Function at 0x42a900
Capabilities:
Enumerate gui resources
Terminate process

Disassembly:
sub esp, 0x734
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x72c], eax
mov eax, dword [0x4e6030]
push ebx
push ebp
push esi
push edi
push 0x2762
push eax
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
mov ebp, eax
push 0
push 0
push 0x1004
push ebp
call ebx
mov esi, eax
xor edi, edi
test esi, esi
jle 0x42a965
nop dword [eax]
push 2
push edi
push 0x102c
push ebp
call ebx
cmp eax, 2
je 0x42a9c2
inc edi
cmp edi, esi
jl 0x42a950
mov edx, 0x4b3f94
mov ecx, str.STRT
call fcn.00478640
push eax
lea eax, [esp + 0x534]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0x530]
mov edx, 0x4b3f64
push 0x30
push eax
mov ecx, str.STRT
call fcn.00478640
push eax
push dword [esp + 0x20]
call dword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
mov ecx, dword [esp + 0x73c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0048ea75
add esp, 0x734
ret
cmp edi, esi
jge 0x42a965
xor eax, eax
push 0x206
push eax
mov word [esp + 0x330], ax
lea eax, [esp + 0x332]
push eax
call fcn.0048fb10
add esp, 0xc
mov dword [esp + 0x24], 1
lea eax, [esp + 0x328]
mov dword [esp + 0x34], 0x104
mov dword [esp + 0x30], eax
lea eax, [esp + 0x1c]
push eax
push edi
push 0x1073
push ebp
call ebx
cmp dword [esp + 0x18], 0
mov ecx, str.STRT
mov edx, 0x4b3f8c
je 0x42aa25
mov edx, 0x4b3fd8
call fcn.00478640
mov ebp, dword [sym.imp.SHLWAPI.dll_StrCpyW]
push eax
lea eax, [esp + 0x124]
push eax
call ebp
mov esi, dword [sym.imp.SHLWAPI.dll_StrCatW]
lea eax, [esp + 0x328]
push eax
lea eax, [esp + 0x124]
push eax
call esi
mov edx, 0x4b3fd0
mov ecx, str.STRT
call fcn.00478640
push eax
lea eax, [esp + 0x124]
push eax
call esi
push 0x24
mov edx, 0x4b32e4
mov ecx, str.STRT
call fcn.00478640
mov esi, dword [sym.imp.USER32.dll_MessageBoxW]
push eax
lea eax, [esp + 0x128]
push eax
push dword [0x4e6030]
call esi
cmp eax, 6
jne 0x42a9a7
push 0xc4
lea eax, [esp + 0x60]
mov dword [esp + 0x5c], 0x30
push 0
push eax
call fcn.0048fb10
add esp, 0xc
mov dword [esp + 0x24], 0
lea eax, [esp + 0x58]
mov dword [esp + 0x34], 0x64
mov dword [esp + 0x30], eax
lea eax, [esp + 0x1c]
push eax
push edi
push 0x1073
push 0x2762
push dword [0x4e6030]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebx
lea eax, [esp + 0x58]
push eax
call fcn.00494a85
add esp, 4
cmp dword [esp + 0x18], 0
jne 0x42ab53
mov ecx, eax
call fcn.00475620
test eax, eax
jne 0x42abdd
mov edx, 0x4b4014
mov ecx, str.STRT
call fcn.00478640
push eax
lea eax, [esp + 0x124]
push eax
call ebp
push 0x30
mov edx, 0x4b4024
mov ecx, str.STRT
call fcn.00478640
push eax
lea eax, [esp + 0x128]
push eax
push dword [esp + 0x20]
call esi
jmp 0x42abdd
mov esi, eax
push esi
push 0
push 0x100001
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
test edi, edi
je 0x42ab9f
push esi
push 0x4755e0
call dword [sym.imp.USER32.dll_EnumWindows]
push 0xbb8
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x42ac0f
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push edi
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
jne 0x42abdd
mov edx, 0x4b4014
mov ecx, str.STRT
call fcn.00478640
push eax
lea eax, [esp + 0x124]
push eax
call ebp
push 0x30
mov edx, 0x4b4024
mov ecx, str.STRT
call fcn.00478640
push eax
lea eax, [esp + 0x128]
push eax
push dword [esp + 0x20]
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x2762
push dword [0x4e6030]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edx, 1
mov ecx, eax
call fcn.00474e50
mov eax, 1
jmp 0x42a9a9
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x42abdd