Function at 0x4029e4
Capabilities:
Authenticate hmac

Disassembly:
sub esi, 2
mov eax, 0x36
add eax, 2
xor eax, ebx
lea edi, [0x7f]
inc edi
or si, si
push 0xc6
pop ecx
push ecx
mov dword [0x417112], 0
mov esi, dword [0x417112]
push esi
mov edx, 0x844133
mov ebx, 0x434fcf
mov ecx, ebx
sub edx, ecx
call dword [edx]
lea ebx, [eax + 0x417b53]
rol ebx, 1
add ebx, dword [0x417def]
sub ebx, esi
add ebx, edi
cmp ebx, 0x61f
jne 0x40112e
sub ebx, dword [0x4183ae]
add ebx, esi
rol ebx, 8
shr ebx, 1
sub ebx, dword [0x417126]
sub ebx, 0xc80
add dword [0x418305], ebx
jmp 0x4010c9
mov edx, eax
lea ebx, [edx + 0x5a]
mov edx, 0
push edx
xor edx, edx
push edx
call dword [sym.imp.user32.dll_LoadCursorW]
xor ebx, ebx
push ebx
mov dword [0x418193], 0
mov ebx, dword [0x418193]
push ebx
mov edi, 0x5c
push edi
xor ebx, ebx
push ebx
xor esi, esi
push esi
xor ebx, ebx
push ebx
mov esi, dword [sym.imp.KERNEL32.DLL_SearchPathA]
call esi
or eax, eax
jne 0x4010dc
call fcn.0040114c
sub esi, 1
add edi, 1
sub ebx, 1
mov edx, edi
inc ebx
mov eax, edx
sub dword [0x418678], eax
dec eax
add eax, dword [0x418543]
ror eax, 1
dec eax
rol eax, 1
sub eax, esi
mov edx, eax
sub edx, 0x8eb
jae 0x4011d8
sub dword [0x4188ac], edx
add dword [0x418365], edx
call 0x40119d
add eax, 2
sub esi, 1
lea ebx, [3]
mov eax, esi
mov edx, 0x5a
dec esi
mov edx, 0
sub edx, ebx
sub edx, dword [0x417a9f]
add edx, edx
add dword [0x4186fe], edx
dec edx
rol edx, 1
dec edx
sub edx, ebx
add edx, 0xd30
jne 0x40122b
sub edx, 0xf9b
jbe 0x40122b
shr edx, 7
add dword [0x417683], edx
mov dl, 0x9f
mov bh, 0x8f
xor al, 0x26
fist dword [esp + ebx*8 + 4]
pop ebp
sub eax, 0x9cbb673b
add byte [eax], al
add byte [ecx + 0x2c7], al
add byte [ebx - 0x40b5d332], al
loope 0x401254
add byte [eax], al
shl edi, 1
sub edi, dword [0x41723a]
add cl, dl
out 0x2b, eax
cmp eax, 0x41723a
inc edi
rol edi, 8
add dword [0x4178cc], edi
add edi, 0xb68
jne 0x401271
add edi, esi
sub edi, edx
sub edi, 0xcf8
ror edi, 1
sub dword [0x418703], edi
add dword [0x4187a0], edi
call 0x401241
lea eax, [0xa]
bswap esi
add edx, 2
dec ebx
add edi, 1
lea ebx, [5]
push 9
pop edx
push edx
push 0x21279b
pop ecx
add ecx, 0x205684
push ecx
mov ebx, 7
push ebx
mov ebx, 0x3272e7
mov edi, ebx
mov esi, 0xe7e2d
add edi, esi
push dword [edi]
pop dword [0x418714]
mov edi, dword [0x418714]
call edi
or eax, eax
jne 0x401150
jmp 0x40128c
mov eax, 0x6c
xor ebx, dword [0x418b54]
sub edi, ebx
not ebx
dec eax
xor edx, edx
push edx
mov edx, 0
mov ecx, edx
push ecx
call dword [sym.imp.user32.dll_LoadCursorW]
push 0x16f12f
pop edx
mov dword [0x417716], 0x2a804f
add edx, dword [0x417716]
push edx
xor edi, edi
push edi
mov eax, 0x46df35
mov ebx, 0x5edb9
mov edx, ebx
sub eax, edx
call dword [eax]
mov dword [0x41771e], eax
or eax, eax
je 0x40160b
or ebx, 0x64
leave
ret
push ebp
pop eax
push eax
mov ebp, esp
sub esp, 0x44
push edi
push esi
xor esi, esi
add esi, 0x217
jns 0x4029fe
add esi, 0x7e2
inc esi
rol esi, 5
add esi, eax
sub dword [0x417c15], esi
sub esi, dword [0x4176a6]
mov dword [ebp - 0x10], esi
sub esi, 0x620
ror esi, 1
sub dword [0x41806d], esi
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x4180ba
push 0x80000001
mov eax, 0x2078ba
shl eax, 1
call dword [eax]
add ebx, edi
mov dword [ebp - 0x1c], edi
lea eax, [0x417b09]
push eax
sub ebx, eax
add edi, ebx
push ebx
lea eax, [0x417559]
push eax
call fcn.00401b3c
mov dword [0x418698], eax
push 0x48dee
lea eax, [0x41742f]
push eax
push 0
lea eax, [0x4178fe]
push eax
push 0
call fcn.0040183c
mov dword [ebp - 0x28], eax
or eax, eax
jne 0x402a88
dec ebx
push 0
push 0x1e757
call fcn.00401950
mov dword [ebp - 8], eax
or eax, eax
jne 0x402a9f
or eax, 0x43
dec edi
push 0
mov ebx, dword [sym.imp.user32.dll_GetDC]
call ebx
mov edi, dword [sym.imp.user32.dll_GetActiveWindow]
call edi
or eax, eax
jne 0x40114e
mov dword [0x417f2d], 0
mov ecx, dword [0x417f2d]
push ecx
mov esi, pe_nt_image_headers32
mov edx, esi
push edx
push 3
pop ebx
push ebx
mov dword [ebp - 0x34], 0
mov edx, dword [ebp - 0x34]
push edx
mov dword [ebp - 0x18], 2
mov ebx, dword [ebp - 0x18]
push ebx
push 0
pop eax
push eax
mov dword [0x417c42], 0
mov ecx, dword [0x417c42]
push ecx
mov ecx, 0x245311
mov edx, ecx
add edx, 0x1c9d0f
push dword [edx]
pop edx
call edx
mov dword [ebp - 0xc], eax
or eax, eax
jne 0x402b24
sub esi, edi
mov esi, eax
push 0
pop ebx
push ebx
mov dword [ebp - 0x14], 0xd6
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, 5
mov esi, ecx
push esi
mov edi, 0x8a0a49
mov eax, edi
mov esi, 0x4918ed
sub eax, esi
call dword [eax]
or eax, eax
jne 0x4015b4
push 0xa8722
push 0
push 0xb3969
push 0xd1bb4
push edi
call fcn.00401a88
push 0
push 0xcc970
call fcn.0040173c
mov dword [0x41804a], eax
mov dword [0x417fbb], 0
mov edi, dword [0x417fbb]
push edi
mov dword [ebp - 4], 7
mov eax, dword [ebp - 4]
push eax
mov dword [ebp - 0x10], 0x2078a0
mov ebx, dword [ebp - 0x10]
shl ebx, 1
call dword [ebx]
or eax, eax
jne 0x401292
push 0xb5f4b
lea eax, [0x41857f]
push eax
push esi
push 0
add esi, ebx
or bl, bl
inc eax
add ebx, eax
add esi, eax
inc esi
inc edi
push 0xfa9d2
call fcn.004016d4
mov dword [ebp - 0x20], eax
or eax, eax
jne 0x402bdf
add esi, edi
mov edi, esi
push 0
push 0x20
push 2
push 0
push 0
push 0x40000000
push 0
mov esi, dword [sym.imp.KERNEL32.DLL_CreateFileA]
call esi
mov esi, 0x7d5
shl esi, 1
sub esi, dword [0x4183ca]
add dword [0x417eae], esi
sub esi, 0xf20
rol esi, 2
sub esi, 0x396
ror esi, 1
sub esi, 0x956
shr esi, 6
add esi, edi
add dword [str.1049], esi
sub eax, 0xffffffff
push eax
push eax
push 0x4d
push eax
push eax
push 0x207826
pop ebx
shl ebx, 1
call dword [ebx]
push 0xcb0
pop ebx
mov edi, ebx
inc edi
sub edi, esi
mov dword [ebp - 0x34], edi
ror edi, 6
dec edi
shl edi, 4
cmp edi, 0xcbc
jne 0x402c61
sub edi, eax
dec edi
add edi, 0xd67
add dword [0x4174e3], edi
sub eax, 0x15c4f32
mov edx, 0
add edx, 0x132
add edx, 0xef3
jbe 0x402c8c
sub edx, 0x1d9
dec edx
rol edx, 5
shr edx, 3
sub edx, ebx
dec edx
shr edx, 4
add edx, 0x725
add dword [0x4171e0], edx
sub eax, 0xfe638381
mov dword [0x417827], eax
mov dword [ebp - 0x40], 0
mov edx, dword [ebp - 0x40]
push edx
mov dword [ebp - 0x28], 0xe6
mov edx, dword [ebp - 0x28]
push edx
mov edx, 1
mov esi, edx
push esi
mov eax, 0x2078ae
shl eax, 1
call dword [eax]
mov dword [0x41860f], eax
push dword [0x417827]
xor ebx, ebx
add dword [0x417c5b], ebx
sub ebx, dword [0x4185ee]
mov ecx, ebx
shr ecx, 1
mov dword [ebp - 0x2c], ecx
inc ecx
sub ecx, dword [0x41740f]
inc ecx
mov dword [ebp - 0x1c], ecx
shr ecx, 1
add dword [0x41709d], ecx
ret