Function at 0x4edaa0
Capabilities:
Hide graphical window

Disassembly:
push ebp
lea ebp, [esp - 0x560]
sub esp, 0x560
push 0xffffffffffffffff
push 0x5416cf
mov eax, dword fs:[0]
push eax
sub esp, 0x54
mov eax, dword [0x583184]
xor eax, ebp
mov dword [ebp + 0x55c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp + 0x56c]
lea ecx, [ebp + 0x2dc]
mov esi, dword [ebp + 0x568]
push eax
call fcn.004f2dd0
mov dword [ebp - 4], 0
lea ecx, [ebp + 0x2dc]
push esi
call fcn.004f45a0
mov dword [ebp - 0x58], 0x54691c
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov byte [ebp - 4], 1
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0
mov byte [ebp - 4], 3
call fcn.004eed00
mov ebx, dword [0x586eb0]
mov esi, eax
add ebx, 0x10
mov byte [ebp - 0x10], 0
mov dword [ebp - 0x14], ebx
mov byte [ebp - 4], 5
push ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [ebp - 0x10], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov esi, dword [esi + 0x34]
mov edi, eax
push 4
mov dword [ebp - 0x5c], esi
mov ecx, dword [esi + 8]
inc ecx
push ecx
push dword [esi]
call fcn.0050716b
add esp, 0xc
test eax, eax
je 0x4edbde
mov dword [esi], eax
mov eax, dword [esi + 8]
push 4
inc eax
push eax
push dword [esi + 4]
call fcn.0050716b
add esp, 0xc
test eax, eax
je 0x4edbde
mov dword [esi + 4], eax
mov eax, dword [esi + 8]
mov dword [ebp - 0x60], eax
lea ecx, [eax*4]
mov eax, dword [esi]
add eax, ecx
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 7
je 0x4edbc0
mov dword [eax], edi
mov byte [ebp - 4], 5
mov eax, dword [esi + 4]
add eax, ecx
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 8
je 0x4edbd7
lea ecx, [ebp - 0x58]
mov dword [eax], ecx
mov byte [ebp - 4], 5
inc dword [esi + 8]
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov byte [ebp - 0x10], 0
mov byte [ebp - 4], 3
lea eax, [ebp + 0x2fc]
push dword [ebp - 0x1c]
push eax
push 0x583010
push 0x583ac0
push 0x585f18
call fcn.004eaa10
add esp, 0x14
movzx eax, ax
lea ecx, [ebp + 0x2dc]
push 0
push eax
push 0
push 0
push 0x80000000
push 0
push 0
push 0
call fcn.004ed290
push 5
push dword [ebp + 0x2e0]
call dword [sym.imp.USER32.dll_ShowWindow]
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov ebx, 1
xor esi, esi
nop dword [eax]
test ebx, ebx
je 0x4edc77
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x3c]
push eax
call edi
test eax, eax
jne 0x4edc77
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x58]
push esi
call dword [eax + 4]
inc esi
test eax, eax
jne 0x4edc54
xor ebx, ebx
push 0
push 0
push 0
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
cmp eax, 0xffffffff
je 0x4edc50
test eax, eax
je 0x4edcf8
lea eax, [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x58]
call dword [eax]
test eax, eax
jne 0x4edcb4
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
mov eax, dword [ebp - 0x38]
cmp eax, 0x118
ja 0x4edccc
je 0x4edce8
cmp eax, 0xf
je 0x4edce8
cmp eax, 0xa0
jmp 0x4edcd1
cmp eax, 0x200
je 0x4edce8
mov ecx, 1
xor eax, eax
test ecx, ecx
mov ebx, ecx
cmove eax, esi
mov esi, eax
jmp 0x4edc50
xor ecx, ecx
xor eax, eax
test ecx, ecx
cmove eax, esi
mov esi, eax
jmp 0x4edc50
call fcn.004eed00
mov ecx, eax
call fcn.004f0930
lea ecx, [ebp + 0x2dc]
call fcn.004f3800
test al, al
je 0x4edd1a
xor bl, bl
jmp 0x4ee126
lea ecx, [ebp + 0x2dc]
call fcn.004f3720
push eax
lea ecx, [ebp + 0x4b4]
call fcn.00405950
mov byte [ebp - 4], 0xa
cmp dword [ebp + 0x4c4], 0
jne 0x4edd70
push 2
lea ecx, [ebp]
call fcn.004f5af0
mov byte [ebp - 4], 0xb
push 0
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp]
call fcn.004ed510
mov byte [ebp - 4], 0xa
lea ecx, [ebp]
call fcn.004f5b80
xor bl, bl
jmp 0x4ee117
lea ecx, [ebp + 0x170]
call fcn.004f6110
mov byte [ebp - 4], 0xc
push 0
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp + 0x170]
call fcn.004ed510
cmp eax, 1
jne 0x4ee074
mov esi, dword [ebp - 0x20]
mov ecx, esi
call fcn.004eee30
test al, al
je 0x4edfbb
push 0x11
xor eax, eax
mov dword [ebp + 0x53c], 0
mov dword [ebp + 0x540], 0
lea ecx, [ebp + 0x52c]
push str.2345PicViewer.exe
mov dword [ebp + 0x53c], 0
mov dword [ebp + 0x540], 7
mov word [ebp + 0x52c], ax
call fcn.00404420
mov byte [ebp - 4], 0xd
lea eax, [ebp + 0x52c]
push 0
push 1
push eax
call fcn.004fbe90
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x52c]
call fcn.00404370
push 0xb
xor eax, eax
mov dword [ebp + 0x524], 0
mov dword [ebp + 0x528], 0
lea ecx, [ebp + 0x514]
push str.2345Pic.exe
mov dword [ebp + 0x524], 0
mov dword [ebp + 0x528], 7
mov word [ebp + 0x514], ax
call fcn.00404420
mov byte [ebp - 4], 0xe
lea eax, [ebp + 0x514]
push 0
push 1
push eax
call fcn.004fbe90
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x514]
call fcn.00404370
push 0xf
xor eax, eax
mov dword [ebp + 0x50c], 0
mov dword [ebp + 0x510], 0
lea ecx, [ebp + 0x4fc]
push 0x546b80
mov dword [ebp + 0x50c], 0
mov dword [ebp + 0x510], 7
mov word [ebp + 0x4fc], ax
call fcn.00404420
mov byte [ebp - 4], 0xf
lea eax, [ebp + 0x4fc]
push 0
push 1
push eax
call fcn.004fbe90
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x4fc]
call fcn.00404370
push 0x11
xor eax, eax
mov dword [ebp + 0x4f4], 0
mov dword [ebp + 0x4f8], 0
lea ecx, [ebp + 0x4e4]
push 0x55cf3c
mov dword [ebp + 0x4f4], 0
mov dword [ebp + 0x4f8], 7
mov word [ebp + 0x4e4], ax
call fcn.00404420
mov byte [ebp - 4], 0x10
lea eax, [ebp + 0x4e4]
push 0
push 1
push eax
call fcn.004fbe90
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x4e4]
call fcn.00404370
push 0x11
xor eax, eax
mov dword [ebp + 0x4dc], 0
mov dword [ebp + 0x4e0], 0
lea ecx, [ebp + 0x4cc]
push str.2345PdfEditor.exe
mov dword [ebp + 0x4dc], 0
mov dword [ebp + 0x4e0], 7
mov word [ebp + 0x4cc], ax
call fcn.00404420
mov byte [ebp - 4], 0x11
lea eax, [ebp + 0x4cc]
push 0
push 1
push eax
call fcn.004fbe90
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x4cc]
call fcn.00404370
push 0
lea ecx, [ebp + 0x494]
call fcn.004f93e0
mov byte [ebp - 4], 0x12
xor eax, eax
mov dword [ebp + 0x554], 0
mov dword [ebp + 0x558], 0
mov dword [ebp + 0x554], 0
mov dword [ebp + 0x558], 7
mov word [ebp + 0x544], ax
mov byte [ebp - 4], 0x13
lea eax, [ebp + 0x544]
push eax
lea eax, [ebp + 0x4b4]
push eax
lea ecx, [ebp + 0x494]
call fcn.004fab80
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
mov byte [ebp - 4], 0x14
lea eax, [ebp + 0x544]
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x18]
call fcn.0040c9a0
push 0
lea eax, [ebp - 0x18]
mov ecx, esi
push eax
call fcn.004f1980
mov bl, al
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x18]
call fcn.0040c590
mov byte [ebp - 4], 0x12
lea ecx, [ebp + 0x544]
call fcn.00404370
jmp 0x4ee0f9
push 0
lea ecx, [ebp + 0x494]
call fcn.004f93e0
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
mov byte [ebp - 4], 0x16
lea eax, [ebp + 0x4b4]
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x18]
call fcn.0040c9a0
push 0x558548
lea ecx, [ebp + 0x544]
call fcn.00404380
mov byte [ebp - 4], 0x17
lea eax, [ebp + 0x544]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
lea ecx, [ebp + 0x494]
call fcn.004fa020
mov bl, al
mov byte [ebp - 4], 0x16
lea ecx, [ebp + 0x544]
call fcn.00404370
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x18]
call fcn.0040c590
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x494]
call fcn.004f9540
mov byte [ebp - 4], 0xa
lea ecx, [ebp + 0x170]
call fcn.004f6190
mov byte [ebp - 4], 3
lea ecx, [ebp + 0x4b4]
call fcn.00404370
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x4ee141
push eax
call fcn.005047f9
add esp, 4
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x4ee16a
push eax
call fcn.005047f9
add esp, 4
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x2dc]
call fcn.004f3300
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x55c]
xor ecx, ebp
call fcn.00500396
lea esp, [ebp + 0x560]
pop ebp
ret 8