Function at 0x416fb0
Capabilities:
Enumerate pe sections
Hide graphical window

Disassembly:
sub esp, 0x60
mov dword [esp + 0x1c], edx
push ebx
push esi
push edi
push ebp
mov esi, ecx
push 0x3e9
xor edi, edi
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [esp + 0x10], eax
mov dword [esp + 0x28], edi
mov eax, dword [0x475378]
lea ebx, [esp + 0x14]
mov dword [esp + 0x14], 0xf
mov ecx, dword [eax + 0x674]
push ebx
mov eax, dword [esp + 0x14]
push edi
push 0x101b
mov ebp, dword [sym.imp.USER32.dll_SendMessageA]
mov dword [esp + 0x2c], ecx
push eax
mov dword [esp + 0x2c], 0x86
mov dword [esp + 0x28], edi
call ebp
mov ecx, dword [0x475378]
push ebx
mov dword [esp + 0x2c], 1
mov eax, dword [ecx + 0x678]
push 1
mov edx, dword [esp + 0x18]
push 0x101b
mov dword [esp + 0x2c], eax
push edx
mov dword [esp + 0x2c], 0x3a
mov dword [esp + 0x28], 2
call ebp
mov ecx, dword [0x475378]
push ebx
mov dword [esp + 0x2c], 2
mov edx, dword [ecx + 0x67c]
push 2
mov eax, dword [esp + 0x18]
push 0x101b
mov dword [esp + 0x2c], edx
push eax
mov dword [esp + 0x2c], 0x52
mov dword [esp + 0x28], 2
call ebp
mov ecx, dword [0x475378]
push ebx
mov dword [esp + 0x2c], 3
mov edx, dword [ecx + 0x7d0]
push 3
mov dword [esp + 0x28], edx
push 0x101b
mov dword [esp + 0x28], 0x68
mov dword [esp + 0x24], edi
mov eax, dword [esp + 0x1c]
push eax
call ebp
mov ecx, dword [0x475378]
push ebx
mov dword [esp + 0x2c], 4
mov edx, dword [ecx + 0x4fc]
push 4
mov eax, dword [esp + 0x18]
push 0x101b
mov dword [esp + 0x2c], edx
push eax
mov dword [esp + 0x2c], 0x3c
mov dword [esp + 0x28], edi
call ebp
mov ecx, dword [0x475378]
push ebx
mov dword [esp + 0x2c], 5
mov edx, dword [ecx + 0x680]
push 5
mov eax, dword [esp + 0x18]
push 0x101b
mov dword [esp + 0x2c], edx
push eax
mov dword [esp + 0x2c], 0x62
mov dword [esp + 0x28], edi
call ebp
mov ecx, dword [esp + 0x2c]
mov edi, 0x467bb8
cmp ecx, 0x186
je 0x41712b
mov edi, 0x467c98
mov eax, dword [edi + 8]
lea ebx, [edi + 8]
mov ebp, esi
test eax, eax
je 0x417141
push eax
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ebp, eax
mov ecx, ebp
call fcn.00423220
cmp word [edi + 4], 0
je 0x4171cb
mov eax, dword [edi + 0xc]
test eax, eax
je 0x4171a3
mov ecx, dword [0x475378]
mov eax, dword [ecx + eax*4]
cmp byte [eax], 0x2b
jne 0x41719b
inc eax
push eax
push ebp
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0
xor eax, eax
mov ax, word [edi + 6]
add eax, 8
push eax
xor eax, eax
mov ax, word [edi + 4]
push eax
xor eax, eax
mov ax, word [edi + 2]
sub eax, 8
push eax
xor eax, eax
mov ax, word [edi]
push eax
push ebp
call dword [sym.imp.USER32.dll_MoveWindow]
push 1
jmp 0x4171cd
push eax
push ebp
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0
xor eax, eax
mov ax, word [edi + 6]
push eax
xor eax, eax
mov ax, word [edi + 4]
push eax
xor eax, eax
mov ax, word [edi + 2]
push eax
xor eax, eax
mov ax, word [edi]
push eax
push ebp
call dword [sym.imp.USER32.dll_MoveWindow]
push 1
jmp 0x4171cd
push 0
push ebp
add edi, 0x10
call dword [sym.imp.USER32.dll_ShowWindow]
cmp dword [ebx], 0
jne 0x41712b
mov ecx, dword [0x475378]
mov eax, dword [esp + 0x2c]
mov edx, dword [ecx + eax*4]
mov eax, dword [ecx + 0x670]
push edx
push eax
lea edx, [esp + 0x38]
push edx
call fcn.00455e30
lea ecx, [esp + 0x3c]
add esp, 0xc
push ecx
push esi
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, dword [esp + 0x10]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x60
ret