0x4030d2
mov dword [ebp - 0x9c], 1
jmp 0x4030dc
mov dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x10]
jge 0x4030f0
mov dword [ebp - 0xa0], 1
jmp 0x4030fa
mov dword [ebp - 0xa0], 0
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x38]
xor edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x9c]
or eax, dword [ebp - 0xa0]
or eax, edx
je 0x40315a
mov ecx, dword [ebp - 0xc]
sub ecx, 1
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x20]
cmp edx, dword [ebp - 0xc]
jge 0x403136
mov dword [ebp - 0xa4], 1
jmp 0x403140
mov dword [ebp - 0xa4], 0
mov eax, dword [0x512e1c]
imul eax, dword [ebp - 0x30]
and eax, dword [ebp - 0xa4]
je 0x40315a
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
jmp 0x403094
mov edx, dword [0x512e40]
sub edx, 0x1b4
push edx
mov eax, dword [ebp - 0x28]
add eax, 0x1db
push eax
call fcn.00406380
add esp, 8
mov ecx, 0x926d
sub ecx, dword [ebp + 0x18]
xor ecx, 0x6e72763e
mov edx, dword [ebp + 0xc]
and edx, 0x8d14
sub edx, 0x183e
xor edx, 0xffffebd2
mov dword [edx + str.sIHHhfbzcIhWhSwfD], ecx
mov dword [ebp - 0x64], 0
jmp 0x4031b8
mov eax, dword [ebp - 0x64]
add eax, 1
mov dword [ebp - 0x64], eax
mov ecx, dword [0x512e2c]
sub ecx, 0x11e
cmp dword [ebp - 0x64], ecx
jge 0x403236
mov edx, dword [ebp - 8]
imul edx, dword [ebp - 4]
mov eax, dword [0x512e08]
sub eax, dword [ebp - 0x4c]
and edx, eax
mov dword [ebp - 0x104], edx
mov ecx, dword [ebp - 4]
sub ecx, 1
mov dword [ebp - 4], ecx
cmp dword [ebp - 0x104], 0
je 0x403231
mov edx, dword [0x512e08]
cmp edx, dword [ebp - 0x3c]
jge 0x403209
mov dword [ebp - 0xa8], 1
jmp 0x403213
mov dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 8]
and eax, dword [ebp - 0xa8]
je 0x403231
mov ecx, dword [0x512e18]
sub ecx, 1
mov dword [0x512e18], ecx
jmp 0x4031af
mov edx, dword [ebp - 0x30]
sub edx, 1
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 4]
jge 0x403253
mov dword [ebp - 0xac], 1
jmp 0x40325d
mov dword [ebp - 0xac], 0
mov ecx, dword [ebp - 0x30]
and ecx, dword [0x512e10]
and ecx, dword [ebp - 0xac]
je 0x403337
mov edx, dword [0x512e08]
cmp edx, dword [ebp - 0x48]
jge 0x403289
mov dword [ebp - 0xb0], 1
jmp 0x403293
mov dword [ebp - 0xb0], 0
mov eax, dword [0x512e18]
cmp eax, dword [ebp - 0xc]
jge 0x4032a9
mov dword [ebp - 0xb4], 1
jmp 0x4032b3
mov dword [ebp - 0xb4], 0
mov ecx, dword [ebp - 8]
sub ecx, 1
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
cmp edx, dword [ebp - 0x20]
jge 0x4032d0
mov dword [ebp - 0xb8], 1
jmp 0x4032da
mov dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0xb0]
and eax, dword [ebp - 0x14]
or eax, dword [ebp - 0xb4]
or eax, dword [ebp - 0xb8]
je 0x403337
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
mov edx, dword [0x512e1c]
add edx, 1
mov dword [0x512e1c], edx
mov eax, dword [ebp - 0x34]
xor eax, dword [0x512e24]
mov ecx, dword [0x512e3c]
sub ecx, dword [ebp - 0x10]
and ecx, eax
and ecx, dword [ebp - 8]
and ecx, dword [0x512e1c]
je 0x403337
mov edx, dword [0x512e24]
add edx, 1
mov dword [0x512e24], edx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x108], eax
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10c], ecx
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x108]
cmp eax, dword [ebp - 0x10c]
jge 0x40336c
mov dword [ebp - 0xbc], 1
jmp 0x403376
mov dword [ebp - 0xbc], 0
mov ecx, dword [0x512e14]
sub ecx, dword [0x512e18]
cmp ecx, dword [0x512e38]
jge 0x403396
mov dword [ebp - 0xc0], 1
jmp 0x4033a0
mov dword [ebp - 0xc0], 0
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x44]
jge 0x4033bd
mov dword [ebp - 0xc4], 1
jmp 0x4033c7
mov dword [ebp - 0xc4], 0
mov ecx, dword [ebp - 0xbc]
or ecx, dword [ebp - 0xc0]
or ecx, dword [ebp - 0xc4]
je 0x4033f2
mov edx, dword [0x512e20]
sub edx, dword [0x512e30]
je 0x4033f2
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x68], 0
jmp 0x403404
mov ecx, dword [ebp - 0x68]
add ecx, 1
mov dword [ebp - 0x68], ecx
mov edx, dword [ebp - 8]
sub edx, 0x187a2
cmp dword [ebp - 0x68], edx
jge 0x403470
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x2c]
jge 0x403429
mov dword [ebp - 0xc8], 1
jmp 0x403433
mov dword [ebp - 0xc8], 0
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp - 0x3c]
jge 0x403447
mov dword [ebp - 0xcc], 1
jmp 0x403451
mov dword [ebp - 0xcc], 0
mov edx, dword [ebp - 0xc8]
and edx, dword [ebp - 0xcc]
je 0x403468
mov eax, dword [ebp - 0x18]
add eax, 1
mov dword [ebp - 0x18], eax
call dword [sym.imp.USER32.dll_CheckRadioButton]
jmp 0x4033fb
mov ecx, dword [ebp + 0x1c]
xor ecx, 0x54f
xor ecx, 0xf7d8
mov edx, dword [ebp + 0x10]
or edx, 0x2f4
add edx, 0x44e0
xor edx, 0x133d0
mov byte [edx + str.sIHHhfbzcIhWhSwfD], cl
mov eax, dword [0x512e18]
sub eax, 1
mov dword [0x512e18], eax
mov ecx, dword [0x512e20]
add ecx, 0x53
push ecx
mov edx, dword [ebp - 0x34]
sub edx, 0x26d
push edx
mov eax, dword [0x512e30]
add eax, 0x59
push eax
mov ecx, dword [0x512e30]
sub ecx, 0x139
push ecx
mov edx, dword [ebp - 0x30]
add edx, 0x1b9
push edx
mov eax, dword [ebp - 0x50]
add eax, 0x18c
push eax
call fcn.004205e0
add esp, 0x18
mov ecx, dword [ebp + 0xc]
xor ecx, 0xb9d6
xor ecx, 0x6c6cb98b
mov edx, dword [ebp + 0x2c]
or edx, 0x2fa7
sub edx, 0xcbc4
xor edx, 0xfffff3fb
mov dword [edx + str.sIHHhfbzcIhWhSwfD], ecx
mov dword [ebp - 0x6c], 0
jmp 0x403528
mov eax, dword [ebp - 0x6c]
add eax, 1
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0x187d8
cmp dword [ebp - 0x6c], ecx
jge 0x403547
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x40351f
mov dword [ebp - 0x70], 0
jmp 0x403559
mov eax, dword [ebp - 0x70]
add eax, 1
mov dword [ebp - 0x70], eax
mov ecx, dword [0x512e10]
sub ecx, 0x18a6b
cmp dword [ebp - 0x70], ecx
jge 0x403586
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
mov edx, dword [ebp - 0x34]
cmp edx, dword [0x512e20]
jge 0x403584
mov eax, dword [ebp - 0x2c]
sub eax, 1
mov dword [ebp - 0x2c], eax
jmp 0x403550
mov ecx, dword [ebp + 0x18]
or ecx, 0xbdaa
xor ecx, 0x323393df
mov edx, dword [ebp + 0x2c]
and edx, 0x21e3
add edx, 0x6467
xor edx, 0x4552
xor edx, 0xc35f
mov dword [edx + str.sIHHhfbzcIhWhSwfD], ecx
mov eax, dword [ebp - 0xc]
add eax, 1
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp + 0x18]
and ecx, 0xffffb882
sub ecx, 0xba15
xor ecx, 0xffff7d4a
mov edx, 0x644c
sub edx, dword [ebp + 8]
xor edx, 0xffffea98
mov byte [edx + str.sIHHhfbzcIhWhSwfD], cl
mov eax, dword [0x512e28]
sub eax, 0xc
push eax
mov ecx, dword [0x512e18]
add ecx, 0x13b
push ecx
call fcn.00406380
add esp, 8
mov edx, dword [0x512e18]
cmp edx, dword [0x512e1c]
jge 0x403620
mov dword [ebp - 0xd0], 1
jmp 0x40362a
mov dword [ebp - 0xd0], 0
mov eax, dword [0x512e3c]
and eax, dword [ebp - 0xd0]
je 0x403640
mov ecx, dword [ebp - 0x14]
sub ecx, 1
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x74], 0
jmp 0x403652
mov edx, dword [ebp - 0x74]
add edx, 1
mov dword [ebp - 0x74], edx
mov eax, dword [ebp - 0x48]
sub eax, 0x85
cmp dword [ebp - 0x74], eax
jge 0x403773
mov ecx, dword [ebp - 0xc]
and ecx, dword [ebp - 0x40]
mov dword [ebp - 0x110], ecx
mov edx, dword [0x512e3c]
mov dword [ebp - 0x114], edx
mov eax, dword [ebp - 0xc]
add eax, 1
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x110]
cmp ecx, dword [ebp - 0x114]
jge 0x40369e
mov dword [ebp - 0xdc], 1
jmp 0x4036a8
mov dword [ebp - 0xdc], 0
mov edx, dword [ebp - 0x14]
imul edx, dword [0x512e40]
cmp edx, dword [ebp - 0x38]
jge 0x4036c3
mov dword [ebp - 0xd4], 1
jmp 0x4036cd
mov dword [ebp - 0xd4], 0
mov eax, dword [0x512e08]
or eax, dword [0x512e34]
cmp eax, dword [0x512e14]
jge 0x4036ec
mov dword [ebp - 0xd8], 1
jmp 0x4036f6
mov dword [ebp - 0xd8], 0
mov ecx, dword [ebp - 0xd4]
and ecx, dword [ebp - 0xd8]
or ecx, dword [ebp - 0xdc]
je 0x40376e
mov edx, dword [ebp - 0x88]
cmp edx, dword [ebp - 0x20]
jge 0x40376e
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x118], eax
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x11c], ecx
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x11c]
jge 0x40374a
mov dword [ebp - 0xe0], 1
jmp 0x403754
mov dword [ebp - 0xe0], 0
mov ecx, dword [0x512e18]
xor ecx, dword [ebp - 0x3c]
and ecx, dword [ebp - 0xe0]
je 0x40376e
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
jmp 0x403649
mov eax, 0xaeb9
sub eax, dword [ebp + 0x2c]
sub eax, 0x541e
xor eax, 0xffffa64d
mov ecx, dword [ebp + 0x1c]
or ecx, 0x56a7
add ecx, 0x980a
or ecx, 0x6997
xor ecx, 0x1efb9
mov byte [ecx + str.sIHHhfbzcIhWhSwfD], al
mov edx, dword [ebp - 8]
cmp edx, dword [ebp - 0x14]
jge 0x4037ba
mov dword [ebp - 0xe4], 1
jmp 0x4037c4
mov dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x10]
xor eax, dword [ebp - 0x18]
cmp eax, dword [0x512e18]
jge 0x4037de
mov dword [ebp - 0xe8], 1
jmp 0x4037e8
mov dword [ebp - 0xe8], 0
mov ecx, dword [0x512e20]
and ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x20]
or ecx, edx
or ecx, dword [ebp - 0xe8]
je 0x40380d
mov eax, dword [ebp - 0x44]
add eax, 1
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [0x512e20]
jge 0x403824
mov dword [ebp - 0xec], 1
jmp 0x40382e
mov dword [ebp - 0xec], 0
mov edx, dword [0x512e1c]
mov dword [ebp - 0x120], edx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x124], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 1
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x120]
cmp edx, dword [ebp - 0x124]
jge 0x403866
mov dword [ebp - 0xf0], 1
jmp 0x403870
mov dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0xec]
and eax, dword [ebp - 0xf0]
xor eax, dword [ebp - 0x24]
je 0x40388a
mov ecx, dword [ebp - 0x10]
sub ecx, 1
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp + 0x2c]
and edx, 0x2e5b
or edx, 0xafaa
or edx, 0x5f92
xor edx, 0xffba
mov eax, dword [ebp + 0xc]
and eax, 0x43e6
xor eax, 0x406e
mov byte [eax + str.sIHHhfbzcIhWhSwfD], dl
mov ecx, dword [ebp - 0x48]
add ecx, 0x25
push ecx
mov edx, dword [0x512e18]
sub edx, 0x1a
push edx
mov eax, dword [0x512e28]
add eax, 0x18a
push eax
mov ecx, dword [ebp - 0x4c]
add ecx, 0x19
push ecx
call fcn.00421ad0
add esp, 0x10
mov dword [ebp - 0x78], 0
jmp 0x4038f5
mov edx, dword [ebp - 0x78]
add edx, 1
mov dword [ebp - 0x78], edx
mov eax, dword [ebp - 0xf4]
sub eax, 0x1899b
cmp dword [ebp - 0x78], eax
jge 0x40391c
mov ecx, dword [0x512e24]
add ecx, 1
mov dword [0x512e24], ecx
call dword [sym.imp.CRYPT32.dll_CertCloseStore]
jmp 0x4038ec
mov edx, dword [ebp + 8]
xor edx, 0x8823
xor edx, 0xf1ae
mov eax, dword [ebp + 8]
xor eax, 0x38f2
or eax, 0x9730
xor eax, 0xd765
mov byte [eax + str.sIHHhfbzcIhWhSwfD], dl
mov dword [ebp - 0x7c], 0
jmp 0x403955
mov ecx, dword [ebp - 0x7c]
add ecx, 1
mov dword [ebp - 0x7c], ecx
mov edx, dword [0x512e30]
sub edx, 0x2e5
cmp dword [ebp - 0x7c], edx
jge 0x403971
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x40394c
mov dword [ebp - 0x80], 0
jmp 0x403983
mov ecx, dword [ebp - 0x80]
add ecx, 1
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x216
cmp dword [ebp - 0x80], edx
jge 0x40399c
mov eax, dword [ebp - 0xc]
add eax, 1
mov dword [ebp - 0xc], eax
jmp 0x40397a
mov eax, str.sIHHhfbzcIhWhSwfD
jmp 0x403a5c
mov esp, ebp
pop ebp
ret