Function at 0x4fb92c
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffac
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4fc02d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
jne 0x4fb981
mov eax, dword [ebp - 4]
test byte [eax + 0x3cc], 4
je 0x4fb981
lea edx, [ebp - 0x44]
mov eax, dword [0x5dc178]
call fcn.0040f9a8
mov ecx, dword [ebp - 0x44]
mov dl, 1
mov eax, dword [0x435264]
call fcn.00422c04
call fcn.00408f34
mov eax, dword [0x5e3778]
call fcn.00501854
mov eax, dword [ebp - 4]
or byte [eax + 0x3cc], 4
xor edx, edx
push ebp
push 0x4fc010
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
jne 0x4fbfca
mov eax, dword [ebp - 4]
cmp byte [eax + 0x215], 0
je 0x4fbebe
xor eax, eax
push ebp
push 0x4fb9e4
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov si, 0xffa7
call fcn.00407e34
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4fb9fb
mov eax, dword [ebp - 4]
cmp byte [eax + 0x2d3], 4
je 0x4fba2f
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x2d3]
sub al, 4
je 0x4fba1f
add al, 0xfe
sub al, 2
jae 0x4fbb12
mov eax, dword [ebp - 4]
cmp byte [eax + 0x2d2], 1
jne 0x4fbb12
mov eax, dword [ebp - 4]
cmp byte [eax + 0x2d2], 1
jne 0x4fba85
mov eax, dword [0x5e3778]
mov eax, dword [eax + 0x58]
call fcn.0049a250
mov ebx, eax
mov eax, dword [ebp - 4]
sub ebx, dword [eax + 0x58]
sar ebx, 1
jns 0x4fba57
adc ebx, 0
mov eax, dword [0x5e3778]
mov eax, dword [eax + 0x58]
call fcn.0049a294
mov esi, eax
mov eax, dword [ebp - 4]
sub esi, dword [eax + 0x5c]
sar esi, 1
jns 0x4fba73
adc esi, 0
lea edx, [ebp - 0x14]
mov eax, dword [0x5e3778]
mov eax, dword [eax + 0x58]
mov ecx, dword [eax]
call dword [ecx + 0x70]
jmp 0x4fbac9
mov eax, dword [ebp - 4]
call fcn.004f8638
lea edx, [ebp - 0x14]
call fcn.004fd598
lea eax, [ebp - 0x14]
call fcn.00410a84
mov ebx, eax
mov eax, dword [ebp - 4]
sub ebx, dword [eax + 0x58]
sar ebx, 1
jns 0x4fbaac
adc ebx, 0
add ebx, dword [ebp - 0x14]
lea eax, [ebp - 0x14]
call fcn.00410a8c
mov esi, eax
mov eax, dword [ebp - 4]
sub esi, dword [eax + 0x5c]
sar esi, 1
jns 0x4fbac6
adc esi, 0
add esi, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
cmp ebx, eax
jge 0x4fbad2
mov ebx, eax
mov eax, dword [ebp - 0x10]
cmp esi, eax
jge 0x4fbadb
mov esi, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x58]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
push eax
mov ecx, esi
mov edx, ebx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc8]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x69], 0
je 0x4fbdca
mov eax, dword [ebp - 4]
call fcn.004f8e84
jmp 0x4fbdca
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x2d3]
mov edx, eax
add dl, 0xfa
sub dl, 2
jae 0x4fbccf
mov eax, dword [0x5e3778]
mov edi, dword [eax + 0x58]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x2d3], 7
jne 0x4fbb59
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
mov edx, dword [0x4f20ac]
call fcn.00407d60
test al, al
je 0x4fbb59
mov eax, dword [ebp - 4]
mov edi, dword [eax + 4]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x2ce], 2
jne 0x4fbb87
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x308]
mov eax, dword [ebp - 4]
call fcn.004f72c4
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x30c]
mov eax, dword [ebp - 4]
call fcn.004f72f0
test edi, edi
je 0x4fbbd7
cmp edi, dword [ebp - 4]
je 0x4fbbd7
mov eax, edi
call fcn.004f6e1c
mov ebx, eax
mov eax, dword [edi + 0x58]
mov edx, dword [ebp - 4]
sub eax, dword [edx + 0x58]
sar eax, 1
jns 0x4fbba9
adc eax, 0
add ebx, eax
mov eax, edi
call fcn.004f6e3c
mov esi, eax
mov eax, dword [edi + 0x5c]
mov edx, dword [ebp - 4]
sub eax, dword [edx + 0x5c]
sar eax, 1
jns 0x4fbbc4
adc eax, 0
add esi, eax
mov eax, edi
call fcn.004f8638
lea edx, [ebp - 0x14]
call fcn.004fd598
jmp 0x4fbc16
mov eax, dword [0x5e377c]
call fcn.004fd8c8
mov ebx, eax
mov eax, dword [ebp - 4]
sub ebx, dword [eax + 0x58]
sar ebx, 1
jns 0x4fbbf0
adc ebx, 0
mov eax, dword [0x5e377c]
call fcn.004fd8c0
mov esi, eax
mov eax, dword [ebp - 4]
sub esi, dword [eax + 0x5c]
sar esi, 1
jns 0x4fbc09
adc esi, 0
lea edx, [ebp - 0x14]
mov eax, dword [0x5e377c]
call fcn.004fe9f0
mov eax, dword [ebp - 0x14]
cmp ebx, eax
jge 0x4fbc1f
mov ebx, eax
mov eax, dword [ebp - 0x10]
cmp esi, eax
jge 0x4fbc28
mov esi, eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0x2ce], 2
jne 0x4fbc98
mov eax, dword [ebp - 4]
call fcn.004a3d6c
test al, al
je 0x4fbc98
mov edx, ebx
mov eax, dword [ebp - 4]
call fcn.004fcd90
mov edx, esi
mov eax, dword [ebp - 4]
call fcn.004fcdcc
mov dword [ebp - 0x40], 0x2c
lea eax, [ebp - 0x40]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x288]
push eax
call sub.user32.dll_GetWindowPlacement
lea edx, [ebp - 0x54]
mov eax, dword [ebp - 4]
call fcn.0049a1f4
lea esi, [ebp - 0x54]
lea edi, [ebp - 0x24]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x40]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x288]
push eax
call sub.user32.dll_SetWindowPlacement
jmp 0x4fbcb5
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x58]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
push eax
mov ecx, esi
mov edx, ebx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc8]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x69], 0
je 0x4fbdca
mov eax, dword [ebp - 4]
call fcn.004f8e84
jmp 0x4fbdca
cmp al, 5
jne 0x4fbdca
mov eax, dword [ebp - 4]
cmp byte [eax + 0x2d2], 1
jne 0x4fbd1d
mov eax, dword [0x5e3778]
mov eax, dword [eax + 0x58]
call fcn.0049a250
mov ebx, eax
mov eax, dword [ebp - 4]
sub ebx, dword [eax + 0x58]
sar ebx, 1
jns 0x4fbcff
adc ebx, 0
mov eax, dword [0x5e3778]
mov eax, dword [eax + 0x58]
call fcn.0049a294
mov esi, eax
mov eax, dword [ebp - 4]
sub esi, dword [eax + 0x5c]
sar esi, 1
jns 0x4fbd79
adc esi, 0
jmp 0x4fbd79
mov eax, dword [0x5e377c]
call fcn.004fd8e8
mov ebx, eax
sar ebx, 1
jns 0x4fbd30
adc ebx, 0
mov eax, dword [0x5e377c]
call fcn.004fd8d8
add ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x58]
sar eax, 1
jns 0x4fbd49
adc eax, 0
sub ebx, eax
mov eax, dword [0x5e377c]
call fcn.004fd8e0
mov esi, eax
sar esi, 1
jns 0x4fbd5e
adc esi, 0
mov eax, dword [0x5e377c]
call fcn.004fd8d0
add esi, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
sar eax, 1
jns 0x4fbd77
adc eax, 0
sub esi, eax
mov eax, dword [0x5e377c]
call fcn.004fd8d8
cmp ebx, eax
jge 0x4fbd93
mov eax, dword [0x5e377c]
call fcn.004fd8d8
mov ebx, eax
mov eax, dword [0x5e377c]
call fcn.004fd8d0
cmp esi, eax
jge 0x4fbdad
mov eax, dword [0x5e377c]
call fcn.004fd8d0
mov esi, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x58]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x5c]
push eax
mov ecx, esi
mov edx, ebx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc8]
mov eax, dword [ebp - 4]
mov byte [eax + 0x2d3], 0
mov eax, dword [ebp - 4]
cmp byte [eax + 0x2d2], 1
jne 0x4fbe99
mov eax, dword [ebp - 4]
cmp byte [eax + 0x2ce], 2
jne 0x4fbe26
push 0
mov eax, dword [ebp - 4]
call fcn.004a3994
push eax
push 0x223
mov eax, dword [0x5e3778]
mov eax, dword [eax + 0x58]
mov eax, dword [eax + 0x3c4]
push eax
call sub.user32.dll_SendMessageW
push 3
mov eax, dword [ebp - 4]
call fcn.004a3994
push eax
call sub.user32.dll_ShowWindow
jmp 0x4fbe77
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x2ce]
mov eax, dword [eax*4 + 0x5dab90]
push eax
mov eax, dword [ebp - 4]
call fcn.004a3994
push eax
call sub.user32.dll_ShowWindow
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x58]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x5c]
shl edx, 0x10
or eax, edx
push eax
push 0
push 5
mov eax, dword [ebp - 4]
call fcn.004a3994
push eax
push 0x4122d4
call sub.user32.dll_CallWindowProcW
mov eax, dword [ebp - 4]
call fcn.0049ad4c
push 0
push 0
push 0x234
mov eax, dword [0x5e3778]
mov eax, dword [eax + 0x58]
mov eax, dword [eax + 0x3c4]
push eax
call sub.user32.dll_SendMessageW
jmp 0x4fbff8
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x2ce]
mov eax, dword [eax*4 + 0x5dab90]
push eax
mov eax, dword [ebp - 4]
call fcn.004a3994
push eax
call sub.user32.dll_ShowWindow
jmp 0x4fbff8
xor eax, eax
push ebp
push 0x4fbee2
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov si, 0xffa8
call fcn.00407e34
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4fbef9
mov eax, dword [0x5e377c]
mov eax, dword [eax + 0x74]
cmp eax, dword [ebp - 4]
jne 0x4fbf10
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004fa450
mov eax, dword [ebp - 4]
cmp byte [eax + 0x2d2], 1
jne 0x4fbf2c
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0xf4]
jmp 0x4fbff8
mov eax, dword [ebp - 4]
test byte [eax + 0x3cc], 8
je 0x4fbf5a
push 0x97
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.004a3994
push eax
call sub.user32.dll_SetWindowPos
jmp 0x4fbff8
xor ebx, ebx
mov eax, dword [ebp - 4]
call fcn.004a3994
mov esi, eax
call sub.user32.dll_GetActiveWindow
cmp esi, eax
jne 0x4fbf8f
mov eax, dword [ebp - 4]
call fcn.004a3994
call fcn.004f42a0
test eax, eax
jne 0x4fbf8f
mov eax, dword [ebp - 4]
call fcn.004a3994
call fcn.004f45e0
mov ebx, eax
test ebx, ebx
je 0x4fbfb8
push 0x97
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.004a3994
push eax
call sub.user32.dll_SetWindowPos
push ebx
call sub.user32.dll_SetActiveWindow
jmp 0x4fbff8
push 0
mov eax, dword [ebp - 4]
call fcn.004a3994
push eax
call sub.user32.dll_ShowWindow
jmp 0x4fbff8
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
je 0x4fbff8
mov eax, dword [ebp - 4]
cmp dword [eax + 0x40], 0
je 0x4fbff8
mov eax, dword [ebp - 4]
cmp byte [eax + 0x215], 0
je 0x4fbff8
push 1
mov eax, dword [ebp - 4]
call fcn.004a3994
push eax
call sub.user32.dll_ShowWindow
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4fc017
mov eax, dword [ebp - 4]
and byte [eax + 0x3cc], 0xfb
ret