Function at 0x45be49
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x4e0f34
call fcn.004b0604
sub esp, 0x54
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
xor esi, esi
mov ebx, ecx
cmp edi, esi
je 0x45be7d
mov eax, dword [ebx + 0x58]
cmp eax, edi
je 0x45c2aa
mov ecx, dword [0x524bc4]
cmp dword [ecx + 0x88], esi
je 0x45be85
push 1
pop eax
jmp 0x45c2ac
cmp eax, esi
je 0x45beb9
mov ecx, dword [ebx + 4]
push esi
push eax
call fcn.004c5d5e
mov ecx, dword [ebx + 4]
push esi
push edi
mov dword [ebp - 0x18], eax
call fcn.004c5d5e
cmp eax, dword [ebp - 0x18]
je 0x45beb9
cmp dword [ebp + 0xc], esi
je 0x45beb9
mov eax, dword [ebx + 0x58]
lea ecx, [ebx + 0x60]
add eax, 0xc
push eax
call fcn.004c5a8f
mov ecx, dword [ebx + 0x58]
cmp ecx, esi
je 0x45bec5
mov eax, dword [ecx]
call dword [eax + 0x20]
lea ecx, [ebx + 0x10]
mov dword [ebx + 0x58], edi
call fcn.0045b512
mov eax, dword [ebx + 0x58]
add eax, 0xc
push eax
lea eax, [ebp + 0xc]
push str.Display_screen:
push eax
call fcn.004c7873
mov eax, dword [eax]
push 1
push esi
push esi
push eax
mov eax, dword [0x524bc4]
mov dword [ebp - 4], esi
lea ecx, [eax + 0x1e4]
call fcn.0047bc79
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.004c756a
mov ecx, dword [ebx + 0x58]
cmp dword [ecx + 0x1bc], esi
jne 0x45bf1b
call fcn.0046022f
lea edx, [ebp - 0x2c]
mov dword [ebp - 0x2c], esi
push edx
mov dword [ebp - 0x28], esi
sub esp, 0x10
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
lea esi, [ebp - 0x24]
mov edi, esp
mov ecx, dword [ebx + 0x58]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor edi, edi
mov dword [ebx + 0x4c], ecx
mov eax, dword [ecx]
lea esi, [ebx + 0x10]
push edi
push esi
call dword [eax + 0x14]
mov ecx, dword [ebx + 0x58]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x1c]
push eax
push esi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x18], edi
call fcn.0045e808
lea eax, [ebp - 0x44]
push eax
push dword [ebx + 0x2c]
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [ebx + 0x58]
mov ecx, dword [eax + 0x1a8]
mov eax, dword [eax + 0x1ac]
cmp ecx, edi
je 0x45bf96
sub ecx, dword [ebp - 0x3c]
add ecx, dword [ebp - 0x44]
mov edx, ecx
jmp 0x45bf98
xor edx, edx
cmp eax, edi
je 0x45bfa6
mov ecx, dword [ebp - 0x40]
sub ecx, dword [ebp - 0x38]
add ecx, eax
jmp 0x45bfa8
xor ecx, ecx
cmp edx, edi
jne 0x45bfb0
cmp ecx, edi
je 0x45c007
lea eax, [ebp - 0x34]
mov dword [ebp - 0x28], ecx
push eax
mov ecx, esi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], edx
call fcn.004ce33f
lea eax, [ebp - 0x24]
push eax
push dword [ebx + 0x2c]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x30]
push 1
add eax, ecx
mov ecx, dword [ebp - 0x18]
add ecx, edx
mov dword [ebp - 0x1c], eax
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], ecx
sub ecx, dword [ebp - 0x20]
push ecx
push eax
push dword [ebp - 0x20]
mov ecx, esi
push dword [ebp - 0x24]
call fcn.004cabbe
push ecx
mov edi, esp
mov dword [ebp + 0xc], esp
push ecx
mov ecx, esp
mov dword [ebp + 0xc], esp
push str.IDS_WINDOW_TITLE
call fcn.004c75d8
mov ecx, dword [ebx + 0x58]
push edi
add ecx, 0x1b0
call fcn.0047c0dc
mov ecx, dword [ebx + 0x58]
lea eax, [ebp - 0x10]
push eax
call fcn.004604cf
and byte [ebp - 0x45], 0
push 7
push ecx
lea eax, [ebp - 0x60]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
mov dword [ebp - 4], 1
mov byte [ebp - 0x60], 0
mov byte [ebp - 0x5f], 0x2a
mov byte [ebp - 0x5e], 0x27
mov byte [ebp - 0x5d], 0x53
mov byte [ebp - 0x5c], 0x75
mov byte [ebp - 0x5b], 0x72
mov byte [ebp - 0x5a], 0x62
mov byte [ebp - 0x59], 0x52
mov byte [ebp - 0x58], 0x77
mov byte [ebp - 0x57], 0x63
mov byte [ebp - 0x56], 0x66
mov byte [ebp - 0x55], 0x73
mov byte [ebp - 0x54], 0x62
mov byte [ebp - 0x53], 0x27
mov byte [ebp - 0x52], 0x53
mov byte [ebp - 0x51], 0x75
mov byte [ebp - 0x50], 0x6e
mov byte [ebp - 0x4f], 0x66
mov byte [ebp - 0x4e], 0x6b
mov byte [ebp - 0x4d], 0x27
mov byte [ebp - 0x4c], 0x51
mov byte [ebp - 0x4b], 0x62
mov byte [ebp - 0x4a], 0x75
mov byte [ebp - 0x49], 0x74
mov byte [ebp - 0x48], 0x6e
mov byte [ebp - 0x47], 0x68
mov byte [ebp - 0x46], 0x69
call fcn.004c75d8
lea eax, [ebp - 0x14]
mov ecx, ebx
push eax
call fcn.0045c4df
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0x10]
push eax
mov byte [ebp - 4], 2
call fcn.004c7982
push dword [ebp - 0x10]
mov ecx, esi
call fcn.004cab32
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push str.On_Preload
call fcn.004c75d8
mov ecx, dword [ebx + 0x58]
call fcn.0045fd24
mov esi, eax
test esi, esi
je 0x45c1c4
mov eax, dword [ebx + 0x58]
mov edi, 0x9b
mov ecx, dword [eax + 4]
cmp ecx, edi
je 0x45c126
cmp ecx, 0x82
je 0x45c126
cmp ecx, 0xaf
jne 0x45c130
mov dword [eax + 0x30c], 1
mov eax, dword [str.pRdR]
mov dword [ebp + 8], eax
push dword [esi + 8]
mov eax, dword [ebx + 0x58]
mov byte [ebp - 4], 3
push dword [eax + 0xc]
lea eax, [ebp + 8]
push str._s____s
push eax
call fcn.004c42fa
add esp, 0xc
mov ecx, esp
mov dword [ebp + 0xc], esp
push 0x524a50
call fcn.004c75d8
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
mov byte [ebp - 4], 4
call fcn.004c72df
push ecx
add esi, 0xc
mov ecx, esp
mov dword [ebp - 0x28], esp
push esi
mov byte [ebp - 4], 5
call fcn.004c72df
mov ecx, dword [ebx + 0x58]
mov byte [ebp - 4], 3
call fcn.0045fc9a
mov eax, dword [ebx + 0x58]
mov ecx, dword [eax + 4]
cmp ecx, edi
je 0x45c1b1
cmp ecx, 0x82
je 0x45c1b1
cmp ecx, 0xaf
jne 0x45c1b8
and dword [eax + 0x30c], 0
lea ecx, [ebp + 8]
mov byte [ebp - 4], 2
call fcn.004c756a
call fcn.0040f94a
xor edi, edi
test eax, eax
je 0x45c1da
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_IsIconic]
mov edi, eax
push dword [ebx + 0x2c]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x45c1fa
cmp dword [ebx + 0x5c], eax
jne 0x45c1fa
test edi, edi
jne 0x45c1fa
push 5
lea ecx, [ebx + 0x10]
call fcn.004cac4e
mov eax, dword [ebx + 0x58]
mov esi, dword [eax + 0x18]
test esi, esi
je 0x45c219
mov eax, esi
mov esi, dword [esi]
mov ecx, dword [eax + 8]
test ecx, ecx
je 0x45c200
mov eax, dword [ecx]
push dword [ecx + 0xc]
call dword [eax + 0x18]
jmp 0x45c200
push dword [ebx + 0x2c]
mov esi, dword [sym.imp.USER32.dll_IsWindow]
call esi
test eax, eax
je 0x45c292
mov eax, dword [ebx + 0x58]
mov eax, dword [eax + 0x1c0]
test eax, eax
je 0x45c249
push dword [eax + 0x1c]
call esi
test eax, eax
je 0x45c249
mov eax, dword [ebx + 0x58]
mov ecx, dword [eax + 0x1c0]
jmp 0x45c278
lea eax, [ebx + 0x10]
test eax, eax
je 0x45c253
mov eax, dword [eax + 0x1c]
push 0
push eax
push dword [ebx + 0x2c]
call dword [sym.imp.USER32.dll_GetNextDlgTabItem]
push eax
call fcn.004c806d
test eax, eax
je 0x45c27d
mov ecx, dword [ebx + 0x58]
test edi, edi
mov dword [ecx + 0x1c0], eax
jne 0x45c27d
mov ecx, eax
call fcn.004cacb7
mov ecx, dword [ebx + 0x58]
mov eax, dword [ecx]
call dword [eax + 0x2c]
push 1
push 0
push dword [ebx + 0x2c]
call dword [sym.imp.USER32.dll_InvalidateRect]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.004c756a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.004c756a
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 8