Function at 0x402ddd
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x434547
mov eax, dword fs:[0]
push eax
sub esp, 0xa48
mov eax, dword [0x442b44]
xor eax, esp
mov dword [esp + 0xa40], eax
push ebx
push esi
push edi
mov eax, dword [0x442b44]
xor eax, esp
push eax
lea eax, [esp + 0xa58]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov esi, dword [sym.imp.USER32.dll_LoadStringW]
push 0x64
push 0x447348
push 0x67
push edi
call esi
push 0x64
mov ebx, 0x447280
push ebx
push 0x6d
push edi
call esi
mov eax, edi
call fcn.00403109
xor esi, esi
push esi
push edi
push esi
push esi
push esi
mov eax, 0x80000000
push eax
push esi
push eax
push 0xcf0000
push 0x447348
push ebx
push esi
mov dword [0x447410], edi
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov ebx, eax
cmp ebx, esi
je 0x402f87
push esi
push ebx
call dword [sym.imp.USER32.dll_ShowWindow]
push ebx
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0x6d
push edi
call dword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov edi, 0x206
push edi
lea eax, [esp + 0x642]
push esi
push eax
mov word [esp + 0x648], si
call fcn.0040dc70
add esp, 0xc
push edi
lea eax, [esp + 0x232]
push esi
push eax
mov word [esp + 0x238], si
call fcn.0040dc70
add esp, 0xc
push edi
lea eax, [esp + 0x43a]
push esi
push eax
mov word [esp + 0x440], si
call fcn.0040dc70
add esp, 0xc
push esi
push esi
mov ebx, str.___Type___
push ebx
call fcn.0040ebe0
mov edi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
pop ecx
push eax
push ebx
push esi
push esi
call edi
push eax
lea eax, [esp + 0x640]
push eax
push ebx
call fcn.0040ebe0
pop ecx
push eax
push ebx
push esi
push esi
call edi
push esi
push esi
mov ebx, str.___StartTime___
push ebx
call fcn.0040ebe0
pop ecx
push eax
push ebx
push esi
push esi
call edi
push eax
lea eax, [esp + 0x230]
push eax
push ebx
call fcn.0040ebe0
pop ecx
push eax
push ebx
push esi
push esi
call edi
push esi
push esi
mov ebx, str.___EndTime___
push ebx
call fcn.0040ebe0
pop ecx
push eax
push ebx
push esi
push esi
call edi
push eax
lea eax, [esp + 0x438]
push eax
push ebx
call fcn.0040ebe0
pop ecx
push eax
push ebx
push esi
push esi
call edi
push 0x10
call fcn.0040339f
pop ecx
mov dword [esp + 0x20], eax
cmp eax, esi
mov dword [esp + 0xa60], esi
je 0x402faf
push eax
call fcn.0040110e
mov edi, eax
jmp 0x402fb1
xor eax, eax
mov ecx, dword [esp + 0xa58]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xa40]
xor ecx, esp
call fcn.0040e93a
mov esp, ebp
pop ebp
ret 0x10
xor edi, edi
or dword [esp + 0xa60], 0xffffffff
lea eax, [esp + 0x22c]
push eax
lea eax, [esp + 0x640]
push eax
push edi
lea ecx, [esp + 0x440]
call fcn.0040115b
cmp edi, esi
je 0x402fe0
push edi
call fcn.004030c0
mov edi, 0x206
push edi
lea eax, [esp + 0x2a]
push esi
push eax
mov word [esp + 0x30], si
call fcn.0040dc70
add esp, 0xc
push edi
lea eax, [esp + 0x84a]
push esi
push eax
mov word [esp + 0x850], si
call fcn.0040dc70
add esp, 0xc
mov edi, 0x104
push edi
lea eax, [esp + 0x28]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor ecx, ecx
xor eax, eax
movzx edx, word [esp + eax*2 + 0x24]
cmp dx, si
je 0x403040
cmp dx, 0x5c
jne 0x40303b
mov ecx, eax
inc eax
cmp eax, edi
jne 0x403029
lea eax, [esp + 0x10]
push eax
mov word [esp + ecx*2 + 0x28], si
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
movzx eax, word [esp + 0x1a]
push eax
movzx eax, word [esp + 0x1c]
push eax
movzx eax, word [esp + 0x1e]
push eax
movzx eax, word [esp + 0x1e]
push eax
push 0x43c5e8
lea eax, [esp + 0x858]
push edi
push eax
call fcn.0040ece6
add esp, 0x1c
lea eax, [esp + 0x844]
push eax
lea eax, [esp + 0x28]
push edi
push eax
call fcn.0040eb64
add esp, 0xc
lea eax, [esp + 0x24]
push 0x43c624
push eax
call fcn.0040edc8
push eax
call fcn.0040ee4d
add esp, 0xc
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00403255
push esi
call fcn.0040f159
int3