Function at 0x4e232c
Capabilities:
Create thread
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x56afe8]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
push esi
push edi
mov edi, ecx
push 0x434
push dword [edi + 4]
mov dword [edi + 0x40], eax
call ebx
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push eax
call esi
push 0x614
push dword [edi + 4]
call ebx
push 0
push eax
call esi
push 0x517
push dword [edi + 4]
call ebx
push 0
push eax
call esi
push 0x40d
push dword [edi + 4]
call ebx
push 0
push eax
call esi
push 0x43e
push dword [edi + 4]
call ebx
push 0
push eax
call esi
push 0x40e
push dword [edi + 4]
call ebx
push 0
push eax
call esi
push 0x5f9
push dword [edi + 4]
call ebx
push 0
push eax
call esi
push 0x443
push dword [edi + 4]
call ebx
push 0
push eax
call esi
push 0x55a
push dword [edi + 4]
call ebx
push 0
push eax
call esi
push 0
push 0
mov ecx, edi
call fcn.004e2116
mov eax, dword [ebp + 8]
cmp eax, 7
ja case.default.0x4e23f1
jmp dword [eax*4 + 0x4e2858]
push 0x434
push dword [edi + 4]
call ebx
push 5
push eax
call esi
xor esi, esi
lea eax, [ebp - 0x20]
push esi
push eax
lea eax, [ebp - 0x24]
mov dword [ebp - 0x20], esi
push eax
mov ecx, edi
call fcn.004e0eb1
mov ecx, dword [ebp - 0x24]
lea ecx, [ecx - 0x10]
call fcn.004042e9
push 0x434
push dword [edi + 4]
call ebx
push 0x40
push 0x22
push 0x22
push 0xdf
push dword [ebp - 0x20]
push esi
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push esi
push esi
push edi
push 0x4e1216
push esi
push esi
call sub.msvcrt.dll__beginthreadex
add esp, 0x18
test eax, eax
je case.default.0x4e23f1
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp case.default.0x4e23f1
push 0x614
push dword [edi + 4]
call ebx
push 5
push eax
call esi
push 1
push 1
mov ecx, edi
call fcn.004e2116
push 0x614
push dword [edi + 4]
call ebx
push 0x40
push 0x11
mov esi, eax
call fcn.0041e73f
sub eax, 0x2712
neg eax
sbb eax, eax
and eax, 0xd5
add eax, 0x108
push eax
push 0xe0
push 0xcb
push 0
push esi
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0x5470cc
lea eax, [ebp - 0x24]
mov ecx, edi
push eax
call fcn.004e0e50
push dword [eax]
push 0x614
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
mov ecx, dword [ebp - 0x24]
lea ecx, [ecx - 0x10]
jmp 0x4e27e9
push 0x517
push dword [edi + 4]
call ebx
push 5
push eax
call esi
push 0x40d
push dword [edi + 4]
call ebx
push 5
push eax
call esi
push 0
push 1
mov ecx, edi
call fcn.004e2116
push 0x5495b8
mov esi, 0x40d
push esi
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
push esi
push dword [edi + 4]
call ebx
push 1
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp case.default.0x4e23f1
push 0x517
push dword [edi + 4]
call ebx
push 5
push eax
call esi
push 0x43e
push dword [edi + 4]
call ebx
push 5
push eax
call esi
push 0x40e
push dword [edi + 4]
call ebx
push 5
push eax
call esi
push 0
push 1
mov ecx, edi
call fcn.004e2116
lea esi, [edi + 0x44]
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
jne 0x4e25c1
lea eax, [ebp - 0x1c]
push 0x549624
push eax
call fcn.00459f5b
pop ecx
pop ecx
cmp dword [eax + 0x14], 8
jb 0x4e259a
mov eax, dword [eax]
push eax
mov ecx, esi
call fcn.00404527
lea ecx, [ebp - 0x1c]
call fcn.00410d88
push 0
push 0
push 0x402
push dword [edi + 0xb0]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x4e25c9
lea ecx, [edi + 0x48]
call fcn.00467bbb
call fcn.00403a64
push eax
lea ecx, [ebp - 0x20]
call fcn.00402a6b
push 0x53526c
lea ecx, [ebp - 0x1c]
call fcn.004108e3
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [edi + 0x94]
call fcn.004dd0aa
mov eax, dword [ebp - 0x28]
add eax, 0x28
cmp dword [eax + 0x14], 8
jb 0x4e2605
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x20]
push str.PDown:___sh330
push eax
call fcn.00415254
add esp, 0xc
lea ecx, [ebp - 0x1c]
call fcn.00410d88
push edi
push esi
lea eax, [ebp - 0x20]
push eax
lea ecx, [edi + 0x48]
call fcn.00467b14
test eax, eax
jne 0x4e263a
push 6
mov ecx, edi
call fcn.004e232c
mov ecx, dword [ebp - 0x20]
jmp 0x4e24e6
push 0x517
push dword [edi + 4]
call ebx
push 5
push eax
call esi
push 0x40d
push dword [edi + 4]
call ebx
push 5
push eax
call esi
xor esi, esi
mov ecx, edi
push esi
push 1
call fcn.004e2116
push 0x52b738
push 0x40d
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
push 0x40d
push dword [edi + 4]
call ebx
push esi
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push esi
push 0x1f4
push 1
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SetTimer]
push esi
push esi
push edi
push 0x4e10e0
jmp 0x4e244f
push 0x517
push dword [edi + 4]
call ebx
push 5
push eax
call esi
push 0x40d
push dword [edi + 4]
call ebx
push 5
push eax
call esi
push 0
push 1
mov ecx, edi
call fcn.004e2116
push str._._fsize13_boldtrue_colorrgb_255_255_255____._
jmp 0x4e251c
push 0x517
push dword [edi + 4]
call ebx
push 5
push eax
call esi
push 0x614
push dword [edi + 4]
call ebx
push 5
push eax
call esi
push 0
push 1
mov ecx, edi
call fcn.004e2116
push 0x614
push dword [edi + 4]
call ebx
push 0x40
push 0x11
mov esi, eax
call fcn.0041e73f
sub eax, 0x2712
neg eax
sbb eax, eax
and eax, 0xd5
add eax, 0x6c
push eax
push 0x117
push 0x177
push 0
push esi
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0x5496a0
jmp 0x4e24c8
push 0x5f9
push dword [edi + 4]
call ebx
push 5
push eax
call esi
push 0x443
push dword [edi + 4]
call ebx
push 5
push eax
call esi
xor esi, esi
push esi
push esi
push 0x402
push dword [edi + 0xb4]
call dword [sym.imp.USER32.dll_SendMessageW]
push esi
push 0x1f4
push 2
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SetTimer]
call fcn.00403a64
push eax
lea ecx, [ebp - 0x20]
call fcn.00402a6b
push dword [edi + 0x38]
lea eax, [ebp - 0x20]
push 0x5496b0
push eax
call fcn.00415254
mov esi, dword [ebp - 0x20]
add esp, 0xc
push esi
push 0x443
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
xor eax, eax
push eax
push eax
push edi
push 0x4e0db6
push eax
push eax
call sub.msvcrt.dll__beginthreadex
add esp, 0x18
test eax, eax
je 0x4e27e6
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esi - 0x10]
call fcn.004042e9
push str.help
lea ecx, [ebp - 0x1c]
call fcn.004108e3
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [edi + 0x94]
call fcn.004dd0aa
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x1c]
mov esi, dword [eax + 0x38]
call fcn.00410d88
test esi, esi
jne 0x4e2832
push 0x517
push dword [edi + 4]
call ebx
push esi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, edi
call fcn.004e222c
push 1
push 0
push dword [edi + 4]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00522d04
leave
ret 4