Function at 0x414dad
Capabilities:
Inspect load icon resource

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x48195c
mov eax, dword fs:[0]
push eax
sub esp, 0x2b0
mov eax, dword [0x49e0b0]
xor eax, esp
mov dword [esp + 0x2a8], eax
push ebx
push esi
push edi
mov eax, dword [0x49e0b0]
xor eax, esp
push eax
lea eax, [esp + 0x2c0]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
xor eax, eax
push 0x206
mov word [esp + 0xb0], ax
xor ebx, ebx
lea eax, [esp + 0xb2]
push ebx
push eax
mov dword [esp + 0x2c], esi
mov dword [esp + 0x24], edi
call fcn.004667e0
add esp, 0xc
push ebx
lea eax, [esp + 0xb0]
push eax
movzx eax, word [ebp + 0x10]
push 0x24
push 1
push 0x48818c
push eax
push esi
call dword [sym.imp.USER32.dll_LoadIconW]
push eax
push 0x48819c
push edi
push esi
mov edi, 0x104
call fcn.004275a0
add esp, 0x24
test eax, eax
jne 0x414e78
mov ecx, dword [esp + 0x2c0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2a8]
xor ecx, esp
call fcn.00464d54
mov esp, ebp
pop ebp
ret
cmp word [esp + 0xac], bx
jne 0x414e94
push dword [ebp + 0x10]
push dword [esp + 0x1c]
push esi
call fcn.00414dad
add esp, 0xc
jmp 0x414e54
lea eax, [esp + 0xac]
push eax
lea esi, [esp + 0x28]
mov dword [esp + 0x20], 1
call fcn.00404522
mov eax, esi
push eax
lea eax, [esp + 0x78]
push eax
mov dword [esp + 0x2d0], ebx
call fcn.004012f3
pop ecx
pop ecx
xor edi, edi
push ebx
inc edi
push edi
mov byte [esp + 0x2d0], 2
call fcn.00404960
cmp dword [esp + 0x8c], 0x10
mov eax, dword [esp + 0x78]
jae 0x414ee7
lea eax, [esp + 0x78]
push dword [esp + 0x88]
push eax
lea eax, [esp + 0x98]
push eax
call fcn.00427c0d
add esp, 0xc
push str.c7b6f156f689ab10d397df6461de7f6bd87f5ff6
lea eax, [esp + 0x94]
mov byte [esp + 0x2cc], 3
call fcn.00405b4c
pop ecx
test al, al
jne 0x415062
push str.manageCfg
lea ecx, [esp + 0x28]
call fcn.004044d0
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x60]
push eax
mov byte [esp + 0x2d0], 4
call fcn.00413739
pop ecx
pop ecx
push ebx
push edi
lea ecx, [esp + 0x2c]
mov byte [esp + 0x2d0], 6
call fcn.00404863
push str.pswd:
lea ecx, [esp + 0x44]
call fcn.004044d0
lea eax, [esp + 0x40]
push eax
lea eax, [esp + 0x60]
push eax
mov byte [esp + 0x2d0], 7
call fcn.0040e3cb
pop ecx
pop ecx
push ebx
push edi
lea ecx, [esp + 0x48]
mov byte [esp + 0x1f], al
mov byte [esp + 0x2d0], 6
call fcn.00404863
cmp byte [esp + 0x17], bl
je 0x414fe6
lea eax, [esp + 0x40]
push eax
push ecx
lea eax, [esp + 0x64]
push eax
mov edx, str.pswd
call fcn.0041eee7
pop ecx
push eax
call fcn.0041e013
mov ecx, eax
lea eax, [esp + 0x90]
mov byte [esp + 0x2c8], 8
call fcn.00405b71
push ebx
push edi
lea ecx, [esp + 0x48]
mov byte [esp + 0x1f], al
call fcn.00404863
cmp byte [esp + 0x17], bl
jmp 0x414ffa
push str.e0db72c158a7c82c08d868688263265f9dec1813
lea eax, [esp + 0x94]
call fcn.00405b4c
pop ecx
test al, al
je 0x415000
mov dword [esp + 0x1c], ebx
lea esi, [esp + 0x5c]
mov byte [esp + 0x2c8], 3
call fcn.0041de24
cmp dword [esp + 0x1c], ebx
je 0x415062
push 0x10
push 0x486298
push 0x48822c
push dword [esp + 0x24]
call dword [sym.imp.USER32.dll_MessageBoxW]
push dword [ebp + 0x10]
push dword [esp + 0x1c]
push dword [esp + 0x28]
call fcn.00414dad
add esp, 0xc
mov esi, eax
push ebx
push edi
lea ecx, [esp + 0x98]
call fcn.00404863
push ebx
push edi
lea ecx, [esp + 0x7c]
call fcn.00404863
mov eax, esi
jmp 0x414e54
mov esi, edi
jmp 0x415042