Function at 0x4b1f70
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe8
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4b25d2
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
jne 0x4b1fc5
mov eax, dword [ebp - 4]
test byte [eax + 0x384], 4
je 0x4b1fc5
lea edx, [ebp - 0x18]
mov eax, dword [0x4c7460]
call fcn.0040a3f4
mov ecx, dword [ebp - 0x18]
mov dl, 1
mov eax, dword [0x42fb20]
call fcn.004209d8
call fcn.00406644
mov eax, dword [0x4cd254]
call fcn.004b847c
mov eax, dword [ebp - 4]
or byte [eax + 0x384], 4
xor edx, edx
push ebp
push 0x4b25b5
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
jne 0x4b256f
mov eax, dword [ebp - 4]
cmp byte [eax + 0x1ea], 0
je 0x4b2463
xor eax, eax
push ebp
push 0x4b2028
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov si, 0xffaa
call fcn.00405774
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b203f
mov eax, dword [ebp - 4]
cmp byte [eax + 0x29f], 4
je 0x4b206b
mov eax, dword [ebp - 4]
cmp byte [eax + 0x29f], 6
jne 0x4b214f
mov eax, dword [ebp - 4]
cmp byte [eax + 0x29e], 1
jne 0x4b214f
mov eax, dword [ebp - 4]
cmp byte [eax + 0x29e], 1
jne 0x4b20b1
mov eax, dword [0x4cd254]
mov eax, dword [eax + 0x44]
call fcn.00470740
mov ebx, eax
mov eax, dword [ebp - 4]
sub ebx, dword [eax + 0x48]
sar ebx, 1
jns 0x4b2093
adc ebx, 0
mov eax, dword [0x4cd254]
mov eax, dword [eax + 0x44]
call fcn.00470780
mov esi, eax
mov eax, dword [ebp - 4]
sub esi, dword [eax + 0x4c]
sar esi, 1
jns 0x4b20e4
adc esi, 0
jmp 0x4b20e4
lea edx, [ebp - 0x14]
mov eax, dword [0x4cd258]
call fcn.004b5604
mov ebx, dword [ebp - 0xc]
sub ebx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
sub ebx, dword [eax + 0x48]
sar ebx, 1
jns 0x4b20d1
adc ebx, 0
mov esi, dword [ebp - 8]
sub esi, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
sub esi, dword [eax + 0x4c]
sar esi, 1
jns 0x4b20e4
adc esi, 0
mov eax, dword [0x4cd258]
call fcn.004b4444
cmp ebx, eax
jge 0x4b20fe
mov eax, dword [0x4cd258]
call fcn.004b4444
mov ebx, eax
mov eax, dword [0x4cd258]
call fcn.004b443c
cmp esi, eax
jge 0x4b2118
mov eax, dword [0x4cd258]
call fcn.004b443c
mov esi, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
push eax
mov ecx, esi
mov edx, ebx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x98]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x59], 0
je 0x4b236f
mov eax, dword [ebp - 4]
call fcn.004af800
jmp 0x4b236f
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x29f]
mov edx, eax
add dl, 0xfa
sub dl, 2
jae 0x4b2274
mov eax, dword [0x4cd254]
mov esi, dword [eax + 0x44]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x29f], 7
jne 0x4b2196
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
mov edx, dword [0x4a5640]
call fcn.00405704
test al, al
je 0x4b2196
mov eax, dword [ebp - 4]
mov esi, dword [eax + 4]
test esi, esi
je 0x4b21d7
cmp esi, dword [ebp - 4]
je 0x4b21d7
mov eax, esi
call fcn.004ad934
mov ebx, eax
mov eax, dword [esi + 0x48]
mov edx, dword [ebp - 4]
sub eax, dword [edx + 0x48]
sar eax, 1
jns 0x4b21b8
adc eax, 0
add ebx, eax
mov eax, esi
call fcn.004ad954
mov edx, dword [esi + 0x4c]
mov ecx, dword [ebp - 4]
sub edx, dword [ecx + 0x4c]
sar edx, 1
jns 0x4b21d1
adc edx, 0
add eax, edx
mov esi, eax
jmp 0x4b2209
mov eax, dword [0x4cd258]
call fcn.004b4434
mov ebx, eax
mov eax, dword [ebp - 4]
sub ebx, dword [eax + 0x48]
sar ebx, 1
jns 0x4b21f0
adc ebx, 0
mov eax, dword [0x4cd258]
call fcn.004b442c
mov esi, eax
mov eax, dword [ebp - 4]
sub esi, dword [eax + 0x4c]
sar esi, 1
jns 0x4b2209
adc esi, 0
mov eax, dword [0x4cd258]
call fcn.004b4444
cmp ebx, eax
jge 0x4b2223
mov eax, dword [0x4cd258]
call fcn.004b4444
mov ebx, eax
mov eax, dword [0x4cd258]
call fcn.004b443c
cmp esi, eax
jge 0x4b223d
mov eax, dword [0x4cd258]
call fcn.004b443c
mov esi, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
push eax
mov ecx, esi
mov edx, ebx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x98]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x59], 0
je 0x4b236f
mov eax, dword [ebp - 4]
call fcn.004af800
jmp 0x4b236f
cmp al, 5
jne 0x4b236f
mov eax, dword [ebp - 4]
cmp byte [eax + 0x29e], 1
jne 0x4b22c2
mov eax, dword [0x4cd254]
mov eax, dword [eax + 0x44]
call fcn.00470740
mov ebx, eax
mov eax, dword [ebp - 4]
sub ebx, dword [eax + 0x48]
sar ebx, 1
jns 0x4b22a4
adc ebx, 0
mov eax, dword [0x4cd254]
mov eax, dword [eax + 0x44]
call fcn.00470780
mov esi, eax
mov eax, dword [ebp - 4]
sub esi, dword [eax + 0x4c]
sar esi, 1
jns 0x4b231e
adc esi, 0
jmp 0x4b231e
mov eax, dword [0x4cd258]
call fcn.004b4454
mov ebx, eax
sar ebx, 1
jns 0x4b22d5
adc ebx, 0
mov eax, dword [0x4cd258]
call fcn.004b4444
add ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
sar eax, 1
jns 0x4b22ee
adc eax, 0
sub ebx, eax
mov eax, dword [0x4cd258]
call fcn.004b444c
mov esi, eax
sar esi, 1
jns 0x4b2303
adc esi, 0
mov eax, dword [0x4cd258]
call fcn.004b443c
add esi, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
sar eax, 1
jns 0x4b231c
adc eax, 0
sub esi, eax
mov eax, dword [0x4cd258]
call fcn.004b4444
cmp ebx, eax
jge 0x4b2338
mov eax, dword [0x4cd258]
call fcn.004b4444
mov ebx, eax
mov eax, dword [0x4cd258]
call fcn.004b443c
cmp esi, eax
jge 0x4b2352
mov eax, dword [0x4cd258]
call fcn.004b443c
mov esi, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
push eax
mov ecx, esi
mov edx, ebx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x98]
mov eax, dword [ebp - 4]
mov byte [eax + 0x29f], 0
mov eax, dword [ebp - 4]
cmp byte [eax + 0x29e], 1
jne 0x4b243e
mov eax, dword [ebp - 4]
cmp byte [eax + 0x29a], 2
jne 0x4b23cb
push 0
mov eax, dword [ebp - 4]
call fcn.00479df8
push eax
push 0x223
mov eax, dword [0x4cd254]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0x37c]
push eax
call sub.user32.dll_SendMessageW
push 3
mov eax, dword [ebp - 4]
call fcn.00479df8
push eax
call sub.user32.dll_ShowWindow
jmp 0x4b241c
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x29a]
mov eax, dword [eax*4 + 0x4c6e88]
push eax
mov eax, dword [ebp - 4]
call fcn.00479df8
push eax
call sub.user32.dll_ShowWindow
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x4c]
shl edx, 0x10
or eax, edx
push eax
push 0
push 5
mov eax, dword [ebp - 4]
call fcn.00479df8
push eax
push 0x40c2dc
call sub.user32.dll_CallWindowProcW
mov eax, dword [ebp - 4]
call fcn.004710fc
push 0
push 0
push 0x234
mov eax, dword [0x4cd254]
mov eax, dword [eax + 0x44]
mov eax, dword [eax + 0x37c]
push eax
call sub.user32.dll_SendMessageW
jmp 0x4b259d
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x29a]
mov eax, dword [eax*4 + 0x4c6e88]
push eax
mov eax, dword [ebp - 4]
call fcn.00479df8
push eax
call sub.user32.dll_ShowWindow
jmp 0x4b259d
xor eax, eax
push ebp
push 0x4b2487
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov si, 0xffab
call fcn.00405774
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b249e
mov eax, dword [0x4cd258]
mov eax, dword [eax + 0x68]
cmp eax, dword [ebp - 4]
jne 0x4b24b5
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004b0cc8
mov eax, dword [ebp - 4]
cmp byte [eax + 0x29e], 1
jne 0x4b24d1
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0xc0]
jmp 0x4b259d
mov eax, dword [ebp - 4]
test byte [eax + 0x384], 8
je 0x4b24ff
push 0x97
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.00479df8
push eax
call sub.user32.dll_SetWindowPos
jmp 0x4b259d
xor ebx, ebx
mov eax, dword [ebp - 4]
call fcn.00479df8
mov esi, eax
call sub.user32.dll_GetActiveWindow
cmp esi, eax
jne 0x4b2534
mov eax, dword [ebp - 4]
call fcn.00479df8
call fcn.004ab0f4
test eax, eax
jne 0x4b2534
mov eax, dword [ebp - 4]
call fcn.00479df8
call fcn.004ab424
mov ebx, eax
test ebx, ebx
je 0x4b255d
push 0x97
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.00479df8
push eax
call sub.user32.dll_SetWindowPos
push ebx
call sub.user32.dll_SetActiveWindow
jmp 0x4b259d
push 0
mov eax, dword [ebp - 4]
call fcn.00479df8
push eax
call sub.user32.dll_ShowWindow
jmp 0x4b259d
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
je 0x4b259d
mov eax, dword [ebp - 4]
cmp dword [eax + 0x34], 0
je 0x4b259d
mov eax, dword [ebp - 4]
cmp byte [eax + 0x1ea], 0
je 0x4b259d
push 1
mov eax, dword [ebp - 4]
call fcn.00479df8
push eax
call sub.user32.dll_ShowWindow
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b25bc
mov eax, dword [ebp - 4]
and byte [eax + 0x384], 0xfb
ret