Function at 0x409740
Capabilities:
Hide graphical window
Print debug messages

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x28], eax
cmp dword [0x42f3dc], 0
push ebx
push esi
push edi
mov esi, ecx
mov dword [esp + 0x20], str.Application_Hardening
mov dword [esp + 0x24], str.Protection_Against_OS_Security_Bypass
mov dword [esp + 0x28], str.Malicious_Memory_Protection
mov dword [esp + 0x2c], str.Application_Behavior_Protection
mov dword [esp + 0x30], str.APT_Behaviour_Protection
je 0x409c3b
cmp dword [esi + 0x18c8], 1
jbe 0x4097b3
lea eax, [esi + 0xcb4]
push eax
push 0x43362c
call fcn.00413ce8
add esp, 8
test eax, eax
jne 0x409c3b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x1000a
mov dword [esp + 0x1c], 0
lea ebx, [eax + 0x1e]
mov dword [esp + 0x18], ebx
call fcn.00412ac8
add esp, 4
mov dword [esp + 0x10], eax
push 0x2000a
call fcn.00412ac8
add esp, 4
mov edi, eax
cmp dword [esp + 0x10], 0
je 0x40989f
test edi, edi
je 0x40989f
push dword [esi]
lea eax, [esi + 0x248]
push eax
lea eax, [esi + 0xcb4]
push eax
push str.Alert_MessageBox_from___s__s:__d
push 0xffff
push edi
call fcn.00412a58
add esp, 0x18
test eax, eax
jle 0x40988a
xor eax, eax
mov ecx, edi
push 0xffffffffffffffff
push edi
mov word [edi + 0x1fffe], ax
call fcn.004052b0
inc eax
push eax
push dword [esp + 0x1c]
lea eax, [esp + 0x28]
push eax
call fcn.00413618
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
add esp, 0x14
test eax, eax
je 0x409867
push dword [esp + 0x14]
push edi
push str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.00412f3c
add esp, 0xc
push edi
call ebx
push dword [esp + 0x14]
mov edx, 0x174
mov ecx, str...GuiTab.cpp
push dword [esp + 0x14]
push str.ShowAlertDialog
push 4
call fcn.00401280
add esp, 0x10
jmp 0x4098b9
push ebx
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
jmp 0x4098b1
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
call ebx
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4098ca
push eax
call fcn.00412a90
add esp, 4
test edi, edi
je 0x4098d7
push edi
call fcn.00412a90
add esp, 4
mov eax, dword [esi]
cmp eax, 8
jne 0x409909
cmp dword [0x42f3e0], 1
jne 0x409c3b
cmp dword [0x42f3fc], 1
jne 0x409c3b
push 2
mov edx, str.Malwarebytes_Anti_Exploit_prevented_VBScript_from_loading
call fcn.00412670
jmp 0x409c38
cmp eax, 9
jne 0x409939
cmp dword [0x42f3e0], 1
jne 0x409c3b
cmp dword [0x42f3fc], 1
jne 0x409c3b
push 2
mov edx, str.Malwarebytes_Anti_Exploit_has_blocked_a_compressed_file_with_suspicious_content_inside.
call fcn.00412670
jmp 0x409c38
push 0
call fcn.0041425e
sub eax, dword [0x434e58]
add esp, 4
mov dword [esp + 0x1c], edx
cmp eax, 0xa
jl 0x409966
push 0x1020
push 0
push 0x433848
call fcn.00419530
add esp, 0xc
cmp word [esi + 0xeb6], 0
lea eax, [esi + 0xeb6]
jne 0x409afd
cmp dword [esi], 2
jne 0x409989
cmp word [0x433e60], 0
jne 0x4099a2
lea eax, [esi + 0xa68]
push eax
push 0x104
push 0x433e60
call fcn.00413c8c
add esp, 0xc
lea eax, [esi + 0x248]
push eax
push 0x104
push 0x433848
call fcn.00413c8c
add esp, 0xc
lea eax, [esi + 0x16b6]
push eax
push 0x104
push 0x433c58
call fcn.00413c8c
mov eax, dword [esi + 4]
add esp, 0xc
cmp eax, 5
jae 0x4099ef
push dword [esp + eax*4 + 0x20]
push 0x104
push 0x433a50
jmp 0x409b08
call dword [sym.imp.KERNEL32.dll_GetLastError]
add eax, 0x1e
mov dword [esp + 0x18], 0
push 0x1000a
mov dword [esp + 0x14], eax
call fcn.00412ac8
add esp, 4
mov dword [esp + 0x14], eax
push 0x2000a
call fcn.00412ac8
add esp, 4
mov edi, eax
cmp dword [esp + 0x14], 0
je 0x409ac9
test edi, edi
je 0x409ac9
push dword [esi + 4]
push str.Wrong_layer:__d
push 0xffff
push edi
call fcn.00412a58
add esp, 0x10
test eax, eax
jle 0x409ab1
xor eax, eax
mov ecx, edi
push 0xffffffffffffffff
push edi
mov word [edi + 0x1fffe], ax
call fcn.004052b0
mov esi, dword [esp + 0x1c]
inc eax
push eax
lea eax, [esp + 0x24]
push esi
push eax
call fcn.00413618
add esp, 0x14
test eax, eax
je 0x409a91
push dword [esp + 0x10]
push edi
push str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.00412f3c
add esp, 0xc
push edi
call ebx
push dword [esp + 0x10]
mov edx, 0x196
mov ecx, str...GuiTab.cpp
push esi
push str.ShowAlertDialog
push 4
call fcn.00401280
add esp, 0x10
jmp 0x409add
push dword [esp + 0x10]
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
jmp 0x409adb
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call ebx
mov eax, dword [esp + 0x14]
test eax, eax
je 0x409aee
push eax
call fcn.00412a90
add esp, 4
test edi, edi
je 0x409b10
push edi
call fcn.00412a90
add esp, 4
jmp 0x409b10
push eax
push 0x400
push 0x434068
call fcn.00413c8c
add esp, 0xc
cmp word [0x433848], 0
mov eax, 0x429c70
je 0x409b24
mov eax, 0x433848
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push eax
push 0
push 0xc
push 0x192
push dword [0x43486c]
call esi
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
call edi
cmp word [0x433a50], 0
mov eax, 0x429c70
je 0x409b59
mov eax, 0x433a50
push eax
push 0
push 0xc
push 0x193
push dword [0x43486c]
call esi
push eax
call edi
cmp word [0x433c58], 0
mov eax, 0x429c70
je 0x409b82
mov eax, 0x433c58
push eax
push 0
push 0xc
push 0x194
push dword [0x43486c]
call esi
push eax
call edi
cmp word [0x433e60], 0
mov eax, 0x429c70
je 0x409bab
mov eax, 0x433e60
push eax
push 0
push 0xc
push 0x195
push dword [0x43486c]
call esi
push eax
call edi
cmp word [0x434068], 0
mov eax, 0x429c70
je 0x409bd4
mov eax, 0x434068
push eax
push 0
push 0xc
push 0x196
push dword [0x43486c]
call esi
push eax
call edi
mov ecx, dword [0x43486c]
call fcn.004128f0
push 5
push dword [0x43486c]
call dword [sym.imp.USER32.dll_ShowWindow]
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push dword [0x43486c]
call dword [sym.imp.USER32.dll_SetWindowPos]
push dword [0x43486c]
call dword [sym.imp.USER32.dll_SetFocus]
push 0
call fcn.0041425e
mov dword [0x434e58], eax
mov dword [0x434e5c], edx
add esp, 4
mov ecx, dword [esp + 0x34]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0041297c
mov esp, ebp
pop ebp
ret