Function at 0x422eac
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
mov ecx, 7
push 0
push 0
dec ecx
jne 0x422eb4
push ecx
push ebx
xor eax, eax
push ebp
push 0x42319b
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.004084f4
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x18]
call fcn.0040cb0c
mov ecx, dword [ebp - 0x18]
lea eax, [ebp - 0x14]
mov edx, 0x4231b0
call fcn.00404478
mov eax, dword [ebp - 0x14]
push eax
call sub.kernel32.dll_GetCurrentProcessId
xor edx, edx
push edx
push eax
mov eax, dword [0x427da8]
call fcn.00404d84
pop edx
call fcn.00404848
call fcn.004030b0
call fcn.0041cb8c
test al, al
je 0x423173
mov al, 1
call fcn.0042107c
xor ebx, ebx
mov eax, 1
call fcn.0041cc34
mov edx, 1
mov eax, 0x28
call fcn.0041479c
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0x1c]
mov eax, dword [0x427de4]
mov eax, dword [eax]
call fcn.00415a90
mov eax, dword [ebp - 0x1c]
push eax
lea eax, [ebp - 0x20]
call fcn.0041bdc4
mov edx, dword [ebp - 0x20]
mov cl, 1
pop eax
call fcn.004212a8
mov byte [ebp - 1], al
mov edx, 2
mov eax, 0x28
call fcn.0041479c
call fcn.00419a3c
push edx
push eax
call fcn.0041b7f8
lea edx, [ebp - 0x10]
mov al, byte [ebp - 1]
call fcn.00422d1c
test al, al
je 0x423011
call sub.kernel32.dll_GetCurrentProcessId
xor edx, edx
push edx
push eax
mov eax, dword [0x427da8]
call fcn.00404d84
mov edx, 0x4231c0
call fcn.00404848
call fcn.004030b0
mov bl, 1
call fcn.00419a3c
push edx
push eax
call fcn.0041b974
call fcn.0041c5ec
call fcn.0041bae8
call fcn.0041c870
test al, al
je 0x422fe1
call fcn.00421a48
jmp 0x422fef
call fcn.00421db8
test al, al
je 0x422fef
call fcn.00422b5c
call sub.kernel32.dll_GetCurrentProcessId
xor edx, edx
push edx
push eax
mov eax, dword [0x427da8]
call fcn.00404d84
mov edx, 0x4231e4
call fcn.00404848
call fcn.004030b0
mov eax, dword [0x427e74]
cmp dword [eax], 1
jne 0x423173
xor edx, edx
mov eax, 0x3e8
call fcn.0040c0b4
push 0
mov eax, dword [0x427d7c]
mov eax, dword [eax]
push eax
call sub.user32.dll_ShowWindow
test bl, bl
jne 0x423173
call sub.kernel32.dll_GetCurrentProcessId
xor edx, edx
push edx
push eax
mov eax, dword [0x427da8]
call fcn.00404d84
mov edx, 0x423208
call fcn.00404848
mov edx, dword [0x427da0]
mov dl, byte [edx]
call fcn.00403000
mov edx, 0x42321c
call fcn.00404848
push eax
call fcn.0041d0d8
mov edx, eax
pop eax
call fcn.00403000
call fcn.004030b0
mov eax, dword [0x427da0]
cmp byte [eax], 0
jne 0x4230d7
call fcn.0041d0d8
test al, al
jne 0x4230d7
lea ecx, [ebp - 8]
xor edx, edx
mov eax, 0x423238
call fcn.0041b6d4
lea eax, [ebp - 0x24]
call fcn.0041b338
mov eax, dword [ebp - 0x24]
push eax
call fcn.0041b554
push eax
lea eax, [ebp - 0x28]
call fcn.0041b3e8
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 8]
xor eax, eax
call fcn.0040c494
jmp 0x423173
mov eax, dword [0x427da0]
cmp byte [eax], 0
jne 0x423110
cmp dword [ebp - 0xc], 0
je 0x423110
lea eax, [ebp - 0x2c]
call fcn.0041b338
mov eax, dword [ebp - 0x2c]
push eax
call fcn.0041b554
push eax
lea eax, [ebp - 0x30]
call fcn.0041b3e8
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0xc]
xor eax, eax
call fcn.0040c494
jmp 0x423173
lea ecx, [ebp - 8]
xor edx, edx
mov eax, 0x423244
call fcn.0041b6d4
push dword [ebp - 8]
push 0x423250
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 0x10]
call fcn.00406c48
push dword [ebp - 0x34]
push 0x423260
lea eax, [ebp - 8]
mov edx, 4
call fcn.004044ec
lea eax, [ebp - 0x38]
call fcn.0041b338
mov eax, dword [ebp - 0x38]
push eax
call fcn.0041b554
push eax
push 0
lea eax, [ebp - 0x3c]
call fcn.0041b4d8
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 8]
mov eax, 1
call fcn.0040c524
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4231a2
lea eax, [ebp - 0x3c]
mov edx, 0xb
call fcn.004041ac
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.004041ac
ret