Function at 0x4903c0
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
mov ecx, 5
push 0
push 0
dec ecx
jne 0x4903c8
push ebx
push esi
push edi
mov ebx, 0x492628
xor eax, eax
push ebp
push 0x490758
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x20]
mov eax, 1
call fcn.0042d330
mov eax, dword [ebp - 0x20]
mov edx, 0x490770
call fcn.00406a2c
test eax, eax
jne 0x490409
mov byte [ebp - 1], 1
jmp 0x49042f
lea edx, [ebp - 0x20]
mov eax, 1
call fcn.0042d330
mov eax, dword [ebp - 0x20]
mov edx, 0x490780
call fcn.00406a2c
test eax, eax
jne 0x49073d
mov byte [ebp - 1], 0
mov edx, 0x490790
mov eax, dword [ebx]
call fcn.0042426c
push 5
mov eax, dword [ebx]
mov eax, dword [eax + 0x20]
push eax
call sub.user32.dll_ShowWindow
call fcn.0047804c
push 0x490798
push 0
push 0
call sub.kernel32.dll_CreateMutexA
mov dword [ebp - 8], eax
push 0
mov eax, dword [ebx]
mov eax, dword [eax + 0x20]
push eax
call sub.user32.dll_ShowWindow
cmp dword [ebp - 8], 0
je 0x49048f
mov eax, dword [ebx]
call fcn.00424454
push 0xff
push 0xffffffffffffffff
push 0
lea eax, [ebp - 8]
push eax
push 1
call sub.user32.dll_MsgWaitForMultipleObjects
dec eax
je 0x490471
push 5
mov eax, dword [ebx]
mov eax, dword [eax + 0x20]
push eax
call sub.user32.dll_ShowWindow
xor eax, eax
push ebp
push 0x490736
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x20]
xor eax, eax
call fcn.0042d330
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x10]
mov edx, 0x4907b8
call fcn.0042c448
lea edx, [ebp - 0x20]
xor eax, eax
call fcn.0042d330
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x14]
mov edx, 0x4907c8
call fcn.0042c448
mov eax, dword [ebp - 0x14]
call fcn.0042cc08
test al, al
je 0x4906d9
mov cl, 1
xor edx, edx
mov eax, dword [ebp - 0x10]
call fcn.00450830
test byte [0x492ee4], 1
setne al
call fcn.0042ea58
mov edx, dword [0x492dcc]
mov eax, dword [ebx]
call fcn.0042426c
xor eax, eax
push ebp
push 0x4906d2
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00475dc4
push 2
push 0
push 1
mov ecx, dword [ebp - 0x14]
mov dl, 1
mov eax, 0x44f83c
call fcn.0044fa44
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x4906b8
push dword fs:[eax]
mov dword fs:[eax], esp
jmp 0x490692
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0xc]
call fcn.0044fce8
mov eax, dword [ebp - 0x18]
call fcn.00403574
cmp eax, 4
jle 0x490692
mov eax, dword [ebp - 0x18]
cmp byte [eax], 0x5b
jne 0x490692
mov eax, dword [ebp - 0x18]
cmp byte [eax + 3], 0x5d
jne 0x490692
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x7fffffff
mov edx, 5
mov eax, dword [ebp - 0x18]
call fcn.00403778
mov eax, dword [ebp - 0x18]
cmp byte [eax + 2], 0x71
je 0x4905bb
cmp byte [ebp - 1], 0
je 0x4905b7
cmp byte [0x49327e], 0
je 0x4905bb
xor eax, eax
jmp 0x4905bd
mov al, 1
mov byte [ebp - 2], al
xor eax, eax
push ebp
push 0x490628
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x18]
mov al, byte [eax + 1]
sub al, 0x53
je 0x4905f8
dec al
je 0x490614
sub al, 0x1f
je 0x4905e6
dec al
je 0x49060a
jmp 0x49061e
mov al, byte [ebp - 2]
push eax
mov ecx, dword [ebp - 0x1c]
xor edx, edx
xor eax, eax
call fcn.0045647c
jmp 0x49061e
mov al, byte [ebp - 2]
push eax
mov ecx, dword [ebp - 0x1c]
mov dl, 1
xor eax, eax
call fcn.0045647c
jmp 0x49061e
mov eax, dword [ebp - 0x1c]
call fcn.00454a08
jmp 0x49061e
mov edx, dword [ebp - 0x1c]
xor eax, eax
call fcn.0045663c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490692
mov eax, dword [ebp - 0xc]
call fcn.0044fcd8
test al, al
je 0x490554
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4906bf
mov eax, dword [ebp - 0xc]
call fcn.00402b58
ret
mov eax, dword [ebp - 0x14]
call fcn.00406ef0
mov eax, dword [ebp - 0x10]
call fcn.00406ef0
xor eax, eax
push ebp
push 0x490706
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0049031c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x490710
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49073d
cmp dword [ebp - 8], 0
je 0x490735
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_ReleaseMutex
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_CloseHandle_1
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49075f
lea eax, [ebp - 0x28]
mov edx, 7
call fcn.00403420
ret