Function at 0x408f40
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
push ebx
push esi
mov ebx, edx
mov dword [ebp - 0x48], ecx
mov eax, 0x32ae
mov dword [ebp - 0x44], ebx
push edi
mov ecx, 0xed98
mov dword [ebp - 0x38], 0x7557
mov dword [ebp - 0x20], 0x4aa5
mov edi, 0x3e2e
mov dword [ebp - 8], 0x6fab
mov esi, 0x22f5
mov dword [ebp - 0x1c], 0x158b9
mov dword [ebp - 0x34], 0x350a
mov dword [ebp - 0x5c], 0xd557
mov dword [ebp - 0x28], 0x60cb
mov dword [ebp - 0x4c], 0x58fe
mov dword [ebp - 0x60], 0x67e6
mov dword [ebp - 0x18], eax
call fcn.00402430
mov dword [ebp - 0x64], eax
lea ecx, [eax - 0x8166]
mov dword [ebp - 0x40], ecx
test ecx, ecx
jle 0x4090b2
mov esi, dword [ebp + 8]
mov ebx, 0xa6f7
imul eax, ecx, 0x6fab
mov edi, 0x10a27
mov edx, 0x1762a
add eax, 0x6fc1
mov dword [ebp - 0xc], eax
mov eax, 0x7557
nop word [eax + eax]
and edx, 0x12123
and edi, 0x10fd4
add ebx, 0xef36
mov dword [ebp - 0x10], edx
and esi, 0x162ab
cmp eax, 0x121e
jge 0x409055
push 0x127a1
and eax, 0x82a5
push 0x17a77
sub eax, edi
push 0xf8a3
mov dword [ebp - 0x38], eax
mov eax, 0x2dd1
push 0x9fbd
sub eax, esi
push 0x5dc3
push 0xa2e9
add ebx, eax
call dword [sym.imp.ADVAPI32.dll_MakeAbsoluteSD]
mov ecx, dword [ebp - 0x40]
add esp, 0x18
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x10]
sub ecx, 1
mov dword [ebp - 0x40], ecx
jne 0x408ff0
mov eax, 0x510
mov dword [ebp - 0x24], ebx
mov dword [ebp - 4], eax
mov ecx, 0x8a1
mov eax, 0xe09d
mov dword [ebp + 8], esi
mov dword [ebp - 0x2c], eax
or ecx, 0xad68
mov eax, 0x61ad
mov edx, 0xa4b8
sub eax, 0x35f1
mov ebx, 0x14805
or ecx, eax
and edx, 0x1583b
or ebx, 0x51a
mov esi, 0x22f5
mov dword [ebp - 0x14], ebx
mov edi, 0x3e2e
mov ebx, dword [ebp - 0x44]
jmp 0x409115
mov eax, dword [ebp + 8]
mov ecx, 0x8a1
mov dword [ebp + 8], eax
or ecx, 0xad68
mov eax, 0xa6f7
mov dword [ebp - 0x14], 0x14805
mov dword [ebp - 0x24], eax
mov edx, 0xa4b8
mov eax, 0x510
mov dword [ebp - 0x38], 0x7557
mov dword [ebp - 4], eax
and edx, 0x1583b
mov eax, 0xe09d
mov dword [ebp - 0x10], 0x1762a
mov dword [ebp - 0x2c], eax
mov eax, 0x61ad
sub eax, 0x35f1
mov dword [ebp - 0xc], 0x6fc1
or ecx, eax
or dword [ebp - 0x14], 0x51a
push ecx
push 0x654c
mov dword [ebp - 0x40], eax
mov eax, 0x475
push 0xfd54
add eax, 0x914e
mov dword [ebp - 0x54], edx
push 0x3010
push eax
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x30], 0x17f96
mov dword [ebp - 0x3c], 0xffff7bbb
call fcn.004063e0
add eax, 0xfffec9fd
add esp, 0x14
mov dword [ebp - 0x58], eax
mov edx, 0x475
test eax, eax
jle 0x4091cb
mov esi, dword [ebp - 0x50]
mov ebx, 0x510
mov edi, dword [ebp - 0x54]
mov ecx, 0x10deb
lea eax, [ebx + 0xa]
sub dword [ebp - 0x14], 0xad2c
and ecx, 0x141d7
add edx, 0xae83
mov dword [ebp - 0x54], ecx
cmp eax, 0x829a
jle 0x4091b5
or esi, dword [ebp - 0x3c]
add ebx, 0x1780d
cmp edx, 0x56c5
jle 0x4091b5
add edi, 0x5de4
cmp esi, 0x5f04
jge 0x4091b5
add eax, dword [ebp - 0x40]
and edi, dword [ebp - 0x40]
sub dword [ebp - 0x58], 1
jne 0x409173
mov dword [ebp - 4], ebx
mov esi, 0x22f5
mov ebx, dword [ebp - 0x44]
mov edi, 0x3e2e
mov eax, dword [ebp - 4]
mov ecx, 0x25fa2
add edx, ecx
mov dword [ebp - 0x58], edx
cmp eax, 0xf4db
jg 0x4094dd
inc dword [ebp - 0x30]
cmp dword [ebp - 0x3c], 0xf7d4
jge 0x409215
mov edx, dword [ebp - 0x2c]
and edx, 0x15ef7
cmp dword [ebp - 0x40], 0xbfe7
mov dword [ebp - 0x2c], edx
je 0x409212
sub ecx, dword [ebp - 0x14]
add edx, 0x172c5
mov dword [ebp - 0x2c], edx
and ecx, edx
mov edx, dword [ebp - 0x58]
cmp dword [ebp - 0x30], 0x17f97
jl 0x4091d3
lea edx, [eax - 0x50f]
mov dword [ebp - 0x58], edx
test edx, edx
jle 0x4092bf
mov ecx, dword [ebp - 0xc]
mov ebx, 0xd557
imul eax, edx, 0xffffd8cc
add dword [ebp + 8], eax
mov eax, edx
imul eax, dword [ebp - 0x64]
add dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
nop dword [eax]
and dword [ebp - 0x20], edi
or eax, edi
or edi, eax
xor esi, 0x1244c
add eax, 0x1579f
mov dword [ebp - 0x24], eax
cmp ecx, 0x6172
jge 0x4092ae
push 0x9316
push 0xd4cb
push 0x828c
push 0xb4e0
push 0xbca1
push 0xa2cb
push 0xb6fc
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov eax, dword [ebp - 0x24]
add esp, 0x1c
mov ecx, dword [ebp - 0xc]
sub ebx, 0x1254d
mov edx, dword [ebp - 0x58]
or esi, 0x32ae
sub edx, 1
mov dword [ebp - 0x58], edx
jne 0x409250
mov eax, dword [ebp - 4]
mov dword [ebp - 0x5c], ebx
mov ebx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0xc]
cmp ecx, 0xdf6d
jge 0x4093ea
mov ecx, 0x6fab
jmp 0x4092e3
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x34]
sub ecx, 0x165b3
or edx, dword [ebp - 0x1c]
xor esi, 0x16309
mov dword [ebp - 0x34], edx
mov dword [ebp - 8], ecx
cmp ecx, 0x5b7b
jne 0x40935b
and eax, 0x9524
or edi, 0x167e7
mov dword [ebp - 4], eax
call dword [sym.imp.KERNEL32.dll_UnhandledExceptionFilter]
mov eax, dword [ebp - 0x5c]
add dword [ebp - 0x10], eax
cmp dword [ebp + 8], 0x68cc
mov eax, dword [ebp - 0x18]
jne 0x409356
mov edx, dword [ebp - 0x34]
xor esi, 0x12e11
mov ecx, dword [ebp - 0x1c]
or edx, 0x4bd8
xor ecx, dword [ebp - 4]
xor eax, dword [ebp - 0x48]
add dword [ebp - 0x4c], 0xb8fa
xor dword [ebp - 0x28], edx
or eax, ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 8]
jmp 0x40935e
mov eax, dword [ebp - 0x18]
inc dword [ebp - 0xc]
or ebx, edi
cmp dword [ebp - 0x60], 0x13d9f
jne 0x4093da
push 0xc0c0
push 0x5b4a
push 0xf165
push 0x1169b
push 0x118cd
or eax, 0xda6f
or ebx, 0x5214
push 0x1d76
push 0x6a98
mov dword [ebp - 0x18], eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [ebp - 8]
add esp, 0x1c
cmp dword [ebp - 0x18], 0x16eaa
jle 0x4093da
mov eax, dword [ebp - 0xc]
add dword [ebp - 0x48], 0xdb59
or eax, 0x13d9f
and dword [ebp + 8], 0x7fa4
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x10]
add dword [ebp - 0x20], eax
sub ecx, 0x15b42
mov dword [ebp - 8], ecx
cmp dword [ebp - 0xc], 0xdf6d
jl 0x4092e0
mov ecx, dword [ebp - 0xc]
cmp ecx, 0xdf6e
jae 0x4094d4
mov edx, dword [ebp - 0x28]
mov eax, 0xdf6e
sub eax, ecx
mov dword [ebp - 0x60], eax
add dword [ebp - 0x1c], 0x11367
mov ecx, dword [ebp - 4]
or edi, ecx
sub ebx, dword [ebp - 0x1c]
add edi, 0x12952
cmp edx, 0x15c26
jne 0x409473
push 0x15fd1
push 0x11d8b
push 0xcfb3
push 0x222a
push 0x11cad
push 0x10739
call dword [sym.imp.GDI32.dll_CreateDIBSection]
mov eax, dword [ebp - 8]
add esp, 0x18
mov ecx, dword [ebp - 4]
and esi, 0x1647
cmp dword [ebp - 0x38], 0xcef5
mov edx, 0x2d3b7
je 0x409476
xor esi, dword [ebp - 0x20]
mov edx, 0x2af86
sub eax, 0x11bb
mov dword [ebp - 8], eax
jmp 0x409476
mov eax, dword [ebp - 8]
xor edx, dword [ebp - 0x20]
cmp dword [ebp - 0x4c], 0x3e90
mov dword [ebp - 0x28], edx
jne 0x4094ca
cmp ebx, 0xf1a4
je 0x4094ca
or ebx, 0x12f5
cmp eax, 0x17635
jle 0x4094ca
push 0x569f
push 0x26a6
push 0xbd4c
and ecx, 0xa4b8
xor esi, edi
push 0x15e7
push 0x588
mov dword [ebp - 4], ecx
call dword [sym.imp.USER32.dll_DrawMenuBar]
mov edx, dword [ebp - 0x28]
add esp, 0x14
sub dword [ebp - 0x60], 1
jne 0x409403
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x1485b
push 0x7038
push 0xb671
push 0x7af1
push 0x9892
call dword [sym.imp.KERNEL32.dll_ExitProcess]