Function at 0x402da0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
push edi
or ecx, 0x2b6
shl ax, 0x7a
xor esi, esi
imul edi
xor edi, 0x167
rcl cx, 0x66
and edx, esi
xor edi, esi
movzx esi, cx
rcl dx, 0xe0
mul bx
shl ax, 0x67
dec edi
ror ax, 0x86
imul eax
rcr esi, 0xf6
dec di
or ebx, ebx
sub esi, ecx
add bx, di
shr edi, 0x59
imul di
rcl esi, 0x6a
rcl cx, 0xb9
imul ax
imul bx
imul ax
shr esi, 0x7c
rol eax, 0xaf
mov ecx, 0x115
mul di
sub edx, edi
ror si, 0xb7
imul eax
and esi, 0x82
mul si
mov esi, 0x14d
inc di
inc cx
mul esi
rcl ax, 0xb4
dec di
rcr ebx, 0x1c
xor edx, esi
rcr edx, 0xd1
rol bx, 0x28
inc bx
add di, si
add ebx, 0x15f
mul dx
imul bx
mul bx
xor edx, 0x3c8
shr dx, 0x74
xor ecx, 0x2d9
movzx edx, bl
dec di
shr edx, 0x32
add ebx, 0x108
inc si
shl cx, 0x35
rcl edx, 0x41
inc di
inc dx
imul ecx
mul edi
rcr esi, 0x4d
rcr cx, 0xfa
ror si, 0x7a
dec edi
inc di
dec bx
mul dx
dec ax
shr di, 0x23
add edx, eax
shr di, 0xe8
mov cx, 0x365
xor ecx, 0x192
je 0x402eb3
cmp esi, 0xb
je 0x402f18
rol di, 0xfe
inc cx
jmp 0x402ed2
inc cx
mul si
rol esi, 0x53
mul edx
and esi, 0x2d3
imul ecx
rcl ax, 0xe7
shl dx, 0x46
shl ebx, 6
dec bx
inc dx
mul cx
rcr ax, 0x9a
shl edi, 0x55
inc ebx
rol edx, 0x61
imul cx
rcl cx, 0xce
ror ebx, 0xe3
sub edx, 0x1a6
dec ax
inc edi
rol bx, 0x4c
add esi, ebx
je 0x402f18
rcr ax, 0x7a
shr ax, 0xb2
rcl esi, 0x62
dec edi
mov cx, 0xc9
rol si, 0x35
mul cx
and ecx, edx
jmp 0x402f3d
rcl ecx, 0x22
imul edi
sub di, 0x328
or bx, bx
ror dx, 0x1e
mov eax, esi
shl bx, 0x7c
movsx edx, di
or eax, 0x1c7
or ecx, 0x2e6
and ecx, 0x199
je 0x402f4d
mov di, cx
jmp 0x402fd6
ror bx, 0x1c
sub edx, 0x50
shl ebx, 0x92
rol bx, 0xaa
or ax, 0x1ec
imul bx
imul eax
dec dx
rcr esi, 0x80
movsx esi, cx
sub eax, 0x9a
and di, 0x46
shl eax, 0x9c
and dx, 0x340
add edi, 0x196
shr bx, 0x35
dec eax
rcr eax, 0xd7
rol edi, 5
rol di, 0xcc
shr si, 0x60
sub ax, 0x2d8
movsx ebx, bl
rol esi, 0x41
rcr eax, 0xfa
rcl di, 0x82
or edx, 0x368
and edi, 0x21
ror edx, 6
dec si
shl si, 0xd2
mov ebx, 0x303
sub eax, ecx
shr ax, 0x36
shr edx, 0x91
imul ebx
add eax, ebx
inc si
xor ecx, eax
shr esi, 0xc6
and esi, ebx
inc dx
rol cx, 0xe5
inc eax
or dx, dx
imul ecx
dec eax
imul bx
or ax, 0x248
movzx eax, ax
mul di
shr esi, 0xdf
imul ax
movsx esi, cl
imul ax
ror edi, 0x65
rcr edi, 0xd7
rol dx, 0x36
imul eax
shl edx, 0x24
dec cx
shr bx, 0x77
rol si, 0x8f
shr ax, 0x5c
mul bx
and ebx, 0x88
shl ebx, 0x95
shr bx, 0x91
mul ecx
xor ax, 0x4e
imul ecx
imul edx
mov ecx, 0x366
sub ecx, 0x282
xor ecx, ecx
inc si
inc eax
mov si, ax
rol di, 0xc2
dec dx
mov eax, 0x1a1
cmp eax, 0x24
ja 0x403056
call 0x560eb24
inc ebx
add byte [ecx + 0x436e30], bh
mov edx, str.Morning_is_that_up_your_powerful
mov ecx, 0x436e30
call fcn.00403600
mov edi, eax
mov ecx, dword [edi]
mov ecx, dword [ecx + 4]
mov ecx, dword [ecx + edi + 0x30]
mov esi, dword [ecx + 4]
mov ecx, esi
mov dword [ebp - 4], esi
mov edx, dword [esi]
call dword [edx + 4]
lea eax, [ebp - 8]
push eax
call fcn.00404110
add esp, 4
mov ecx, eax
mov edx, dword [eax]
push 0xa
call dword [edx + 0x30]
movzx ebx, ax
test esi, esi
je 0x4030ac
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 8]
test eax, eax
je 0x4030ac
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx]
push ebx
mov ecx, edi
call fcn.00403ce0
mov ecx, edi
call fcn.00403be0
mov edx, str.dsujiSYvtdxvyudsy
mov ecx, 0x436d70
call fcn.00403600
mov edi, eax
mov ecx, dword [edi]
mov ecx, dword [ecx + 4]
mov ecx, dword [ecx + edi + 0x30]
mov esi, dword [ecx + 4]
mov ecx, esi
mov dword [ebp - 4], esi
mov edx, dword [esi]
call dword [edx + 4]
lea eax, [ebp - 8]
push eax
call fcn.00404110
add esp, 4
mov ecx, eax
mov edx, dword [eax]
push 0xa
call dword [edx + 0x30]
movzx ebx, ax
test esi, esi
je 0x403111
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 8]
test eax, eax
je 0x403111
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx]
push ebx
mov ecx, edi
call fcn.00403ce0
mov ecx, edi
call fcn.00403be0
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x436660], eax
call fcn.00402200
push 0
call dword [sym.imp.USER32.dll_WindowFromDC]
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
call fcn.00402aa0
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret