Function at 0x40aeb0
Capabilities:
Hide graphical window
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x42b9a8
push 0x4179a0
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [section..data]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov dword [ebp - 4], 0
mov dword [ebp - 4], 1
push 1
push 0xffffffffffffffff
push 0x100c
push 0x800f
push 0x800e
push dword [0x433624]
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
call ebx
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov esi, eax
mov dword [ebp - 0x20], esi
cmp esi, 0xffffffff
jne 0x40afde
push 0x1000a
call fcn.00412ac8
add esp, 4
mov esi, eax
test esi, esi
jne 0x40af57
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x40afb4
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push 9
test eax, eax
jle 0x40af93
mov byte [esi + 0xffff], 0
push esi
push str.EditShieldApplication
push 1
mov edx, 0x324
mov ecx, str...GuiTab.cpp
call fcn.00401280
add esp, 0x10
jmp 0x40afab
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push esi
call fcn.00412a90
add esp, 4
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push section..data
call fcn.0041dd90
add esp, 0xc
mov eax, 9
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x433830
push 0x433838
push dword [0x42f1b4]
call dword [sym.imp.mbae_api.dll__MbaeLoadProtectedApplications_12]
mov edi, eax
test edi, edi
je 0x40b0ae
push 0x1000a
call fcn.00412ac8
add esp, 4
mov esi, eax
test esi, esi
jne 0x40b02b
push str.Memory_allocation_error_in_log_file_n
call fcn.00412f3c
add esp, 4
push str.Memory_allocation_error_in_log_file_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x40b087
push 0x4283c8
push 0xffff
push esi
call fcn.00412a74
add esp, 0xc
push edi
test eax, eax
jle 0x40b066
mov byte [esi + 0xffff], 0
push esi
push str.EditShieldApplication
push 1
mov edx, 0x32a
mov ecx, str...GuiTab.cpp
call fcn.00401280
add esp, 0x10
jmp 0x40b07e
push str.Error__d_in_swprintf_s_n
call fcn.00412f3c
add esp, 8
push str.Error_in_swprintf_s_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push esi
call fcn.00412a90
add esp, 4
push 0xfffffffffffffffe
lea eax, [ebp - 0x10]
push eax
push section..data
call fcn.0041dd90
add esp, 0xc
mov eax, edi
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x433830]
dec ecx
mov dword [ebp - 0x1c], ecx
mov edx, dword [0x433838]
mov edi, edi
test ecx, ecx
jle 0x40b0e2
test esi, esi
jle 0x40b0e2
imul eax, ecx, 0xa30
cmp dword [eax + edx + 0x620], 0
jne 0x40b0dc
dec esi
mov dword [ebp - 0x20], esi
dec ecx
mov dword [ebp - 0x1c], ecx
jmp 0x40b0c0
mov dword [ebp - 0x20], ecx
imul edi, ecx, 0xa30
lea eax, [edi + edx]
push eax
push 0x3f3
push dword [0x434884]
mov esi, dword [sym.imp.USER32.dll_SetDlgItemTextW]
call esi
mov eax, dword [0x433838]
add eax, 0x208
add eax, edi
push eax
push 0x3f4
push dword [0x434884]
call esi
mov eax, dword [0x433838]
add eax, 0x410
add eax, edi
push eax
push 0x104
push 0x434c50
call fcn.00413c8c
add esp, 0xc
mov edx, dword [0x433838]
mov eax, dword [edi + edx + 0x61c]
mov dword [0x42e1d0], eax
xor ecx, ecx
mov dword [ebp - 0x1c], ecx
cmp ecx, 6
jge 0x40b183
mov eax, dword [edi + edx + 0x618]
cmp eax, dword [ecx*8 + 0x4294a4]
jne 0x40b1b8
push 0
push ecx
push 0x14e
push 0x3f5
push dword [0x434884]
call ebx
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 5
push dword [0x434884]
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 4], 0
call fcn.0040b1bb
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
inc ecx
jmp 0x40b14f