Function at 0x401ce0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
lea esp, [esp - 0x1cc]
mov dword [ebp - 4], eax
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0
mov dword [ebp - 0x1c4], 0
mov dword [ebp - 0xb8], 0
xor eax, eax
push fcn.00401c90
push ebp
push 0x412ee0
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0x1c], 0x18
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
lea eax, [ebp - 0x28]
mov dword [ebp - 8], eax
mov dword [ebp - 0x28], 0xc
mov dword [ebp - 0x24], 2
mov word [ebp - 0x20], 0xff
lea eax, [ebp - 0x2c]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
push 0
call fcn.0041d790
test eax, eax
jne 0x401d9d
push 0
mov eax, str.open_policy
push eax
mov eax, str.open_policy_success
push eax
push 0
call sub.user32.dll_MessageBoxA
lea eax, [ebp - 0x78]
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x98]
push eax
push 5
push dword [ebp - 0x2c]
call fcn.0041d7a0
mov dword [ebp - 0xb0], eax
test eax, eax
jne 0x401de0
push 0
mov eax, str.query_policy_information
push eax
mov eax, str.query_policy_information_success
push eax
push 0
call sub.user32.dll_MessageBoxA
jmp 0x401e66
push 0
mov eax, 0x4420b4
push eax
push dword [ebp - 0xb0]
call fcn.0041d7c0
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], 0
push dword [ebp - 0xbc]
push dword [ebp - 0xc0]
lea edx, [ebp - 0x1c0]
mov ecx, 0xff
mov eax, 0xffffffff
call fcn.00404fe0
lea ecx, [ebp - 0xb8]
lea eax, [ebp - 0x1c0]
xor dx, dx
call fcn.004092f0
lea eax, [ebp - 0xb8]
xor cl, cl
xor dx, dx
call fcn.0040a030
mov eax, dword [ebp - 0xb8]
test eax, eax
jne 0x401e57
mov eax, 0x44e3e0
push eax
push 0
call sub.user32.dll_MessageBoxA
push 0
call fcn.0041d630
call fcn.0043e750
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0xb4]
push eax
push dword [ebp - 0x40]
call fcn.0041d770
push 0
push dword [ebp - 0xb4]
push dword [ebp - 0xb4]
push 0
call sub.user32.dll_MessageBoxA
mov eax, dword [0x4408c0]
mov dword [ebp - 0x80], eax
mov ax, word [0x4408c4]
mov word [ebp - 0x7c], ax
mov dword [ebp - 0x3c], 0
lea eax, [ebp - 0x3c]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x20
push 1
lea eax, [ebp - 0x80]
push eax
call fcn.0041d6a0
lea eax, [ebp - 0x38]
push eax
mov eax, str.S_1_1_0
push eax
call fcn.0041d780
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x4c]
push eax
push 0
lea eax, [ebp - 0x50]
push eax
push 0
push dword [ebp - 0x38]
push 0
call fcn.0041d6e0
test eax, eax
jne 0x401f16
call fcn.0041d640
cmp eax, 0x7a
jne 0x401f16
mov eax, 0xffffffff
jmp 0x401f1d
xor eax, eax
jmp 0x40244f
test eax, eax
je 0x40244f
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xbc], eax
lea eax, [ebp - 0xbc]
push eax
mov edx, 0x4424b8
lea eax, [ebp - 0x54]
mov ecx, 1
call fcn.0040bec0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xbc], eax
lea eax, [ebp - 0xbc]
push eax
mov edx, 0x4424e0
lea eax, [ebp - 0x58]
mov ecx, 1
call fcn.0040bec0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x58]
push eax
lea eax, [ebp - 0x50]
push eax
mov eax, dword [ebp - 0x54]
push eax
push dword [ebp - 0x38]
push 0
call fcn.0041d6e0
test eax, eax
je 0x402447
mov eax, 0x20
call fcn.0040e7c0
mov dword [ebp - 0x60], eax
push 0
push 3
mov eax, dword [0x43f1d0]
bts eax, 0x10
push eax
push dword [ebp - 0x54]
mov eax, dword [ebp - 0x60]
push eax
call fcn.0041d760
push 0
push 2
mov eax, dword [0x43f1c0]
or eax, dword [0x43f1e0]
or eax, dword [0x43f170]
or eax, dword [0x43f160]
or eax, dword [0x43f180]
or eax, dword [0x43f190]
or eax, dword [0x43f1a0]
or eax, dword [0x43f1b0]
push eax
push dword [ebp - 0x54]
mov eax, dword [ebp - 0x60]
add eax, 0x20
push eax
call fcn.0041d760
push 0xa
call fcn.0041d660
lea eax, [ebp - 0x5c]
push eax
push 0
push dword [ebp - 0x60]
push 2
call fcn.0041d750
mov dword [ebp - 0x9c], 0
push 1
lea eax, [ebp - 0x74]
push eax
call fcn.0041d6c0
push 0xffffffffffffffff
push dword [ebp - 0x5c]
push 0xffffffffffffffff
lea eax, [ebp - 0x74]
push eax
call fcn.0041d6d0
push 0
mov eax, dword [0x43f130]
or eax, dword [0x43f140]
push eax
lea eax, [ebp - 0x84]
push eax
push 0
call sub.samlib.dll_SamConnect
test eax, eax
jne 0x40206a
push 0
mov eax, str.server_connection
push eax
mov eax, str.server_connection_success
push eax
push 0
call sub.user32.dll_MessageBoxA
lea eax, [ebp - 0x88]
push eax
push dword [ebp - 0x3c]
push dword [0x43f150]
push dword [ebp - 0x84]
call sub.samlib.dll_SamOpenDomain
test eax, eax
jne 0x40209e
push 0
mov eax, str.domain_opening
push eax
mov eax, str.domain_opening_success
push eax
push 0
call sub.user32.dll_MessageBoxA
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x40]
push dword [0x43f150]
push dword [ebp - 0x84]
call sub.samlib.dll_SamOpenDomain
test eax, eax
jne 0x4020d2
push 0
mov eax, str.domain_opening_2
push eax
mov eax, str.domain_opening_2_success
push eax
push 0
call sub.user32.dll_MessageBoxA
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0xa4], 0
push dword [ebp - 4]
lea eax, [ebp - 0xac]
push eax
call fcn.0041d7f0
push 0
mov eax, str.username_init
push eax
mov eax, str.username_init_success
push eax
push 0
call sub.user32.dll_MessageBoxA
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0xac]
push eax
push 1
push dword [ebp - 0x88]
call sub.samlib.dll_SamLookupNamesInDomain
mov dword [ebp - 0xb0], eax
test eax, eax
jne 0x402160
mov dword [ebp - 0x9c], 1
push 0
mov eax, str.lookup_names_in_domain
push eax
mov eax, str.lookup_names_in_domain_success
push eax
push 0
call sub.user32.dll_MessageBoxA
jmp 0x402246
cmp dword [ebp - 0xb0], 0xc0000073
jne 0x4021c0
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0xac]
push eax
push 1
push dword [ebp - 0x8c]
call sub.samlib.dll_SamLookupNamesInDomain
mov dword [ebp - 0xb0], eax
test eax, eax
jne 0x402246
mov dword [ebp - 0x9c], 2
push 0
mov eax, str.account_was_found_
push eax
mov eax, str.account_was_found_
push eax
push 0
call sub.user32.dll_MessageBoxA
jmp 0x402246
push 0
mov eax, 0x4420b4
push eax
push dword [ebp - 0xb0]
call fcn.0041d7c0
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], 0
push dword [ebp - 0xbc]
push dword [ebp - 0xc0]
lea edx, [ebp - 0x1c0]
mov ecx, 0xff
mov eax, 0xffffffff
call fcn.00404fe0
lea ecx, [ebp - 0x1c4]
lea eax, [ebp - 0x1c0]
xor dx, dx
call fcn.004092f0
lea eax, [ebp - 0x1c4]
xor cl, cl
xor dx, dx
call fcn.0040a030
mov eax, dword [ebp - 0x1c4]
test eax, eax
jne 0x402237
mov eax, 0x44e3e0
push eax
push 0
call sub.user32.dll_MessageBoxA
push 0
call fcn.0041d630
mov dword [ebp - 0xb0], 0xc0000022
cmp dword [ebp - 0x9c], 0
jbe 0x4022ba
cmp dword [ebp - 0x9c], 1
jne 0x402290
lea eax, [ebp - 0x90]
push eax
mov eax, dword [ebp - 0xa0]
push dword [eax]
mov eax, dword [0x43f1d0]
bts eax, 0x12
push eax
push dword [ebp - 0x88]
call sub.samlib.dll_SamOpenUser
mov dword [ebp - 0xb0], eax
jmp 0x4022ba
lea eax, [ebp - 0x90]
push eax
mov eax, dword [ebp - 0xa0]
push dword [eax]
mov eax, dword [0x43f1d0]
bts eax, 0x12
push eax
push dword [ebp - 0x8c]
call sub.samlib.dll_SamOpenUser
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jne 0x4022e0
push 0
mov eax, str.open_user
push eax
mov eax, str.open_user_success
push eax
push 0
call sub.user32.dll_MessageBoxA
jmp 0x402366
push 0
mov eax, 0x4420b4
push eax
push dword [ebp - 0xb0]
call fcn.0041d7c0
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], 0
push dword [ebp - 0xbc]
push dword [ebp - 0xc0]
lea edx, [ebp - 0x1c0]
mov ecx, 0xff
mov eax, 0xffffffff
call fcn.00404fe0
lea ecx, [ebp - 0x1c8]
lea eax, [ebp - 0x1c0]
xor dx, dx
call fcn.004092f0
lea eax, [ebp - 0x1c8]
xor cl, cl
xor dx, dx
call fcn.0040a030
mov eax, dword [ebp - 0x1c8]
test eax, eax
jne 0x402357
mov eax, 0x44e3e0
push eax
push 0
call sub.user32.dll_MessageBoxA
push 0
call fcn.0041d630
lea eax, [ebp - 0x74]
push eax
push 4
push dword [ebp - 0x90]
call sub.samlib.dll_SamSetSecurityObject
mov dword [ebp - 0xb0], eax
test eax, eax
jne 0x4023a0
push 0
mov eax, str.protect_user_successful
push eax
mov eax, str.successfully_protected_the_user_
push eax
push 0
call sub.user32.dll_MessageBoxA
jmp 0x402426
push 0
mov eax, 0x4420b4
push eax
push dword [ebp - 0xb0]
call fcn.0041d7c0
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], 0
push dword [ebp - 0xbc]
push dword [ebp - 0xc0]
lea edx, [ebp - 0x1c0]
mov ecx, 0xff
mov eax, 0xffffffff
call fcn.00404fe0
lea ecx, [ebp - 0x1cc]
lea eax, [ebp - 0x1c0]
xor dx, dx
call fcn.004092f0
lea eax, [ebp - 0x1cc]
xor cl, cl
xor dx, dx
call fcn.0040a030
mov eax, dword [ebp - 0x1cc]
test eax, eax
jne 0x402417
mov eax, 0x44e3e0
push eax
push 0
call sub.user32.dll_MessageBoxA
push 0
call fcn.0041d630
push dword [ebp - 0x88]
call sub.samlib.dll_SamCloseHandle
push dword [ebp - 0x90]
call sub.samlib.dll_SamCloseHandle
push dword [ebp - 0x84]
call sub.samlib.dll_SamCloseHandle
push dword [ebp - 0x5c]
call fcn.0041d610
xor eax, eax
pop edx
add esp, 0xc
mov dword fs:[eax], edx
mov eax, ebp
call fcn.00401c90
mov esp, ebp
pop ebp
ret