Function at 0x4852d0
Capabilities:
Inspect load icon resource
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x218
mov eax, dword [0x490074]
xor eax, esp
mov dword [esp + 0x214], eax
push esi
push edi
mov edi, dword [ebp + 8]
xorps xmm0, xmm0
push 0x65
push edi
movaps xmmword [esp + 0x28], xmm0
movaps xmmword [esp + 0x38], xmm0
movq qword [esp + 0x48], xmm0
call dword [sym.imp.USER32.dll_LoadIconW]
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov esi, eax
lea eax, [esp + 0x70]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
mov ecx, dword [esp + 0x78]
and ecx, 0xf0
or ecx, 5
mov word [esp + 0x78], cx
push dword [esp + 0x78]
push esi
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea eax, [esp + 0x20]
push eax
call dword [sym.imp.USER32.dll_RegisterClassW]
push 0x6e
push 0
call dword [sym.imp.USER32.dll_LoadBitmapW]
push eax
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
call dword [0x4933c0]
test eax, eax
jne 0x4855e1
call fcn.00485090
test eax, eax
je 0x4855e1
push 0x64
call dword [0x4933a4]
cmp dword [0x4933d8], 0x10
mov ecx, 0x4933c4
cmovae ecx, dword [0x4933c4]
call fcn.004851a0
test eax, eax
jne 0x4855e1
cmp dword [0x4933f0], 0x10
mov ecx, 0x4933dc
cmovae ecx, dword [0x4933dc]
call fcn.004851a0
test eax, eax
jne 0x4855e1
push eax
push edi
push eax
push eax
push 0x80000000
push 0x80000000
push 0x80000000
push 0x80000000
push 0xcf0000
push 0x40f95c
lea eax, [esp + 0x178]
push eax
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
lea ecx, [esp + 0x58]
call fcn.00483e10
movups xmm0, xmmword [0x40f978]
mov eax, dword [esp + 0x68]
lea ecx, [esp + 0x70]
mov dword [esp + 0x14], eax
lea edx, [ecx + 1]
movups xmmword [esp + 0x90], xmm0
movzx eax, byte [0x40f9a8]
movups xmm0, xmmword [0x40f988]
mov byte [esp + 0xc0], al
movzx eax, byte [0x40fa2c]
movups xmmword [esp + 0xa0], xmm0
mov byte [esp + 0x80], al
movups xmm0, xmmword [0x40f998]
movups xmmword [esp + 0xb0], xmm0
movups xmm0, xmmword [0x40f9ac]
movups xmmword [esp + 0xd0], xmm0
movups xmm0, xmmword [0x40f9bc]
movups xmmword [esp + 0xe0], xmm0
movups xmm0, xmmword [0x40f9cc]
movups xmmword [esp + 0xf0], xmm0
movq xmm0, qword [0x40f9dc]
movq qword [esp + 0x100], xmm0
movups xmm0, xmmword [0x40f9e4]
movups xmmword [esp + 0x110], xmm0
movups xmm0, xmmword [0x40f9f4]
movups xmmword [esp + 0x120], xmm0
movups xmm0, xmmword [0x40fa04]
movups xmmword [esp + 0x130], xmm0
movq xmm0, qword [0x40fa14]
movq qword [esp + 0x140], xmm0
movups xmm0, xmmword [0x40fa1c]
movups xmmword [esp + 0x70], xmm0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4854d8
sub ecx, edx
lea esi, [esp + 0x110]
mov dword [esp + 0x1c], ecx
lea ecx, [esi + 1]
nop
mov al, byte [esi]
inc esi
test al, al
jne 0x4854f0
lea edi, [esp + 0x90]
sub esi, ecx
lea ecx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x485503
sub edi, ecx
lea ecx, [esp + 0xd0]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x485516
sub ecx, edx
cmp dword [esp + 0x6c], 0x10
mov edx, dword [esp + 0x14]
mov dword [esp + 0x18], ecx
lea ecx, [esp + 0x58]
cmovae ecx, dword [esp + 0x58]
push ecx
call fcn.00483a60
add esp, 4
lea eax, [esp + 0x90]
cmp dword [esp + 0x6c], 0x10
lea ecx, [esp + 0x58]
cmovae ecx, dword [esp + 0x58]
push edi
mov edi, dword [esp + 0x18]
mov edx, edi
push eax
call fcn.00483aa0
cmp dword [esp + 0x74], 0x10
lea eax, [esp + 0xd8]
push dword [esp + 0x20]
lea ecx, [esp + 0x64]
mov edx, edi
cmovae ecx, dword [esp + 0x64]
push eax
call fcn.00483aa0
cmp dword [esp + 0x7c], 0x10
lea eax, [esp + 0x68]
mov edx, dword [esp + 0x2c]
lea ecx, [esp + 0x80]
cmovae eax, dword [esp + 0x68]
push edi
push eax
call fcn.00483d20
cmp dword [esp + 0x84], 0x10
lea eax, [esp + 0x70]
push edi
cmovae eax, dword [esp + 0x74]
lea ecx, [esp + 0x12c]
push eax
mov edx, esi
call fcn.00483d20
add esp, 0x20
lea ecx, [esp + 0x58]
cmp dword [esp + 0x6c], 0x10
cmovae ecx, dword [esp + 0x58]
call fcn.00484050
lea ecx, [esp + 0x58]
call fcn.00416c10
push 0
call fcn.0045c7eb
int3