Function at 0x404e5e
Capabilities:
Authenticate hmac
Terminate process

Disassembly:
sub dword [0x435ba4], 4
push 0xb6
push 0
call sub.user32.dll_LoadIconA
mov eax, dword [0x435a24]
add eax, ecx
mov eax, 8
mov eax, dword [0x435de8]
mov ax, 1
mov dword [0x435a24], edx
push 0x116f
push 0
call sub.user32.dll_LoadIconA
mov edi, dword [0x435c50]
mov ax, 1
sub edx, eax
push 0x8c
push 0
call sub.user32.dll_LoadIconA
mov eax, dword [0x435c50]
mov cx, 0xcf
mov eax, dword [0x435d74]
mov dword [0x435e0c], ecx
push 0xbb
push 0
call sub.user32.dll_LoadIconA
mov eax, dword [0x435a24]
sub edi, eax
mov ax, 0x98
push 0x87
push 0
call sub.user32.dll_LoadIconA
mov eax, dword [0x435b18]
sub esi, edx
mov esi, dword [0x435b04]
add eax, edx
mov eax, dword [0x435cf8]
add eax, eax
push 0x68
push 0
call sub.user32.dll_LoadIconA
mov eax, dword [0x435d54]
or eax, eax
mov eax, dword [0x435a94]
mov eax, 0x99
sub edi, edi
push 0x193
mov dword [0x435d44], eax
push 0
call sub.user32.dll_LoadIconA
mov esi, dword [0x435bc8]
sub edi, ecx
add eax, eax
mov ax, 4
push 0x6b
mov dword [0x435d4c], edx
push 0
call sub.user32.dll_LoadIconA
mov esi, dword [0x435a24]
mov si, 0xe1
mov eax, dword [0x435bd4]
push 0x6b
push 0
call sub.user32.dll_LoadIconA
mov esi, dword [0x435c74]
mov eax, 0xdc
sub eax, esi
mov si, 0x80
push 0x7a
mov dword [0x435d88], eax
push 0
call sub.user32.dll_LoadIconA
xor eax, dword [0x435ce8]
mov cx, 4
mov si, 1
push 0x68
mov dword [0x435dc8], eax
push 0
call sub.user32.dll_LoadIconA
mov eax, dword [0x435b58]
add edx, eax
sub edx, eax
push 0xc6
mov dword [0x435c64], eax
push 0
call sub.user32.dll_LoadIconA
mov eax, dword [0x435ab8]
sub esi, edx
or eax, dword [0x435d38]
sub esi, eax
mov esi, dword [0x435c6c]
sub eax, ecx
mov dword [0x435af0], eax
push 0x93
push 0
call sub.user32.dll_LoadIconA
mov eax, dword [0x435d48]
mov ax, 0x8c
sbb eax, dword [0x435c78]
mov ax, 0x9b
mov eax, dword [0x435c2c]
mov eax, 0x5a
push 0x69
mov dword [0x435a24], ecx
push 0
call sub.user32.dll_LoadIconA
mov eax, dword [0x435d10]
add eax, eax
mov eax, dword [0x435aec]
mov eax, dword [0x435e0c]
add eax, eax
push 0x920
push 0
call sub.user32.dll_LoadIconA
mov edx, dword [0x435d90]
mov dx, 4
mov edi, 1
mov eax, dword [0x435df8]
push 0xaf
mov dword [0x435d94], edx
push 0
call sub.user32.dll_LoadIconA
mov eax, dword [0x435b78]
sub edx, eax
mov eax, 0x20
add eax, eax
xor dword [0x435b30], 0xffff00ff
push 0x82
push 0
call sub.user32.dll_LoadIconA
mov eax, dword [0x435c98]
sub eax, eax
add eax, edx
push 0x14b3
mov dword [0x435be8], eax
push 0
call sub.user32.dll_LoadIconA
mov eax, dword [0x435b3c]
add edx, edx
mov edx, dword [0x435d8c]
push 0x80
push 0
call sub.user32.dll_LoadIconA
mov esi, dword [0x435dbc]
sub eax, ecx
mov eax, dword [0x435aec]
mov edx, 8
add edi, eax
mov dword [0x435b78], edx
push 0x4f1
mov dword [0x435cec], eax
push 0
call sub.user32.dll_LoadIconA
mov edi, dword [0x435ad0]
sub eax, ecx
mov esi, dword [0x435a70]
push 0xd42
push 0
call sub.user32.dll_LoadIconA
mov edx, dword [0x435b9c]
add eax, esi
add esi, edi
mov eax, dword [0x435d70]
push 0x70
push 0
call sub.user32.dll_LoadIconA
mov eax, dword [0x435a40]
add eax, edx
mov di, 0xd1
push 0xd25
push 0
call sub.user32.dll_LoadIconA
mov eax, dword [0x435c68]
mov eax, 0xf4
add edi, dword [0x435b78]
sub ecx, eax
sub edi, esi
push 0x82
push 0
call sub.user32.dll_LoadIconA
mov ecx, dword [0x435a8c]
or eax, ecx
mov si, 0x1b
push 0xa8
push 0
call sub.user32.dll_LoadIconA
add eax, dword [0x435dc0]
mov ax, 0xfd
mov dword [0x435d04], eax
push 0xb6
push 0
call sub.user32.dll_LoadIconA
mov esi, dword [0x435c38]
mov edx, 0x61
sub edi, edi
mov eax, dword [0x435b20]
push 0xb8
push 0
call sub.user32.dll_LoadIconA
mov edx, dword [0x435ab4]
mov eax, 0xad
push 0x1aa5
push 0
call sub.user32.dll_LoadIconA
mov eax, dword [0x435dac]
or eax, esi
mov eax, dword [0x435d20]
mov cx, 1
mov ecx, 0x158b0001
pop esp
inc ebx
add byte [ecx + 0x435c7035], cl
add byte [eax + 0x78], ch
or eax, dword [eax]
add byte [edx], ch