Function at 0x4ed8f0
Capabilities:
Hide graphical window

Disassembly:
push ebp
lea ebp, [esp - 0x560]
sub esp, 0x560
push 0xffffffffffffffff
push 0x54148f
mov eax, dword fs:[0]
push eax
sub esp, 0x54
mov eax, dword [0x582184]
xor eax, ebp
mov dword [ebp + 0x55c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp + 0x56c]
lea ecx, [ebp + 0x2dc]
mov esi, dword [ebp + 0x568]
push eax
call fcn.004f2c30
mov dword [ebp - 4], 0
lea ecx, [ebp + 0x2dc]
push esi
call fcn.004f4400
mov dword [ebp - 0x58], 0x54590c
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov byte [ebp - 4], 1
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0
mov byte [ebp - 4], 3
call fcn.004eeb50
mov ebx, dword [0x585ea0]
mov esi, eax
add ebx, 0x10
mov byte [ebp - 0x10], 0
mov dword [ebp - 0x14], ebx
mov byte [ebp - 4], 5
push ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [ebp - 0x10], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov esi, dword [esi + 0x34]
mov edi, eax
push 4
mov dword [ebp - 0x5c], esi
mov ecx, dword [esi + 8]
inc ecx
push ecx
push dword [esi]
call fcn.00506fcb
add esp, 0xc
test eax, eax
je 0x4eda2e
mov dword [esi], eax
mov eax, dword [esi + 8]
push 4
inc eax
push eax
push dword [esi + 4]
call fcn.00506fcb
add esp, 0xc
test eax, eax
je 0x4eda2e
mov dword [esi + 4], eax
mov eax, dword [esi + 8]
mov dword [ebp - 0x60], eax
lea ecx, [eax*4]
mov eax, dword [esi]
add eax, ecx
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 7
je 0x4eda10
mov dword [eax], edi
mov byte [ebp - 4], 5
mov eax, dword [esi + 4]
add eax, ecx
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 8
je 0x4eda27
lea ecx, [ebp - 0x58]
mov dword [eax], ecx
mov byte [ebp - 4], 5
inc dword [esi + 8]
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov byte [ebp - 0x10], 0
mov byte [ebp - 4], 3
lea eax, [ebp + 0x2fc]
push dword [ebp - 0x1c]
push eax
push 0x582010
push 0x582ac0
push 0x584f00
call fcn.004eab80
add esp, 0x14
movzx eax, ax
lea ecx, [ebp + 0x2dc]
push 0
push eax
push 0
push 0
push 0x80000000
push 0
push 0
push 0
call fcn.004ed0e0
push 5
push dword [ebp + 0x2e0]
call dword [sym.imp.USER32.dll_ShowWindow]
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov ebx, 1
xor esi, esi
nop dword [eax]
test ebx, ebx
je 0x4edac7
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x3c]
push eax
call edi
test eax, eax
jne 0x4edac7
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x58]
push esi
call dword [eax + 4]
inc esi
test eax, eax
jne 0x4edaa4
xor ebx, ebx
push 0
push 0
push 0
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
cmp eax, 0xffffffff
je 0x4edaa0
test eax, eax
je 0x4edb48
lea eax, [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x58]
call dword [eax]
test eax, eax
jne 0x4edb04
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
mov eax, dword [ebp - 0x38]
cmp eax, 0x118
ja 0x4edb1c
je 0x4edb38
cmp eax, 0xf
je 0x4edb38
cmp eax, 0xa0
jmp 0x4edb21
cmp eax, 0x200
je 0x4edb38
mov ecx, 1
xor eax, eax
test ecx, ecx
mov ebx, ecx
cmove eax, esi
mov esi, eax
jmp 0x4edaa0
xor ecx, ecx
xor eax, eax
test ecx, ecx
cmove eax, esi
mov esi, eax
jmp 0x4edaa0
call fcn.004eeb50
mov ecx, eax
call fcn.004f0780
lea ecx, [ebp + 0x2dc]
call fcn.004f3660
test al, al
je 0x4edb6a
xor bl, bl
jmp 0x4edf76
lea ecx, [ebp + 0x2dc]
call fcn.004f3580
push eax
lea ecx, [ebp + 0x4b4]
call fcn.00405950
mov byte [ebp - 4], 0xa
cmp dword [ebp + 0x4c4], 0
jne 0x4edbc0
push 2
lea ecx, [ebp]
call fcn.004f5950
mov byte [ebp - 4], 0xb
push 0
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp]
call fcn.004ed360
mov byte [ebp - 4], 0xa
lea ecx, [ebp]
call fcn.004f59e0
xor bl, bl
jmp 0x4edf67
lea ecx, [ebp + 0x170]
call fcn.004f5f70
mov byte [ebp - 4], 0xc
push 0
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp + 0x170]
call fcn.004ed360
cmp eax, 1
jne 0x4edec4
mov esi, dword [ebp - 0x20]
mov ecx, esi
call fcn.004eec80
test al, al
je 0x4ede0b
push 0x11
xor eax, eax
mov dword [ebp + 0x53c], 0
mov dword [ebp + 0x540], 0
lea ecx, [ebp + 0x52c]
push str.2345PicViewer.exe
mov dword [ebp + 0x53c], 0
mov dword [ebp + 0x540], 7
mov word [ebp + 0x52c], ax
call fcn.00404420
mov byte [ebp - 4], 0xd
lea eax, [ebp + 0x52c]
push 0
push 1
push eax
call fcn.004fbcf0
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x52c]
call fcn.00404370
push 0xb
xor eax, eax
mov dword [ebp + 0x524], 0
mov dword [ebp + 0x528], 0
lea ecx, [ebp + 0x514]
push str.2345Pic.exe
mov dword [ebp + 0x524], 0
mov dword [ebp + 0x528], 7
mov word [ebp + 0x514], ax
call fcn.00404420
mov byte [ebp - 4], 0xe
lea eax, [ebp + 0x514]
push 0
push 1
push eax
call fcn.004fbcf0
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x514]
call fcn.00404370
push 0xf
xor eax, eax
mov dword [ebp + 0x50c], 0
mov dword [ebp + 0x510], 0
lea ecx, [ebp + 0x4fc]
push 0x545b70
mov dword [ebp + 0x50c], 0
mov dword [ebp + 0x510], 7
mov word [ebp + 0x4fc], ax
call fcn.00404420
mov byte [ebp - 4], 0xf
lea eax, [ebp + 0x4fc]
push 0
push 1
push eax
call fcn.004fbcf0
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x4fc]
call fcn.00404370
push 0x11
xor eax, eax
mov dword [ebp + 0x4f4], 0
mov dword [ebp + 0x4f8], 0
lea ecx, [ebp + 0x4e4]
push 0x55beec
mov dword [ebp + 0x4f4], 0
mov dword [ebp + 0x4f8], 7
mov word [ebp + 0x4e4], ax
call fcn.00404420
mov byte [ebp - 4], 0x10
lea eax, [ebp + 0x4e4]
push 0
push 1
push eax
call fcn.004fbcf0
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x4e4]
call fcn.00404370
push 0x11
xor eax, eax
mov dword [ebp + 0x4dc], 0
mov dword [ebp + 0x4e0], 0
lea ecx, [ebp + 0x4cc]
push str.2345PdfEditor.exe
mov dword [ebp + 0x4dc], 0
mov dword [ebp + 0x4e0], 7
mov word [ebp + 0x4cc], ax
call fcn.00404420
mov byte [ebp - 4], 0x11
lea eax, [ebp + 0x4cc]
push 0
push 1
push eax
call fcn.004fbcf0
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x4cc]
call fcn.00404370
push 0
lea ecx, [ebp + 0x494]
call fcn.004f9240
mov byte [ebp - 4], 0x12
xor eax, eax
mov dword [ebp + 0x554], 0
mov dword [ebp + 0x558], 0
mov dword [ebp + 0x554], 0
mov dword [ebp + 0x558], 7
mov word [ebp + 0x544], ax
mov byte [ebp - 4], 0x13
lea eax, [ebp + 0x544]
push eax
lea eax, [ebp + 0x4b4]
push eax
lea ecx, [ebp + 0x494]
call fcn.004fa9e0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
mov byte [ebp - 4], 0x14
lea eax, [ebp + 0x544]
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x18]
call fcn.0040c9a0
push 0
lea eax, [ebp - 0x18]
mov ecx, esi
push eax
call fcn.004f17d0
mov bl, al
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x18]
call fcn.0040c590
mov byte [ebp - 4], 0x12
lea ecx, [ebp + 0x544]
call fcn.00404370
jmp 0x4edf49
push 0
lea ecx, [ebp + 0x494]
call fcn.004f9240
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
mov byte [ebp - 4], 0x16
lea eax, [ebp + 0x4b4]
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x18]
call fcn.0040c9a0
push 0x5574f4
lea ecx, [ebp + 0x544]
call fcn.00404380
mov byte [ebp - 4], 0x17
lea eax, [ebp + 0x544]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
lea ecx, [ebp + 0x494]
call fcn.004f9e80
mov bl, al
mov byte [ebp - 4], 0x16
lea ecx, [ebp + 0x544]
call fcn.00404370
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x18]
call fcn.0040c590
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x494]
call fcn.004f93a0
mov byte [ebp - 4], 0xa
lea ecx, [ebp + 0x170]
call fcn.004f5ff0
mov byte [ebp - 4], 3
lea ecx, [ebp + 0x4b4]
call fcn.00404370
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x4edf91
push eax
call fcn.00504659
add esp, 4
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x4edfba
push eax
call fcn.00504659
add esp, 4
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x2dc]
call fcn.004f3160
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x55c]
xor ecx, ebp
call fcn.005001f6
lea esp, [ebp + 0x560]
pop ebp
ret 8