Function at 0x403380
Capabilities:
Terminate process

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4375cb
push eax
mov dword fs:[0], esp
sub esp, 0x510
push ebx
push ebp
push esi
push edi
mov ebx, ecx
push 1
call fcn.0042df5f
mov eax, dword [ebx + 0x64cc5c]
push 0
push 0
push 0x147
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ebp, eax
or ecx, 0xffffffff
shl ebp, 7
add ebp, eax
lea edx, [esp + 0x120]
shl ebp, 7
add ebp, eax
xor eax, eax
shl ebp, 2
push 0x445278
lea edi, [ebx + ebp + 0x370]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x124]
push ecx
call fcn.0041a62e
mov edx, dword [ebx + 0x5c]
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
add edx, 0xc0
push str.__t_r_n
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.0041a62e
push eax
call fcn.0041a75d
mov ecx, dword [ebx + 0x5c]
add esp, 0x14
mov dword [ecx + 0x140], eax
mov edx, dword [ebx + 0x64cc98]
push 0
push 0
push 0x147
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [ebx + 0x5c]
or ecx, 0xffffffff
shl eax, 8
add eax, ebp
add edx, 0x150
lea edi, [eax + ebx + 0x474]
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov ebp, dword [sym.imp.USER32.dll_SendMessageA]
mov eax, ecx
mov esi, edi
mov edi, edx
push 0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push 0
and ecx, 3
push 0x147
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0x64cc20]
push ecx
call ebp
mov edx, dword [ebx + 0x5c]
mov dword [edx + 0x144], eax
mov eax, dword [ebx + 0x5c]
mov ecx, dword [ebx + 0x64ccdc]
mov dword [eax + 0x148], ecx
mov edx, dword [ebx + 0x5c]
mov eax, dword [ebx + 0x64cce0]
or ecx, 0xffffffff
mov dword [edx + 0x14c], eax
mov edi, dword [ebx + 0x64ccc4]
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, dword [ebx + 0x5c]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 0x5c]
mov edx, ecx
mov al, byte [edx]
test al, al
je 0x40352e
cmp al, 0x61
jl 0x40350e
cmp al, 0x7a
jle 0x403526
cmp al, 0x41
jl 0x403516
cmp al, 0x5a
jle 0x403526
cmp al, 0x30
jl 0x40351e
cmp al, 0x39
jle 0x403526
cmp al, 0x2e
jne 0x4036a8
mov al, byte [edx + 1]
inc edx
test al, al
jne 0x403506
mov edx, dword [ebx + 0x6c]
mov eax, dword [ebx + 0x64ccc4]
push 8
mov edx, dword [edx + 0x35ec]
add edx, 0xa90
push edx
push ecx
push eax
call fcn.00402cc0
mov edx, dword [ebx + 0x5c]
mov edi, dword [ebx + 0x64ccc0]
or ecx, 0xffffffff
xor eax, eax
add esp, 0x10
add edx, 0x1d0
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edx, dword [ebx + 0x5c]
mov edi, dword [ebx + 0x64ccd8]
or ecx, 0xffffffff
add edx, 0x80
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x10]
call fcn.00409760
push 1
mov ecx, ebx
mov dword [esp + 0x52c], 0
call fcn.0042df5f
lea ecx, [ebx + 0x70]
push ecx
lea ecx, [esp + 0x14]
call fcn.004097e0
mov edx, dword [ebx + 0x64cc5c]
push 0
push 0
push 0x147
push edx
call ebp
push eax
lea eax, [esp + 0x124]
push 0x44521c
push eax
call fcn.0041a207
add esp, 0xc
lea ecx, [esp + 0x120]
push ecx
push 0x445204
push 0x4451dc
lea ecx, [esp + 0x1c]
call fcn.00409ba0
mov edx, dword [ebx + 0x64cc98]
push 0
push 0
push 0x147
push edx
call ebp
push eax
lea eax, [esp + 0x124]
push 0x44521c
push eax
call fcn.0041a207
add esp, 0xc
lea ecx, [esp + 0x120]
push ecx
push 0x4451b8
push 0x4451dc
lea ecx, [esp + 0x1c]
call fcn.00409ba0
mov ebx, dword [ebx + 0x64ccb8]
lea ecx, [esp + 0x10]
push ebx
push 0x4451f8
push 0x4451dc
call fcn.00409ba0
lea ecx, [esp + 0x10]
call fcn.004099e0
lea ecx, [esp + 0x10]
mov dword [esp + 0x528], 0xffffffff
call fcn.004097d0
mov ecx, dword [esp + 0x520]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x51c
ret
push 0
push 0
push 0x445220
mov ecx, ebx
call fcn.0042d7fe
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]