Function at 0x406010
Capabilities:
Create thread
Hide graphical window

Disassembly:
mov eax, dword [0x42301c]
sub esp, 0x348
push ebx
push ebp
push esi
push edi
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x3ea
push eax
call edi
mov ecx, dword [0x42301c]
push 0x3eb
push ecx
mov ebx, eax
call edi
mov edx, dword [0x42301c]
push 0x3ec
push edx
mov esi, eax
call edi
mov ebp, eax
mov eax, dword [0x42301c]
push 0x3f0
push eax
call edi
mov ecx, dword [esp + 0x35c]
mov eax, dword [ecx*8 + 0x423028]
dec eax
cmp eax, 8
ja case.default.0x406074
jmp dword [eax*4 + 0x4068b4]
mov edx, dword [0x422eb4]
mov edi, dword [sym.imp.USER32.dll_LoadStringA]
push 0x14a
push 0x422c1c
push 1
push edx
call edi
push 0x422c1c
push ebx
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, dword [0x422eb4]
push 0x14a
push 0x422c1c
push 2
push eax
call edi
push 0x422c1c
push esi
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov ecx, dword [0x422eb4]
push 0x14a
push 0x422c1c
push 3
push ecx
call edi
push 0x422c1c
push ebp
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, dword [0x422eb4]
lea edx, [esp + 0x18]
push 0x14a
push edx
push 0x2a
push eax
call edi
push 0x421c74
lea ecx, [esp + 0x1c]
push 0x422bbc
push ecx
push 0x422d68
call fcn.00411c30
mov eax, dword [0x422eb4]
add esp, 0x10
lea edx, [esp + 0x18]
push 0x14a
push edx
push 0x2b
push eax
call edi
push 0x421c74
lea ecx, [esp + 0x1c]
push 0x422bbc
push ecx
push 0x422c1c
call fcn.00411c30
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
add esp, 0x10
push 0
push ebx
call edi
push 5
push esi
call edi
push 1
push esi
call dword [sym.imp.USER32.dll_EnableWindow]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x348
ret
mov edx, dword [0x422eb4]
mov ebp, dword [sym.imp.USER32.dll_LoadStringA]
push 0x14a
push 0x422c1c
push 4
push edx
call ebp
push 0x422c1c
push esi
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 5
push ebx
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [0x422eb4]
push 0x14a
push 0x422d68
push 0x12
push eax
call ebp
mov edx, dword [0x422eb4]
lea ecx, [esp + 0x18]
push 0x14a
push ecx
push 0x13
push edx
call ebp
push 0x421c74
lea eax, [esp + 0x1c]
push 0x422bbc
push eax
push 0x422c1c
call fcn.00411c30
mov ecx, dword [0x42301c]
add esp, 0x10
push 1
push 0
push ecx
call dword [sym.imp.USER32.dll_InvalidateRect]
mov ebx, dword [esp + 0x35c]
push 0x3fb
mov edx, dword [ebx*8 + 0x42302c]
push edx
call edi
mov edi, eax
push edi
call dword [sym.imp.USER32.dll_SetFocus]
push 0
push 0
push 0xb1
push edi
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [ebx*8 + 0x42302c]
push 0x3fd
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
test eax, eax
je case.default.0x406074
push 0
push esi
call dword [sym.imp.USER32.dll_EnableWindow]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x348
ret
mov ecx, dword [0x422eb4]
mov ebp, dword [sym.imp.USER32.dll_LoadStringA]
push 0x14a
push 0x422c1c
push 2
push ecx
call ebp
push 0x422c1c
push esi
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 5
push ebx
call dword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [0x422eb4]
push 0x14a
push 0x422d68
push 0x14
push edx
call ebp
mov ecx, dword [0x422eb4]
lea eax, [esp + 0x18]
push 0x14a
push eax
push 0x15
push ecx
call ebp
push 0x421c74
lea edx, [esp + 0x1c]
push 0x422bbc
push edx
push 0x422c1c
call fcn.00411c30
mov eax, dword [0x42301c]
add esp, 0x10
push 1
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
push 0x400
jmp 0x406346
mov eax, dword [0x422eb4]
mov ebp, dword [sym.imp.USER32.dll_LoadStringA]
push 0x14a
push 0x422c1c
push 2
push eax
call ebp
push 0x422c1c
push esi
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 5
push ebx
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [0x422eb4]
push 0x14a
push 0x422d68
push 0x16
push ecx
call ebp
mov edx, dword [0x422eb4]
push 0x14a
push 0x422c1c
push 0x17
push edx
call ebp
mov eax, dword [0x42301c]
push 1
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
push 0x405
mov ecx, dword [esp + 0x360]
mov edx, dword [ecx*8 + 0x42302c]
push edx
call edi
mov esi, eax
push esi
call dword [sym.imp.USER32.dll_SetFocus]
push 0xffffffffffffffff
push 0
push 0xb1
push esi
call dword [sym.imp.USER32.dll_SendMessageA]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x348
ret
mov eax, dword [0x422eb4]
mov ebp, dword [sym.imp.USER32.dll_LoadStringA]
push 0x14a
push 0x422c1c
push 2
push eax
call ebp
push 0x422c1c
push esi
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 5
push ebx
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [0x422eb4]
push 0x14a
push 0x422d68
push 0x18
push ecx
call ebp
mov edx, dword [0x422eb4]
push 0x14a
push 0x422c1c
push 0x19
push edx
call ebp
mov eax, dword [0x42301c]
push 1
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
mov ecx, dword [esp + 0x35c]
push 0x429
mov edx, dword [ecx*8 + 0x42302c]
push edx
call edi
push eax
call dword [sym.imp.USER32.dll_SetFocus]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x348
ret
mov eax, dword [0x422eb4]
mov edi, dword [sym.imp.USER32.dll_LoadStringA]
push 0x14a
push 0x422c1c
push 5
push eax
call edi
push 0x422c1c
push esi
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov ecx, dword [0x422eb4]
push 0x14a
push 0x422d68
push 0x1a
push ecx
call edi
mov eax, dword [0x422eb4]
lea edx, [esp + 0x18]
push 0x14a
push edx
push 0x1b
push eax
call edi
push 0x421c74
lea ecx, [esp + 0x1c]
push 0x422bbc
push ecx
push 0x422c1c
call fcn.00411c30
lea edx, [esp + 0x174]
push edx
call fcn.00404420
mov ecx, dword [esp + 0x370]
add esp, 0x14
lea eax, [esp + 0x164]
mov edx, dword [ecx*8 + 0x42302c]
push eax
push 0x410
push edx
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
mov eax, dword [0x42301c]
push 1
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x348
ret
mov ecx, dword [0x422eb4]
mov edi, dword [sym.imp.USER32.dll_LoadStringA]
push 0x14a
push 0x422c1c
push 6
push ecx
call edi
push 0x422c1c
push esi
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov edx, dword [0x422eb4]
push 0x14a
push 0x422c1c
push 3
push edx
call edi
push 0x422c1c
push ebp
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0
push ebx
mov ebx, dword [sym.imp.USER32.dll_ShowWindow]
call ebx
push 5
push esi
call ebx
push 5
push ebp
call ebx
mov ecx, dword [0x422eb4]
lea eax, [esp + 0x18]
push 0x14a
push eax
push 0x1c
push ecx
call edi
push 0x421c74
lea edx, [esp + 0x1c]
push 0x422bbc
push edx
push 0x422d68
call fcn.00411c30
mov ecx, dword [0x422eb4]
add esp, 0x10
lea eax, [esp + 0x18]
push 0x14a
push eax
push 0x1d
push ecx
call edi
push 0x421c74
lea edx, [esp + 0x1c]
push 0x422bbc
push edx
push 0x422c1c
call fcn.00411c30
mov eax, dword [0x42301c]
add esp, 0x10
push 1
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x348
ret
mov ecx, dword [0x422eb4]
mov edi, dword [sym.imp.USER32.dll_LoadStringA]
push 0x14a
push 0x422c1c
push 2
push ecx
call edi
push 0x422c1c
push esi
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0
push ebx
mov ebx, dword [sym.imp.USER32.dll_EnableWindow]
call ebx
push 0
push esi
call ebx
push 0
push ebp
call ebx
mov al, byte [0x423082]
push 0x14a
test al, al
push 0x422d68
je 0x4066dd
mov edx, dword [0x422eb4]
push 0x22
push edx
call edi
mov ecx, dword [0x422eb4]
lea eax, [esp + 0x18]
push 0x14a
push eax
push 0x23
push ecx
call edi
push 0x421c74
lea edx, [esp + 0x1c]
push 0x422bbc
push edx
push 0x422c1c
call fcn.00411c30
mov eax, dword [0x42301c]
mov esi, dword [sym.imp.USER32.dll_InvalidateRect]
add esp, 0x10
push 1
push 0
push eax
call esi
lea ecx, [esp + 0x14]
lea edx, [esp + 0x10]
push ecx
push 0
push edx
push 0x4069d0
push 0
push 0
mov dword [esp + 0x28], 1
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
jne case.default.0x406074
push 1
push ebp
call ebx
mov eax, dword [0x422eb4]
push 0x14a
push 0x422d68
push 0x28
push eax
call edi
mov edx, dword [0x422eb4]
lea ecx, [esp + 0x18]
push 0x14a
push ecx
push 0x29
push edx
call edi
push 0x421c74
lea eax, [esp + 0x1c]
push 0x422bbc
push eax
push 0x422c1c
call fcn.00411c30
mov ecx, dword [0x42301c]
add esp, 0x10
push 1
push 0
push ecx
call esi
mov edx, dword [0x42301c]
push 0x60101
push edx
call fcn.00402e10
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x348
ret
mov eax, dword [0x422eb4]
push 0x1e
push eax
call edi
mov edx, dword [0x422eb4]
lea ecx, [esp + 0x18]
push 0x14a
push ecx
push 0x1f
push edx
call edi
push 0x421c74
lea eax, [esp + 0x1c]
push 0x422bbc
push eax
push 0x422c1c
call fcn.00411c30
mov ecx, dword [0x42301c]
mov esi, dword [sym.imp.USER32.dll_InvalidateRect]
add esp, 0x10
push 1
push 0
push ecx
call esi
lea edx, [esp + 0x14]
lea eax, [esp + 0x10]
push edx
push 0
push eax
push 0x4068e0
push 0
push 0
mov dword [esp + 0x28], 1
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
jne case.default.0x406074
push 1
push ebp
call ebx
mov ecx, dword [0x422eb4]
push 0x14a
push 0x422d68
push 0x26
push ecx
call edi
mov eax, dword [0x422eb4]
lea edx, [esp + 0x18]
push 0x14a
push edx
push 0x27
push eax
call edi
push 0x421c74
lea ecx, [esp + 0x1c]
push 0x422bbc
push ecx
push 0x422c1c
call fcn.00411c30
mov edx, dword [0x42301c]
add esp, 0x10
push 1
push 0
push edx
call esi
mov eax, dword [0x42301c]
push 0x50101
push eax
call fcn.00402e10
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x348
ret
mov ecx, dword [0x422eb4]
mov edi, dword [sym.imp.USER32.dll_LoadStringA]
push 0x14a
push 0x422c1c
push 7
push ecx
call edi
push 0x422c1c
push esi
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 1
push esi
call dword [sym.imp.USER32.dll_EnableWindow]
mov al, byte [0x423082]
lea edx, [esp + 0x18]
test al, al
push 0x14a
push edx
je 0x406842
mov eax, dword [0x422eb4]
push 0x2e
push eax
call edi
push 0x421c74
lea ecx, [esp + 0x1c]
push 0x422bbc
push ecx
push 0x422d68
call fcn.00411c30
add esp, 0x10
lea edx, [esp + 0x18]
push 0x14a
push edx
push 0x2f
jmp 0x406874
mov eax, dword [0x422eb4]
push 0x2c
push eax
call edi
push 0x421c74
lea ecx, [esp + 0x1c]
push 0x422bbc
push ecx
push 0x422d68
call fcn.00411c30
add esp, 0x10
lea edx, [esp + 0x18]
push 0x14a
push edx
push 0x2d
mov eax, dword [0x422eb4]
push eax
call edi
push 0x421c74
lea ecx, [esp + 0x1c]
push 0x422bbc
push ecx
push 0x422c1c
call fcn.00411c30
mov edx, dword [0x42301c]
add esp, 0x10
push 1
push 0
push edx
call dword [sym.imp.USER32.dll_InvalidateRect]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x348
ret