Function at 0x430168
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
push ebx
push esi
push edi
push 0x515e00
push 0x513d38
push 0x5163d4
mov esi, ecx
push 0x5163cc
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
call fcn.004d4518
mov eax, dword [eax + 4]
xor ebx, ebx
push ebx
push 0x515dcc
push 0x513f88
mov ecx, eax
call fcn.004d20c4
push 0x515648
push 0x51563c
push 0x51562c
call fcn.004441fa
add esp, 0xc
cmp dword [esi + 0x90], ebx
mov edi, 0x515e18
je 0x430262
call fcn.004d4518
push dword [esi + 0x468]
mov eax, dword [eax + 4]
mov ecx, eax
push 0x515c58
push edi
call fcn.004d20c4
cmp dword [esi + 0x468], ebx
je 0x430203
push 9
mov ecx, esi
call fcn.004cd613
mov dword [esi + 0x468], ebx
cmp dword [esi + 0xe4], ebx
je 0x430262
call fcn.004d4518
mov eax, dword [eax + 4]
push 1
push 0x5160a4
push 0x513f88
mov ecx, eax
call fcn.004d46fd
test eax, eax
je 0x430262
call fcn.004d4518
push dword [esi + 0x5c]
mov eax, dword [eax + 4]
mov ecx, eax
push 0x515bec
push 0x513f88
call fcn.004d20c4
call fcn.004d4518
push dword [esi + 0x60]
mov eax, dword [eax + 4]
mov ecx, eax
push 0x515bd4
push 0x513f88
call fcn.004d20c4
mov eax, dword [esi + 0x430]
cmp eax, ebx
je 0x430273
push eax
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
mov eax, dword [esi + 0x6c]
cmp eax, ebx
je 0x430284
push eax
call fcn.004ce4b9
pop ecx
mov dword [esi + 0x6c], ebx
call fcn.004d4518
push dword [esi + 0x90]
mov eax, dword [eax + 4]
mov ecx, eax
push 0x5163c0
push 0x513f88
call fcn.004d20c4
cmp dword [esi + 0x90], ebx
je 0x4303cb
mov eax, dword [esi + 0x74]
cmp eax, ebx
je 0x43033d
cmp dword [eax + 0x44], ebx
je 0x4302ea
call fcn.004d4518
mov eax, dword [eax + 4]
push ebx
push 0x515c4c
push edi
mov ecx, eax
call fcn.004d20c4
call fcn.004d4518
mov ecx, dword [esi + 0x74]
mov eax, dword [eax + 4]
push dword [ecx + 0x44]
push 0x5163b8
jmp 0x430335
call fcn.004d4518
mov ecx, dword [esi + 0x74]
mov eax, dword [eax + 4]
push dword [ecx + 0x44]
mov ecx, eax
push 0x5163b8
push edi
call fcn.004d20c4
call fcn.004d4518
mov eax, dword [eax + 4]
push ebx
push 0x515c4c
push edi
mov ecx, eax
call fcn.004d46fd
cmp eax, 7
mov dword [ebp - 4], eax
jge 0x43033d
call fcn.004d4518
mov ecx, dword [ebp - 4]
mov eax, dword [eax + 4]
inc ecx
push ecx
push 0x515c4c
push edi
mov ecx, eax
call fcn.004d20c4
mov eax, dword [esi + 0x70]
cmp eax, ebx
je 0x4303cb
cmp dword [eax + 0x44], ebx
je 0x430378
call fcn.004d4518
mov eax, dword [eax + 4]
push ebx
push 0x515c3c
push edi
mov ecx, eax
call fcn.004d20c4
call fcn.004d4518
mov ecx, dword [esi + 0x70]
mov eax, dword [eax + 4]
push dword [ecx + 0x44]
push 0x5163ac
jmp 0x4303c3
call fcn.004d4518
mov ecx, dword [esi + 0x70]
mov eax, dword [eax + 4]
push dword [ecx + 0x44]
mov ecx, eax
push 0x5163ac
push edi
call fcn.004d20c4
call fcn.004d4518
mov eax, dword [eax + 4]
push ebx
push 0x515c3c
push edi
mov ecx, eax
call fcn.004d46fd
cmp eax, 7
mov dword [ebp - 4], eax
jge 0x4303cb
call fcn.004d4518
mov ecx, dword [ebp - 4]
mov eax, dword [eax + 4]
inc ecx
push ecx
push 0x515c3c
push edi
mov ecx, eax
call fcn.004d20c4
mov ecx, esi
call fcn.004323f2
cmp eax, ebx
mov dword [ebp - 4], eax
je 0x430491
cmp dword [eax + 0x1c], ebx
je 0x430491
call fcn.004d4518
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xc], eax
call fcn.00420c6d
mov ecx, dword [ebp - 0xc]
push eax
push 0x515dc0
push 0x515db8
call fcn.004d20c4
call fcn.004d4518
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xc], eax
call fcn.00420ce0
mov ecx, dword [ebp - 0xc]
movsx eax, ax
push eax
push 0x515dac
push 0x515db8
call fcn.004d20c4
cmp dword [esi + 0xe4], ebx
jne 0x43045f
call fcn.004d4518
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 4]
mov dword [ebp - 0xc], eax
call fcn.00420c19
mov ecx, dword [ebp - 0xc]
push eax
push 0x515c64
push edi
call fcn.004d20c4
call fcn.004d4518
mov ecx, dword [ebp - 4]
mov edi, dword [eax + 4]
call fcn.00420c2f
push eax
push 0x515c6c
push 0x513f88
mov ecx, edi
call fcn.004d20c4
mov ecx, dword [ebp - 4]
call fcn.00420d3b
mov ecx, dword [ebp - 4]
call fcn.00421c1c
cmp dword [esi + 0x440], ebx
je 0x4304a4
push 0xe
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_UnregisterHotKey]
call fcn.004d4518
push dword [esi + 0xe4]
mov eax, dword [eax + 4]
mov ecx, eax
push 0x515b6c
push 0x515b64
call fcn.004d20c4
push dword [esi + 0x1c]
mov edi, dword [sym.imp.USER32.dll_IsWindowVisible]
call edi
neg eax
sbb eax, eax
inc eax
cmp dword [esi + 0xe4], ebx
mov dword [ebp - 0xc], eax
jne 0x4304ef
cmp eax, ebx
jne 0x4304ef
mov eax, dword [esi + 0x42c]
push dword [eax + 0x1c]
call edi
jmp 0x4304f5
mov eax, dword [esi + 0xf8]
lea edi, [esi + 0xf8]
mov dword [edi], eax
call fcn.004d4518
push dword [edi]
mov eax, dword [eax + 4]
mov edi, 0x5163a0
mov ecx, eax
push 0x515cb0
push edi
call fcn.004d20c4
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [esi + 0x42c]
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_GetWindowRect]
call fcn.004d4518
push dword [ebp - 0x1c]
mov eax, dword [eax + 4]
mov ebx, 0x51566c
mov ecx, eax
push ebx
push edi
call fcn.004d20c4
call fcn.004d4518
push dword [ebp - 0x18]
mov eax, dword [eax + 4]
mov ecx, eax
push 0x515668
push edi
call fcn.004d20c4
call fcn.004d4518
push dword [ebp - 0x10]
mov eax, dword [eax + 4]
mov ecx, eax
push 0x515658
push edi
call fcn.004d20c4
call fcn.004d4518
push dword [ebp - 0x14]
mov eax, dword [eax + 4]
mov ecx, eax
push 0x515660
push edi
call fcn.004d20c4
cmp dword [esi + 0xe4], 0
jne 0x4305ad
cmp dword [ebp - 0xc], 0
jne 0x4305ad
mov eax, dword [esi + 0x428]
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_IsWindowVisible]
jmp 0x4305b3
mov eax, dword [esi + 0xf4]
lea edi, [esi + 0xf4]
mov dword [edi], eax
call fcn.004d4518
push dword [edi]
mov eax, dword [eax + 4]
mov edi, 0x513fe8
mov ecx, eax
push 0x515cb0
push edi
call fcn.004d20c4
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [esi + 0x428]
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esi + 0x428]
cmp dword [eax + 0x74], 0
je 0x430626
call fcn.004d4518
mov ecx, dword [ebp - 0x14]
mov eax, dword [eax + 4]
sub ecx, dword [ebp - 0x1c]
push ecx
push 0x513ff4
push edi
mov ecx, eax
call fcn.004d20c4
mov eax, dword [esi + 0x428]
add eax, 0x64
push eax
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.USER32.dll_CopyRect]
call fcn.004d4518
mov ecx, dword [esi + 0x428]
mov eax, dword [eax + 4]
push dword [ecx + 0x74]
mov ecx, eax
push 0x516394
push 0x513fdc
call fcn.004d20c4
call fcn.004d4518
push dword [ebp - 0x1c]
mov eax, dword [eax + 4]
mov ecx, eax
push ebx
push edi
call fcn.004d20c4
call fcn.004d4518
push dword [ebp - 0x18]
mov eax, dword [eax + 4]
mov ecx, eax
push 0x515668
push edi
call fcn.004d20c4
call fcn.004d4518
push dword [ebp - 0x10]
mov eax, dword [eax + 4]
mov ecx, eax
push 0x515658
push edi
call fcn.004d20c4
call fcn.004d4518
push dword [ebp - 0x14]
mov eax, dword [eax + 4]
mov ecx, eax
push 0x515660
push edi
call fcn.004d20c4
lea eax, [ebp - 0x1c]
push eax
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_GetWindowRect]
xor ecx, ecx
cmp dword [esi + 0xe4], ecx
jne 0x430845
cmp dword [esi + 0x90], ecx
mov edi, 0x516380
je 0x430737
mov eax, dword [esi + 0x74]
cmp eax, ecx
je 0x430701
cmp dword [eax + 0x44], ecx
je 0x430701
lea ecx, [ebp - 0x3c]
push ecx
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_GetWindowRect]
call fcn.004d4518
mov ecx, dword [ebp - 0x34]
mov eax, dword [eax + 4]
sub ecx, dword [ebp - 0x3c]
push ecx
push 0x516374
push edi
mov ecx, eax
call fcn.004d20c4
mov eax, dword [esi + 0x70]
test eax, eax
je 0x430737
cmp dword [eax + 0x44], 0
je 0x430737
lea ecx, [ebp - 0x2c]
push ecx
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_GetWindowRect]
call fcn.004d4518
mov ecx, dword [ebp - 0x24]
mov eax, dword [eax + 4]
sub ecx, dword [ebp - 0x2c]
push ecx
push 0x516368
push edi
mov ecx, eax
call fcn.004d20c4
cmp dword [esi + 0x90], 0
je 0x4307c8
cmp dword [esi + 0x468], 0
jne 0x430a7d
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
cmp eax, 0x64
jle 0x430a7d
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x18]
cmp eax, 0x64
jle 0x430a7d
call fcn.004d4518
push dword [ebp - 0x1c]
mov eax, dword [eax + 4]
mov ecx, eax
push ebx
push edi
call fcn.004d20c4
call fcn.004d4518
push dword [ebp - 0x18]
mov eax, dword [eax + 4]
mov ecx, eax
push 0x515668
push edi
call fcn.004d20c4
call fcn.004d4518
push dword [ebp - 0x10]
mov eax, dword [eax + 4]
mov ecx, eax
push 0x515658
push edi
call fcn.004d20c4
call fcn.004d4518
push dword [ebp - 0x14]
mov eax, dword [eax + 4]
push 0x515660
jmp 0x430a75
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
cmp eax, 0x64
jle 0x430a7d
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x18]
cmp eax, 0x64
jle 0x430a7d
call fcn.004d4518
push dword [ebp - 0x1c]
mov eax, dword [eax + 4]
mov ecx, eax
push ebx
mov ebx, 0x515cf0
push ebx
call fcn.004d20c4
call fcn.004d4518
push dword [ebp - 0x18]
mov eax, dword [eax + 4]
mov ecx, eax
push 0x515668
push ebx
call fcn.004d20c4
call fcn.004d4518
push dword [ebp - 0x10]
mov eax, dword [eax + 4]
mov ecx, eax
push 0x515658
push ebx
call fcn.004d20c4
call fcn.004d4518
push dword [ebp - 0x14]
mov eax, dword [eax + 4]
push 0x515660
push ebx
jmp 0x430a76
mov eax, dword [esi + 0x104]
mov edi, 0x516380
sub eax, dword [esi + 0xfc]
cmp eax, 0x64
jle 0x430958
mov eax, dword [esi + 0x108]
sub eax, dword [esi + 0x100]
cmp eax, 0x64
jle 0x430958
cmp dword [esi + 0x90], ecx
je 0x4308e6
call fcn.004d4518
push dword [esi + 0xfc]
mov eax, dword [eax + 4]
mov ecx, eax
push ebx
push edi
call fcn.004d20c4
call fcn.004d4518
push dword [esi + 0x100]
mov eax, dword [eax + 4]
mov ecx, eax
push 0x515668
push edi
call fcn.004d20c4
call fcn.004d4518
push dword [esi + 0x108]
mov eax, dword [eax + 4]
mov ecx, eax
push 0x515658
push edi
call fcn.004d20c4
call fcn.004d4518
push dword [esi + 0x104]
mov eax, dword [eax + 4]
mov ecx, eax
push 0x515660
push edi
call fcn.004d20c4
jmp 0x430958
call fcn.004d4518
push dword [esi + 0xfc]
mov eax, dword [eax + 4]
mov ecx, eax
push ebx
mov ebx, 0x515cf0
push ebx
call fcn.004d20c4
call fcn.004d4518
push dword [esi + 0x100]
mov eax, dword [eax + 4]
mov ecx, eax
push 0x515668
push ebx
call fcn.004d20c4
call fcn.004d4518
push dword [esi + 0x108]
mov eax, dword [eax + 4]
mov ecx, eax
push 0x515658
push ebx
call fcn.004d20c4
call fcn.004d4518
push dword [esi + 0x104]
mov eax, dword [eax + 4]
mov ecx, eax
push 0x515660
push ebx
call fcn.004d20c4
mov ebx, 0x51566c
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
je 0x430a7d
cmp dword [esi + 0x90], 0
je 0x430a14
mov eax, dword [esi + 0x74]
test eax, eax
je 0x4309b9
cmp dword [eax + 0x44], 0
je 0x4309b9
lea ecx, [ebp - 0x2c]
push ecx
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_GetWindowRect]
call fcn.004d4518
mov ecx, dword [ebp - 0x24]
mov eax, dword [eax + 4]
sub ecx, dword [ebp - 0x2c]
push ecx
push 0x516374
push edi
mov ecx, eax
call fcn.004d20c4
mov eax, dword [esi + 0x74]
cmp dword [eax + 0x44], 0
je 0x4309b9
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x2c]
add dword [ebp - 0x1c], eax
mov eax, dword [esi + 0x70]
test eax, eax
je 0x430a01
cmp dword [eax + 0x44], 0
je 0x430a01
lea ecx, [ebp - 0x3c]
push ecx
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_GetWindowRect]
call fcn.004d4518
mov ecx, dword [ebp - 0x34]
mov eax, dword [eax + 4]
sub ecx, dword [ebp - 0x3c]
push ecx
push 0x516368
push edi
mov ecx, eax
call fcn.004d20c4
mov eax, dword [esi + 0x70]
cmp dword [eax + 0x44], 0
je 0x430a01
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x34]
add dword [ebp - 0x14], eax
call fcn.004d4518
push dword [ebp - 0x1c]
mov eax, dword [eax + 4]
mov edi, 0x5160f8
push ebx
jmp 0x430a25
call fcn.004d4518
push dword [ebp - 0x1c]
mov eax, dword [eax + 4]
mov edi, 0x516114
push ebx
push edi
mov ecx, eax
call fcn.004d20c4
call fcn.004d4518
push dword [ebp - 0x18]
mov eax, dword [eax + 4]
mov ecx, eax
push 0x515668
push edi
call fcn.004d20c4
call fcn.004d4518
mov ecx, dword [ebp - 0x14]
mov eax, dword [eax + 4]
sub ecx, dword [ebp - 0x1c]
push ecx
push 0x51610c
push edi
mov ecx, eax
call fcn.004d20c4
call fcn.004d4518
mov ecx, dword [ebp - 0x10]
mov eax, dword [eax + 4]
sub ecx, dword [ebp - 0x18]
push ecx
push 0x516104
push edi
mov ecx, eax
call fcn.004d20c4
mov ecx, dword [esi + 0x454]
test ecx, ecx
je 0x430aaa
cmp dword [ecx + 0x1c], 0
je 0x430a92
mov eax, dword [ecx]
call dword [eax + 0x58]
mov ecx, dword [esi + 0x454]
test ecx, ecx
je 0x430aa3
mov eax, dword [ecx]
push 1
call dword [eax + 4]
and dword [esi + 0x454], 0
mov ecx, dword [esi + 0x458]
test ecx, ecx
je 0x430ad7
cmp dword [ecx + 0x1c], 0
je 0x430abf
mov eax, dword [ecx]
call dword [eax + 0x58]
mov ecx, dword [esi + 0x458]
test ecx, ecx
je 0x430ad0
mov eax, dword [ecx]
push 1
call dword [eax + 4]
and dword [esi + 0x458], 0
and dword [esi + 0xb8], 0
mov eax, dword [esi + 0xc8]
mov ecx, dword [eax]
cmp ecx, eax
mov dword [ebp - 8], ecx
je 0x430b16
mov eax, dword [ebp - 8]
push 0
mov edi, dword [eax + 0x10]
mov ecx, edi
call fcn.004cd613
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x58]
lea ecx, [ebp - 8]
call fcn.00434202
mov eax, dword [esi + 0xc8]
cmp dword [ebp - 8], eax
jne 0x430aed
push 0x51585c
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_RemovePropA]
lea ecx, [esi + 0x120]
call fcn.00441c5d
mov ecx, esi
call fcn.00430cfb
lea ecx, [esi + 0x314]
xor edi, edi
cmp ecx, edi
je 0x430b4c
cmp dword [ecx + 0x1c], edi
je 0x430b4c
mov eax, dword [ecx]
call dword [eax + 0x58]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push edi
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push 0xfffffffffffffff7
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
add esi, 0x3dc
cmp esi, edi
je 0x430b7b
cmp dword [esi + 0x1c], edi
je 0x430b7b
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x58]
pop edi
pop esi
pop ebx
leave
ret