Function at 0x4d29a0
Capabilities:
Hide graphical window

Disassembly:
sub esp, 0x204
mov eax, dword [0x6dc0d0]
xor eax, esp
mov dword [esp + 0x200], eax
cmp dword [0x6ddda0], 0
push ebp
push edi
mov edi, dword [esp + 0x210]
mov ebp, ecx
je 0x4d359b
cmp dword [ebp + 0xbc8], 0
jne 0x4d359b
cmp dword [0x6ec210], 0
je 0x4d359b
cmp dword [0x6ddde0], 7
jne 0x4d359b
push ebx
push 0x58
mov ecx, edi
call fcn.00529a10
mov ebx, 1
cmp eax, ebx
jne 0x4d2a1b
mov ecx, dword [0x6de5a0]
mov edx, dword [0x6ec210]
mov eax, dword [ecx]
mov eax, dword [eax + 0x64]
push edx
push ebx
call eax
cmp dword [0x6fc210], 0
mov dword [esp + 0x1c], 0
je 0x4d2a38
cmp dword [ebp + 0xbc4], ebx
jne 0x4d2a38
mov dword [esp + 0x1c], ebx
push 0x38
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d2a4a
mov ebx, 4
push 0x1d
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d2a5d
and ebx, 0xfffffffe
or ebx, 2
push 0x2a
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d2a70
and ebx, 0xfffffffe
or ebx, 8
push esi
xor esi, esi
cmp dword [esp + 0x20], 0
je 0x4d2a91
mov ecx, dword [ebp + 0xbc4]
imul ecx, ecx, 0x29
add ecx, esi
add ecx, ecx
cmp dword [ebp + ecx*8 + 0x52c], 0
je 0x4d2ae3
mov eax, dword [ebp + 0xbc4]
imul eax, eax, 0x29
add eax, esi
mov ecx, eax
add ecx, ecx
test dword [ebp + ecx*8 + 0x524], ebx
je 0x4d2ae3
add eax, 0x53
add eax, eax
cmp dword [ebp + eax*8], 0
je 0x4d2ac7
movzx edx, word [ebp + ecx*8 + 0x528]
push edx
mov ecx, edi
call fcn.005299b0
jmp 0x4d2ad7
movzx eax, word [ebp + ecx*8 + 0x528]
push eax
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d2ae3
push esi
mov ecx, ebp
call fcn.004d1380
inc esi
cmp esi, 0x29
jl 0x4d2a73
push 0x13
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d2bb4
push 0x38
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d2bb4
push 0
push 0x3880
mov ecx, 0x7191a8
call fcn.00553770
test eax, eax
je 0x4d2b39
push 0x5c798c
push 0x1d
push 0x6ee218
call fcn.004d7c10
add esp, 0xc
jmp 0x4d3599
mov ecx, dword [0x6de498]
cmp dword [ecx + 0x10], 0
jne 0x4d2b73
cmp dword [0x6fa0c4], 0
je 0x4d2b81
push 0x283
mov ecx, 0x6ee218
call fcn.004d69e0
push eax
push 0x1d
push 0x6ee218
call fcn.004d7c10
mov ecx, dword [0x6de498]
add esp, 0xc
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 0
call eax
jmp 0x4d3599
mov edx, dword [0x6d690c]
cmp byte [edx + 0x6ebdf8], 0
je 0x4d2bab
push 0x5bd6e8
push 1
push 0x3aba
push 0x6eb910
call fcn.00447ec0
add esp, 0x10
jmp 0x4d2bb4
mov eax, dword [ecx]
mov edx, dword [eax + 8]
push 1
call edx
push 0xc7
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d2be5
mov ecx, dword [0x6de3b8]
test ecx, ecx
je 0x4d3599
cmp dword [ecx + 0x10], 0
mov eax, dword [ecx]
mov edx, dword [eax + 8]
je 0x4d2be1
push 0
jmp 0x4d2be3
push 1
call edx
push 0x14
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d2c40
push 0x38
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d2c40
mov esi, dword [0x6de5ec]
test esi, esi
je 0x4d3599
cmp dword [esi + 0x10], 0
mov ecx, esi
je 0x4d2c27
push 1
call fcn.0044c470
mov ecx, esi
call fcn.0044c410
push 0
jmp 0x4d2c37
push 0
call fcn.0044c470
mov ecx, esi
call fcn.0044c3c0
push 1
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
push 0x3f
mov ecx, edi
call fcn.00529970
push 0x41
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d2c7a
push 0x8e6
mov ecx, 0x6ee218
call fcn.004d69e0
push eax
push 2
push 0x3ab5
push 0x6eb910
call fcn.00447ec0
add esp, 0x10
push 0x57
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d2cc7
call fcn.0040d070
mov ecx, eax
call fcn.005249f0
test eax, eax
jne 0x4d2cb0
call fcn.0040d070
mov ecx, eax
call fcn.00524a00
mov ecx, dword [0x6de62c]
call fcn.00524950
jmp 0x4d2cc7
call fcn.0040d070
mov ecx, eax
call fcn.00524bf0
mov ecx, dword [0x6de62c]
call fcn.00524920
push 0x10
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d2d0b
push 0x38
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d2d0b
mov eax, dword [0x6ddd8c]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4d2cfc
mov ecx, dword [0x6ddd8c]
push 0
push ecx
jmp 0x4d2d05
mov edx, dword [0x6ddd8c]
push 8
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
cmp dword [0x6ed0dc], 0
je 0x4d3599
push 0x22
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d2d4c
push 0x1d
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d2d4c
mov ecx, dword [0x6de574]
test ecx, ecx
je 0x4d2d4c
mov eax, dword [ecx]
mov eax, dword [eax + 8]
xor edx, edx
cmp dword [ecx + 0x10], edx
sete dl
push edx
call eax
push 0x13
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d2d80
push 0x1d
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d2d80
mov ecx, dword [0x6de578]
test ecx, ecx
je 0x4d2d80
mov edx, dword [ecx]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [ecx + 0x10], eax
sete al
push eax
call edx
push 0x20
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d2db3
push 0x1d
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d2db3
mov ecx, dword [0x6de5b0]
cmp dword [ecx + 0x10], 1
mov eax, dword [ecx]
mov edx, dword [eax + 8]
jne 0x4d2daf
push 0
jmp 0x4d2db1
push 1
call edx
push 0x3b
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d2ddd
push 0x38
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d2ddd
xor eax, eax
cmp dword [0x717384], eax
sete al
mov dword [0x717384], eax
push 0xe
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d2e01
push 0x38
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d2e01
mov ecx, 0x6eb910
call fcn.00444920
push 0x19
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d2e33
push 0x38
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d2e33
xor dword [ebp + 0xbd0], 1
mov eax, dword [ebp + 0xbd0]
push eax
mov ecx, 0x6dfb40
call fcn.004269d0
push 0x2e
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d2e66
push 0x38
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d2e66
cmp dword [0x719578], 4
mov ecx, 0x719560
jne 0x4d2e5f
push 0
jmp 0x4d2e61
push 4
call fcn.0055f780
push 0x1e
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d2ea8
push 0x38
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d2ea8
mov esi, dword [0x6de558]
test esi, esi
je 0x4d2ea8
mov edx, dword [esi]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [esi + 0x10], eax
mov ecx, esi
sete al
push eax
call edx
push 0x5c7978
mov ecx, esi
call fcn.004830b0
push 0x1f
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d2edc
push 0x38
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d2edc
mov ecx, dword [0x6de528]
test ecx, ecx
je 0x4d2edc
mov eax, dword [ecx]
mov eax, dword [eax + 8]
xor edx, edx
cmp dword [ecx + 0x10], edx
sete dl
push edx
call eax
push 0x26
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d31c9
push 0x38
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d31c9
mov esi, dword [0x6de52c]
test esi, esi
je 0x4d31c9
mov ecx, dword [0x5c796c]
mov edx, dword [0x5c7970]
movzx eax, word [0x5c7974]
mov dword [esp + 0x1d0], ecx
movzx ecx, byte [0x5c7976]
mov dword [esp + 0x1d4], edx
lea edx, [esp + 0x4c]
mov byte [esp + 0x1da], cl
push edx
mov ecx, esi
mov word [esp + 0x1e9], 0x800
mov dword [esp + 0x50], 2
mov word [esp + 0x1dc], ax
call fcn.00481f20
mov eax, dword [0x5c7960]
mov ecx, dword [0x5c7964]
movzx edx, word [0x5c7968]
mov dword [esp + 0x1d4], ecx
mov dword [esp + 0x1d0], eax
movzx eax, byte [0x5c796a]
lea ecx, [esp + 0x4c]
push ecx
mov ecx, esi
mov word [esp + 0x1e9], 0x2001
mov dword [esp + 0x50], 4
mov word [esp + 0x1dc], dx
mov byte [esp + 0x1de], al
call fcn.00481f20
mov edx, dword [0x5c7954]
mov eax, dword [0x5c7958]
movzx ecx, word [0x5c795c]
mov dword [esp + 0x1d0], edx
movzx edx, byte [0x5c795e]
mov dword [esp + 0x1d4], eax
lea eax, [esp + 0x4c]
mov word [esp + 0x1d8], cx
mov ebx, 6
push eax
mov ecx, esi
mov word [esp + 0x1e9], 0x1002
mov dword [esp + 0x50], ebx
mov byte [esp + 0x1de], dl
call fcn.00481f20
mov ecx, dword [0x5c7948]
mov edx, dword [0x5c794c]
movzx eax, word [0x5c7950]
mov dword [esp + 0x1d0], ecx
movzx ecx, byte [0x5c7952]
mov dword [esp + 0x1d4], edx
lea edx, [esp + 0x4c]
mov byte [esp + 0x1da], cl
push edx
mov ecx, esi
mov word [esp + 0x1e9], 0x2003
mov dword [esp + 0x50], 8
mov word [esp + 0x1dc], ax
call fcn.00481f20
mov eax, dword [0x5c793c]
mov ecx, dword [0x5c7940]
movzx edx, word [0x5c7944]
mov dword [esp + 0x1d4], ecx
mov dword [esp + 0x1d0], eax
movzx eax, byte [0x5c7946]
lea ecx, [esp + 0x4c]
push ecx
mov ecx, esi
mov word [esp + 0x1e9], 0x2004
mov dword [esp + 0x50], 0xa
mov word [esp + 0x1dc], dx
mov byte [esp + 0x1de], al
call fcn.00481f20
mov edx, dword [0x5c7930]
movzx ecx, word [0x5c7938]
mov eax, dword [0x5c7934]
mov dword [esp + 0x1d0], edx
movzx edx, byte [0x5c793a]
mov word [esp + 0x1e5], 0x405
mov dword [esp + 0x4c], 0xc
mov dword [esp + 0x1d4], eax
mov word [esp + 0x1d8], cx
mov byte [esp + 0x1da], dl
lea eax, [esp + 0x4c]
push eax
mov ecx, esi
call fcn.00481f20
mov ecx, dword [0x5c7924]
mov edx, dword [0x5c7928]
movzx eax, word [0x5c792c]
mov dword [esp + 0x1d0], ecx
movzx ecx, byte [0x5c792e]
mov dword [esp + 0x1d4], edx
lea edx, [esp + 0x4c]
mov byte [esp + 0x1da], cl
push edx
mov ecx, esi
mov word [esp + 0x1e9], 0x1006
mov dword [esp + 0x50], 0xe
mov word [esp + 0x1dc], ax
call fcn.00481f20
mov eax, dword [0x5c7918]
mov ecx, dword [0x5c791c]
movzx edx, word [0x5c7920]
mov dword [esp + 0x1d4], ecx
mov dword [esp + 0x1d0], eax
movzx eax, byte [0x5c7922]
lea ecx, [esp + 0x4c]
push ecx
mov ecx, esi
mov word [esp + 0x1e9], 0x2007
mov dword [esp + 0x50], 0x10
mov word [esp + 0x1dc], dx
mov byte [esp + 0x1de], al
call fcn.00481f20
mov edx, dword [esi]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [esi + 0x10], eax
mov ecx, esi
sete al
push eax
call edx
mov ecx, esi
call fcn.00482450
push 0x24
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d339d
push 0x38
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d339d
lea eax, [esp + 0x1ed]
push 0x5c790c
push eax
mov byte [esp + 0x1f0], 0
call fcn.00589549
lea ecx, [esp + 0x206]
push 0x5c7900
push ecx
call fcn.00589549
lea edx, [esp + 0x39]
push 0x5c78f8
push edx
mov byte [esp + 0x3c], 1
call fcn.00589549
lea eax, [esp + 0x52]
push 0x5c78f0
push eax
call fcn.00589549
mov esi, dword [0x6de530]
add esp, 0x20
test esi, esi
je 0x4d339d
lea ecx, [esp + 0x1e8]
push ecx
mov ecx, esi
mov dword [esi + 0x23c], 1
call fcn.00480e70
lea edx, [esp + 0x24]
push edx
mov ecx, esi
call fcn.00480e70
lea eax, [esp + 0x24]
push eax
mov ecx, esi
call fcn.00480e70
lea ecx, [esp + 0x24]
push ecx
mov ecx, esi
call fcn.00480e70
lea edx, [esp + 0x24]
push edx
mov ecx, esi
call fcn.00480e70
lea eax, [esp + 0x24]
push eax
mov ecx, esi
call fcn.00480e70
lea ecx, [esp + 0x24]
push ecx
mov ecx, esi
call fcn.00480e70
lea edx, [esp + 0x24]
push edx
mov ecx, esi
call fcn.00480e70
lea eax, [esp + 0x24]
push eax
mov ecx, esi
call fcn.00480e70
lea ecx, [esp + 0x24]
push ecx
mov ecx, esi
call fcn.00480e70
lea edx, [esp + 0x24]
push edx
mov ecx, esi
call fcn.00480e70
lea eax, [esp + 0x24]
push eax
mov ecx, esi
call fcn.00480e70
lea ecx, [esp + 0x24]
push ecx
mov ecx, esi
call fcn.00480e70
lea edx, [esp + 0x24]
push edx
mov ecx, esi
call fcn.00480e70
lea eax, [esp + 0x24]
push eax
mov ecx, esi
call fcn.00480e70
lea ecx, [esp + 0x24]
push ecx
mov ecx, esi
call fcn.00480e70
lea edx, [esp + 0x24]
push edx
mov ecx, esi
call fcn.00480e70
lea eax, [esp + 0x24]
push eax
mov ecx, esi
call fcn.00480e70
lea ecx, [esp + 0x24]
push ecx
mov ecx, esi
call fcn.00480e70
lea edx, [esp + 0x24]
push edx
mov ecx, esi
call fcn.00480e70
lea eax, [esp + 0x24]
push eax
mov ecx, esi
call fcn.00480e70
lea ecx, [esp + 0x24]
push ecx
mov ecx, esi
call fcn.00480e70
lea edx, [esp + 0x24]
push edx
mov ecx, esi
call fcn.00480e70
lea eax, [esp + 0x24]
push eax
mov ecx, esi
call fcn.00480e70
lea ecx, [esp + 0x24]
push ecx
mov ecx, esi
call fcn.00480e70
mov ecx, esi
call fcn.00480f80
mov edx, dword [esi]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [esi + 0x10], eax
mov ecx, esi
sete al
push eax
call edx
push 0x23
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d33d1
push 0x38
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d33d1
mov ecx, dword [0x6de534]
test ecx, ecx
je 0x4d33d1
mov eax, dword [ecx]
mov eax, dword [eax + 8]
xor edx, edx
cmp dword [ecx + 0x10], edx
sete dl
push edx
call eax
push 0x22
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d3404
push 0x38
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d3404
mov ecx, dword [0x6de378]
cmp dword [ecx + 0x10], 0
mov edx, dword [ecx]
mov eax, dword [edx + 8]
jne 0x4d3400
push 1
jmp 0x4d3402
push 0
call eax
push 0x25
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d341a
push 0x38
mov ecx, edi
call fcn.00529a10
push 0x20
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d344d
push 0x38
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d344d
mov ecx, dword [0x6de5ac]
cmp dword [ecx + 0x10], 0
mov edx, dword [ecx]
mov eax, dword [edx + 8]
jne 0x4d3449
push 1
jmp 0x4d344b
push 0
call eax
cmp dword [esp + 0x20], 1
je 0x4d3599
push 0x17
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d349a
push 0x38
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d349a
mov ecx, dword [0x6ec21c]
mov word [esp + 0x11], 0x7f05
mov edx, dword [ecx + 0x129]
push 9
lea eax, [esp + 0x14]
push eax
mov ecx, 0x6fc6a8
mov dword [esp + 0x1b], edx
call fcn.0052ab00
push 0x31
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d34ce
push 0x1d
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d34ce
mov ecx, dword [0x6de560]
test ecx, ecx
je 0x4d34ce
mov edx, dword [ecx]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [ecx + 0x10], eax
sete al
push eax
call edx
push 0x15
mov ecx, edi
call fcn.00529970
mov bl, 0x3c
test eax, eax
je 0x4d3515
push 0x1d
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d3515
mov eax, dword [0x6ec210]
push 0xd
lea ecx, [esp + 0x14]
push ecx
mov ecx, 0x6fc6a8
mov byte [esp + 0x19], bl
mov byte [esp + 0x1a], 0x29
mov dword [esp + 0x1b], eax
mov dword [esp + 0x21], 2
call fcn.0052ab00
push 0x10
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d3553
push 0x1d
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d3553
mov edx, dword [0x6ec210]
push 9
lea eax, [esp + 0x14]
push eax
mov ecx, 0x6fc6a8
mov byte [esp + 0x19], bl
mov byte [esp + 0x1a], 1
mov dword [esp + 0x1b], edx
call fcn.0052ab00
push 0x1e
mov ecx, edi
call fcn.00529970
test eax, eax
je 0x4d3599
push 0x1d
mov ecx, edi
call fcn.00529a10
test eax, eax
je 0x4d3599
mov ecx, dword [0x6ec210]
push 0xd
lea edx, [esp + 0x14]
mov dword [esp + 0x17], ecx
push edx
mov ecx, 0x6fc6a8
mov byte [esp + 0x19], bl
mov byte [esp + 0x1a], 0x29
mov dword [esp + 0x21], 1
call fcn.0052ab00
pop esi
pop ebx
mov ecx, dword [esp + 0x208]
pop edi
pop ebp
xor ecx, esp
call fcn.00589034
add esp, 0x204
ret 4