Function at 0x401ef0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
lea esp, [esp - 0x1fc]
mov byte [ebp - 4], al
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 0x1f8], 0
mov dword [ebp - 0x1f4], 0
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0xdc], 0
xor eax, eax
push fcn.00401e90
push ebp
push 0x4127a0
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0x20], 0x18
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x2c], 0xc
mov dword [ebp - 0x28], 2
mov word [ebp - 0x24], 0xff
lea eax, [ebp - 0x30]
push eax
push 1
lea eax, [ebp - 0x20]
push eax
push 0
call fcn.0041d010
lea eax, [ebp - 0x9c]
mov dword [ebp - 0xbc], eax
lea eax, [ebp - 0xbc]
push eax
push 5
push dword [ebp - 0x30]
call fcn.0041d020
mov dword [ebp - 0xd4], eax
test eax, eax
je 0x402059
push 0
mov eax, 0x4420a4
push eax
push dword [ebp - 0xd4]
call fcn.0041d030
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], 0
push dword [ebp - 0xe4]
push dword [ebp - 0xe8]
lea edx, [ebp - 0x1e8]
mov ecx, 0xff
mov eax, 0xffffffff
call fcn.00404a50
lea ecx, [ebp - 0xdc]
lea eax, [ebp - 0x1e8]
xor dx, dx
call fcn.00408d60
lea eax, [ebp - 0xdc]
xor cl, cl
xor dx, dx
call fcn.00409aa0
mov eax, dword [ebp - 0xdc]
test eax, eax
jne 0x40204a
mov eax, 0x44e2c0
push eax
push 0
call sub.user32.dll_MessageBoxA
push 0
call fcn.0041cef0
call fcn.0043dfa0
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x68], 0xffffffff
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xffffffff
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x6c]
push eax
push 0
push 0
call fcn.0041d040
mov eax, dword [0x4407f0]
mov dword [ebp - 0xa4], eax
mov ax, word [0x4407f4]
mov word [ebp - 0xa0], ax
mov dword [ebp - 0x40], 0
lea eax, [ebp - 0x40]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x20
push 1
lea eax, [ebp - 0xa4]
push eax
call fcn.0041cf60
lea eax, [ebp - 0x3c]
push eax
mov eax, str.S_1_1_0
push eax
call fcn.0041d000
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x70]
push eax
push 0
lea eax, [ebp - 0x74]
push eax
push 0
push dword [ebp - 0x3c]
push 0
call fcn.0041cfb0
test eax, eax
jne 0x402120
call fcn.0041cf00
cmp eax, 0x7a
jne 0x402120
mov eax, 0xffffffff
jmp 0x402127
xor eax, eax
jmp 0x4026a0
test eax, eax
je 0x4026a0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0xe4]
push eax
mov edx, 0x442228
lea eax, [ebp - 0x78]
mov ecx, 1
call fcn.0040b930
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0xe4]
push eax
mov edx, 0x442250
lea eax, [ebp - 0x7c]
mov ecx, 1
call fcn.0040b930
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x7c]
push eax
lea eax, [ebp - 0x74]
push eax
mov eax, dword [ebp - 0x78]
push eax
push dword [ebp - 0x3c]
push 0
call fcn.0041cfb0
test eax, eax
je 0x402698
mov eax, 0x20
call fcn.0040e090
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x58]
mov edx, 4
call fcn.0041cec0
mov dword [ebp - 0xc0], 0
push 1
lea eax, [ebp - 0x98]
push eax
call fcn.0041cf80
push 0xffffffffffffffff
push dword [ebp - 0x80]
push 0xffffffffffffffff
lea eax, [ebp - 0x98]
push eax
call fcn.0041cf90
push 0
push dword [0x43f130]
lea eax, [ebp - 0xa8]
push eax
push 0
call sub.samlib.dll_SamConnect
lea eax, [ebp - 0xac]
push eax
push dword [ebp - 0x40]
push 0x40000
push dword [ebp - 0xa8]
call sub.samlib.dll_SamOpenDomain
mov dword [ebp - 0xd4], eax
test eax, eax
jne 0x4023f0
push 0
mov eax, str.success
push eax
mov eax, str.opening_domain_success
push eax
push 0
call sub.user32.dll_MessageBoxA
mov eax, dword [ebp - 0xac]
call fcn.00401b00
push dword [ebp - 0xac]
call sub.samlib.dll_SamCloseHandle
push 0x14
call fcn.0041cf20
lea eax, [ebp - 0xac]
push eax
push dword [ebp - 0x40]
mov eax, dword [0x43f120]
bts eax, 0x12
push eax
push dword [ebp - 0xa8]
call sub.samlib.dll_SamOpenDomain
test eax, eax
jne 0x402289
push 0
mov eax, str.takeown_success
push eax
mov eax, str.taking_domain_ownership_successful
push eax
push 0
call sub.user32.dll_MessageBoxA
lea eax, [ebp - 0x58]
push eax
push 1
push dword [ebp - 0xac]
call sub.samlib.dll_SamQueryInformationDomain
mov dword [ebp - 0xd4], eax
push 0
mov eax, str.Error_In_Querying_Domain_Info
push eax
mov eax, dword [ebp - 0x58]
movzx eax, word [eax]
mov dword [ebp - 0xe4], eax
push 0xff
lea ecx, [ebp - 0x1e8]
mov eax, dword [ebp - 0xe4]
mov edx, 0xffffffff
call fcn.004049b0
lea ecx, [ebp - 0x1ec]
lea eax, [ebp - 0x1e8]
xor dx, dx
call fcn.00408d60
lea eax, [ebp - 0x1ec]
xor cl, cl
xor dx, dx
call fcn.00409aa0
mov eax, dword [ebp - 0x1ec]
test eax, eax
jne 0x402302
mov eax, 0x44e2c0
push eax
push 0
call sub.user32.dll_MessageBoxA
mov eax, dword [ebp - 0x58]
mov word [eax], 0
mov eax, dword [ebp - 0x58]
mov word [eax + 2], 0
cmp byte [ebp - 4], 0
je 0x402338
mov eax, dword [ebp - 0x58]
mov edx, dword [eax + 4]
and edx, 0xfffffffe
mov eax, dword [ebp - 0x58]
mov dword [eax + 4], edx
jmp 0x402347
mov eax, dword [ebp - 0x58]
mov edx, dword [eax + 4]
or edx, 1
mov eax, dword [ebp - 0x58]
mov dword [eax + 4], edx
push dword [ebp - 0x58]
push 1
push dword [ebp - 0xac]
call sub.samlib.dll_SamSetInformationDomain
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xac]
call fcn.00401cd0
push 0
mov eax, str.Error_In_Setting_Domain_Info
push eax
push dword [ebp - 0xd4]
call fcn.0041d030
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], 0
push dword [ebp - 0xe4]
push dword [ebp - 0xe8]
lea edx, [ebp - 0x1e8]
mov ecx, 0xff
mov eax, 0xffffffff
call fcn.00404a50
lea ecx, [ebp - 0x1f0]
lea eax, [ebp - 0x1e8]
xor dx, dx
call fcn.00408d60
lea eax, [ebp - 0x1f0]
xor cl, cl
xor dx, dx
call fcn.00409aa0
mov eax, dword [ebp - 0x1f0]
test eax, eax
jne 0x4023df
mov eax, 0x44e2c0
push eax
push 0
call sub.user32.dll_MessageBoxA
jmp 0x40246f
push 0
mov eax, str.Error_In_Domain_Opening
push eax
push dword [ebp - 0xd4]
call fcn.0041d030
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], 0
push dword [ebp - 0xe4]
push dword [ebp - 0xe8]
lea edx, [ebp - 0x1e8]
mov ecx, 0xff
mov eax, 0xffffffff
call fcn.00404a50
lea ecx, [ebp - 0x1f4]
lea eax, [ebp - 0x1e8]
xor dx, dx
call fcn.00408d60
lea eax, [ebp - 0x1f4]
xor cl, cl
xor dx, dx
call fcn.00409aa0
mov eax, dword [ebp - 0x1f4]
test eax, eax
jne 0x402467
mov eax, 0x44e2c0
push eax
push 0
call sub.user32.dll_MessageBoxA
lea eax, [ebp - 0xb0]
push eax
push dword [ebp - 0x44]
push 0x40000
push dword [ebp - 0xa8]
call sub.samlib.dll_SamOpenDomain
mov dword [ebp - 0xd4], eax
test eax, eax
jne 0x4025f8
push 0
mov eax, str.success
push eax
mov eax, str.opening_domain_success
push eax
push 0
call sub.user32.dll_MessageBoxA
mov eax, dword [ebp - 0xb0]
call fcn.00401b00
push dword [ebp - 0xb0]
call sub.samlib.dll_SamCloseHandle
push 0x14
call fcn.0041cf20
lea eax, [ebp - 0xb0]
push eax
push dword [ebp - 0x44]
mov eax, dword [0x43f120]
bts eax, 0x12
push eax
push dword [ebp - 0xa8]
call sub.samlib.dll_SamOpenDomain
test eax, eax
jne 0x402501
push 0
mov eax, str.takeown_success
push eax
mov eax, str.taking_domain_ownership_successful
push eax
push 0
call sub.user32.dll_MessageBoxA
lea eax, [ebp - 0x58]
push eax
push 1
push dword [ebp - 0xb0]
call sub.samlib.dll_SamQueryInformationDomain
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x58]
mov word [eax], 0
mov eax, dword [ebp - 0x58]
mov word [eax + 2], 0
cmp byte [ebp - 4], 0
je 0x402540
mov eax, dword [ebp - 0x58]
mov edx, dword [eax + 4]
and edx, 0xfffffffe
mov eax, dword [ebp - 0x58]
mov dword [eax + 4], edx
jmp 0x40254f
mov eax, dword [ebp - 0x58]
mov edx, dword [eax + 4]
or edx, 1
mov eax, dword [ebp - 0x58]
mov dword [eax + 4], edx
push dword [ebp - 0x58]
push 1
push dword [ebp - 0xb0]
call sub.samlib.dll_SamSetInformationDomain
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xb0]
call fcn.00401cd0
push 0
mov eax, str.Error_In_Setting_Domain_Info
push eax
push dword [ebp - 0xd4]
call fcn.0041d030
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], 0
push dword [ebp - 0xe4]
push dword [ebp - 0xe8]
lea edx, [ebp - 0x1e8]
mov ecx, 0xff
mov eax, 0xffffffff
call fcn.00404a50
lea ecx, [ebp - 0x1f8]
lea eax, [ebp - 0x1e8]
xor dx, dx
call fcn.00408d60
lea eax, [ebp - 0x1f8]
xor cl, cl
xor dx, dx
call fcn.00409aa0
mov eax, dword [ebp - 0x1f8]
test eax, eax
jne 0x4025e7
mov eax, 0x44e2c0
push eax
push 0
call sub.user32.dll_MessageBoxA
jmp 0x402677
push 0
mov eax, str.Error_In_Domain_Opening
push eax
push dword [ebp - 0xd4]
call fcn.0041d030
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], 0
push dword [ebp - 0xe4]
push dword [ebp - 0xe8]
lea edx, [ebp - 0x1e8]
mov ecx, 0xff
mov eax, 0xffffffff
call fcn.00404a50
lea ecx, [ebp - 0x1fc]
lea eax, [ebp - 0x1e8]
xor dx, dx
call fcn.00408d60
lea eax, [ebp - 0x1fc]
xor cl, cl
xor dx, dx
call fcn.00409aa0
mov eax, dword [ebp - 0x1fc]
test eax, eax
jne 0x40266f
mov eax, 0x44e2c0
push eax
push 0
call sub.user32.dll_MessageBoxA
push dword [ebp - 0xac]
call sub.samlib.dll_SamCloseHandle
push dword [ebp - 0xb4]
call sub.samlib.dll_SamCloseHandle
push dword [ebp - 0xa8]
call sub.samlib.dll_SamCloseHandle
push dword [ebp - 0x80]
call fcn.0041ced0
xor edx, edx
pop eax
add esp, 0xc
mov dword fs:[edx], eax
mov eax, ebp
call fcn.00401e90
mov esp, ebp
pop ebp
ret