Function at 0x4f0090
Capabilities:
Hide graphical window

Disassembly:
push ebp
lea ebp, [esp - 0x560]
sub esp, 0x560
push 0xffffffffffffffff
push 0x54dabf
mov eax, dword fs:[0]
push eax
sub esp, 0x54
mov eax, dword [0x592174]
xor eax, ebp
mov dword [ebp + 0x55c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp + 0x56c]
lea ecx, [ebp + 0x2dc]
mov esi, dword [ebp + 0x568]
push eax
call fcn.004f5320
mov dword [ebp - 4], 0
lea ecx, [ebp + 0x2dc]
push esi
call fcn.004f6af0
mov dword [ebp - 0x58], 0x553a24
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov byte [ebp - 4], 1
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0
mov byte [ebp - 4], 3
call fcn.004f1180
mov ebx, dword [0x595cc0]
mov esi, eax
add ebx, 0x10
mov byte [ebp - 0x10], 0
mov dword [ebp - 0x14], ebx
mov byte [ebp - 4], 5
push ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [ebp - 0x10], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov esi, dword [esi + 0x34]
mov edi, eax
push 4
mov dword [ebp - 0x5c], esi
mov ecx, dword [esi + 8]
inc ecx
push ecx
push dword [esi]
call fcn.005122bd
add esp, 0xc
test eax, eax
je 0x4f01ce
mov dword [esi], eax
mov eax, dword [esi + 8]
push 4
inc eax
push eax
push dword [esi + 4]
call fcn.005122bd
add esp, 0xc
test eax, eax
je 0x4f01ce
mov dword [esi + 4], eax
mov eax, dword [esi + 8]
mov dword [ebp - 0x60], eax
lea ecx, [eax*4]
mov eax, dword [esi]
add eax, ecx
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 7
je 0x4f01b0
mov dword [eax], edi
mov byte [ebp - 4], 5
mov eax, dword [esi + 4]
add eax, ecx
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 8
je 0x4f01c7
lea ecx, [ebp - 0x58]
mov dword [eax], ecx
mov byte [ebp - 4], 5
inc dword [esi + 8]
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov byte [ebp - 0x10], 0
mov byte [ebp - 4], 3
lea eax, [ebp + 0x2fc]
push dword [ebp - 0x1c]
push eax
push 0x592010
push 0x592cc0
push 0x594cf0
call fcn.004ed000
add esp, 0x14
movzx eax, ax
lea ecx, [ebp + 0x2dc]
push 0
push eax
push 0
push 0
push 0x80000000
push 0
push 0
push 0
call fcn.004ef880
push 5
push dword [ebp + 0x2e0]
call dword [sym.imp.USER32.dll_ShowWindow]
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov ebx, 1
xor esi, esi
nop dword [eax]
test ebx, ebx
je 0x4f0267
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x3c]
push eax
call edi
test eax, eax
jne 0x4f0267
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x58]
push esi
call dword [eax + 4]
inc esi
test eax, eax
jne 0x4f0244
xor ebx, ebx
push 0
push 0
push 0
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
cmp eax, 0xffffffff
je 0x4f0240
test eax, eax
je 0x4f02e8
lea eax, [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x58]
call dword [eax]
test eax, eax
jne 0x4f02a4
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
mov eax, dword [ebp - 0x38]
cmp eax, 0x118
ja 0x4f02bc
je 0x4f02d8
cmp eax, 0xf
je 0x4f02d8
cmp eax, 0xa0
jmp 0x4f02c1
cmp eax, 0x200
je 0x4f02d8
mov ecx, 1
xor eax, eax
test ecx, ecx
mov ebx, ecx
cmove eax, esi
mov esi, eax
jmp 0x4f0240
xor ecx, ecx
xor eax, eax
test ecx, ecx
cmove eax, esi
mov esi, eax
jmp 0x4f0240
call fcn.004f1180
mov ecx, eax
call fcn.004f2db0
lea ecx, [ebp + 0x2dc]
call fcn.004f5d50
test al, al
je 0x4f030a
xor bl, bl
jmp 0x4f0716
lea ecx, [ebp + 0x2dc]
call fcn.004f5c70
push eax
lea ecx, [ebp + 0x4b4]
call fcn.0041c4f0
mov byte [ebp - 4], 0xa
cmp dword [ebp + 0x4c4], 0
jne 0x4f0360
push 2
lea ecx, [ebp]
call fcn.004f8050
mov byte [ebp - 4], 0xb
push 0
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp]
call fcn.004efb00
mov byte [ebp - 4], 0xa
lea ecx, [ebp]
call fcn.004f80e0
xor bl, bl
jmp 0x4f0707
lea ecx, [ebp + 0x170]
call fcn.004f8670
mov byte [ebp - 4], 0xc
push 0
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp + 0x170]
call fcn.004efb00
cmp eax, 1
jne 0x4f0664
mov esi, dword [ebp - 0x20]
mov ecx, esi
call fcn.004f12b0
test al, al
je 0x4f05ab
push 0x11
xor eax, eax
mov dword [ebp + 0x53c], 0
mov dword [ebp + 0x540], 0
lea ecx, [ebp + 0x52c]
push str.2345PicViewer.exe
mov dword [ebp + 0x53c], 0
mov dword [ebp + 0x540], 7
mov word [ebp + 0x52c], ax
call fcn.00418830
mov byte [ebp - 4], 0xd
lea eax, [ebp + 0x52c]
push 0
push 1
push eax
call fcn.00503f20
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x52c]
call fcn.004184d0
push 0xb
xor eax, eax
mov dword [ebp + 0x524], 0
mov dword [ebp + 0x528], 0
lea ecx, [ebp + 0x514]
push str.2345Pic.exe
mov dword [ebp + 0x524], 0
mov dword [ebp + 0x528], 7
mov word [ebp + 0x514], ax
call fcn.00418830
mov byte [ebp - 4], 0xe
lea eax, [ebp + 0x514]
push 0
push 1
push eax
call fcn.00503f20
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x514]
call fcn.004184d0
push 0xf
xor eax, eax
mov dword [ebp + 0x50c], 0
mov dword [ebp + 0x510], 0
lea ecx, [ebp + 0x4fc]
push 0x553c88
mov dword [ebp + 0x50c], 0
mov dword [ebp + 0x510], 7
mov word [ebp + 0x4fc], ax
call fcn.00418830
mov byte [ebp - 4], 0xf
lea eax, [ebp + 0x4fc]
push 0
push 1
push eax
call fcn.00503f20
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x4fc]
call fcn.004184d0
push 0x11
xor eax, eax
mov dword [ebp + 0x4f4], 0
mov dword [ebp + 0x4f8], 0
lea ecx, [ebp + 0x4e4]
push str.2345PdfReader.exe
mov dword [ebp + 0x4f4], 0
mov dword [ebp + 0x4f8], 7
mov word [ebp + 0x4e4], ax
call fcn.00418830
mov byte [ebp - 4], 0x10
lea eax, [ebp + 0x4e4]
push 0
push 1
push eax
call fcn.00503f20
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x4e4]
call fcn.004184d0
push 0x11
xor eax, eax
mov dword [ebp + 0x4dc], 0
mov dword [ebp + 0x4e0], 0
lea ecx, [ebp + 0x4cc]
push str.2345PdfEditor.exe
mov dword [ebp + 0x4dc], 0
mov dword [ebp + 0x4e0], 7
mov word [ebp + 0x4cc], ax
call fcn.00418830
mov byte [ebp - 4], 0x11
lea eax, [ebp + 0x4cc]
push 0
push 1
push eax
call fcn.00503f20
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x4cc]
call fcn.004184d0
push 0
lea ecx, [ebp + 0x494]
call fcn.004fb7d0
mov byte [ebp - 4], 0x12
xor eax, eax
mov dword [ebp + 0x554], 0
mov dword [ebp + 0x558], 0
mov dword [ebp + 0x554], 0
mov dword [ebp + 0x558], 7
mov word [ebp + 0x544], ax
mov byte [ebp - 4], 0x13
lea eax, [ebp + 0x544]
push eax
lea eax, [ebp + 0x4b4]
push eax
lea ecx, [ebp + 0x494]
call fcn.004fcf10
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
mov byte [ebp - 4], 0x14
lea eax, [ebp + 0x544]
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x18]
call fcn.004235f0
push 0
lea eax, [ebp - 0x18]
mov ecx, esi
push eax
call fcn.004f3ed0
mov bl, al
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x18]
call fcn.00419ae0
mov byte [ebp - 4], 0x12
lea ecx, [ebp + 0x544]
call fcn.004184d0
jmp 0x4f06e9
push 0
lea ecx, [ebp + 0x494]
call fcn.004fb7d0
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
mov byte [ebp - 4], 0x16
lea eax, [ebp + 0x4b4]
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x18]
call fcn.004235f0
push 0x565cb0
lea ecx, [ebp + 0x544]
call fcn.00418560
mov byte [ebp - 4], 0x17
lea eax, [ebp + 0x544]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
lea ecx, [ebp + 0x494]
call fcn.004fc3b0
mov bl, al
mov byte [ebp - 4], 0x16
lea ecx, [ebp + 0x544]
call fcn.004184d0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x18]
call fcn.00419ae0
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x494]
call fcn.004fb8d0
mov byte [ebp - 4], 0xa
lea ecx, [ebp + 0x170]
call fcn.004f86f0
mov byte [ebp - 4], 3
lea ecx, [ebp + 0x4b4]
call fcn.004184d0
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x4f0731
push eax
call fcn.0050f7e9
add esp, 4
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x4f075a
push eax
call fcn.0050f7e9
add esp, 4
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x2dc]
call fcn.004f5850
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x55c]
xor ecx, ebp
call fcn.0050b0b7
lea esp, [ebp + 0x560]
pop ebp
ret 8