Function at 0x4211a0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x563120
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x5a7074]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov esi, dword [ebp + 8]
cmp esi, 0x511
jne 0x421218
mov eax, dword [ebx + 0xc4]
test eax, eax
je 0x4211fd
push dword [eax + 4]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4211fd
mov eax, dword [ebx + 0xc4]
push 0
push dword [eax + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
mov byte [ebx + 0x9c], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp esi, 0x500
je 0x4214eb
cmp esi, 0x501
je 0x4214eb
cmp esi, 0x502
je 0x4214eb
cmp esi, 0x503
je 0x4214eb
cmp esi, 0x505
je 0x4214eb
cmp esi, 0x504
je 0x4214eb
cmp esi, 0x509
jne 0x42127c
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x4214f9
cmp esi, 0x50a
jne 0x4213d9
call fcn.00424740
mov eax, dword [ebx + 4]
mov edi, dword [sym.imp.USER32.dll_GetDC]
push eax
mov dword [ebp - 0x18], eax
call edi
mov dword [ebp - 0x1c], eax
push ecx
mov ecx, esp
mov dword [ebp - 4], 0
mov dword [ecx], eax
mov ecx, ebx
call fcn.00420910
mov ecx, ebx
call fcn.004237f0
mov eax, dword [0x5d0344]
cmp dword [eax - 0xc], 0
je 0x421324
push dword [ebx + 4]
call edi
mov edi, dword [0x5d0344]
mov dword [ebp - 0x14], eax
cmp dword [edi - 4], 1
jle 0x4212ee
push dword [edi - 0xc]
mov ecx, 0x5d0344
call fcn.0040db10
mov edi, dword [0x5d0344]
mov eax, dword [ebp - 0x14]
push eax
push ecx
mov ecx, ebx
call fcn.00423710
add esp, 4
mov edx, eax
mov ecx, edi
call fcn.00418d70
add esp, 4
mov ecx, 0x5d0344
push 0xffffffffffffffff
call fcn.00429080
push dword [ebp - 0x14]
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_ReleaseDC]
mov edi, dword [sym.imp.USER32.dll_GetDC]
cmp dword [ebx + 0x17c], 6
jne 0x42139c
cmp dword [ebx + 0x184], 0
je 0x42139c
cmp dword [ebx + 0x180], 0
je 0x42139c
push dword [ebx + 4]
call edi
mov edi, eax
push edi
push ecx
mov ecx, ebx
call fcn.00423710
add esp, 4
lea ecx, [ebx + 0x184]
mov esi, eax
call fcn.00425b70
mov edx, esi
mov ecx, eax
call fcn.00418d70
add esp, 4
lea ecx, [ebx + 0x184]
push 0xffffffffffffffff
call fcn.00429080
push 0
push 1
push 0x2421
push dword [ebx + 0x180]
call dword [sym.imp.USER32.dll_PostMessageW]
push edi
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_ReleaseDC]
mov esi, dword [ebp + 8]
jmp 0x4213bd
push 0
push str.SWIFDOO_PDF_FRAME
call dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
je 0x4213bd
push 0
push 1
push 0x7936
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
lea ecx, [ebp - 0x1c]
call fcn.00419e70
jmp 0x4214f9
cmp esi, 0x506
jne 0x42147d
cmp dword [ebx + 0x188], 0x505
jne 0x421423
push dword [ebx + 0xd0]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x421423
push 0
push dword [ebx + 0xd0]
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebx + 0xb4]
lea edi, [ebx + 0xb0]
sub eax, dword [edi]
sar eax, 2
test eax, eax
je 0x4214f9
mov eax, dword [edi + 4]
sub eax, dword [edi]
sar eax, 2
lea ecx, [eax*4 - 4]
mov eax, dword [edi]
mov dword [ebp + 8], ecx
mov ecx, dword [ecx + eax]
test ecx, ecx
je 0x42145d
mov eax, dword [ecx]
push 1
call dword [eax]
mov eax, dword [edi]
mov ecx, edi
add eax, dword [ebp + 8]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00425590
push 1
push 0
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x4214f9
cmp esi, 0x508
jne 0x4214be
call fcn.00424740
mov eax, dword [ebx + 4]
push eax
mov dword [ebp - 0x18], eax
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x1c], eax
push ecx
mov ecx, esp
mov dword [ebp - 4], 1
mov dword [ecx], eax
mov ecx, ebx
call fcn.00420910
mov ecx, ebx
call fcn.00422e50
lea ecx, [ebp - 0x1c]
call fcn.00419e70
jmp 0x4214f9
cmp esi, 0x510
je 0x4214d6
cmp esi, 0x50e
je 0x4214d6
cmp esi, 0x50f
jne 0x4214f9
mov dword [ebx + 0x188], esi
call fcn.00421ed0
push esi
mov ecx, ebx
call fcn.00424b90
jmp 0x4214f9
call fcn.00424740
push ecx
push esi
mov ecx, ebx
call fcn.00423b80
mov dword [ebx + 0x188], esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4