Function at 0x444da4
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x458
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [0x49a570], eax
mov eax, dword [ebp + 8]
mov esi, 0x46b680
push 0x104
push esi
push eax
mov dword [0x49a558], eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push esi
call fcn.00453a29
mov dword [esp], 0x411200
push dword [ebp + 0x10]
call dword [sym.imp.MSVCRT.dll_strstr]
pop ecx
test eax, eax
pop ecx
je 0x444df9
call fcn.0046746d
jmp 0x4450b2
call fcn.00457007
test eax, eax
jne 0x444e0a
push 1
pop eax
jmp 0x4450b4
push 0x40ca28
lea ecx, [ebp - 0x458]
call fcn.0044f4ed
lea ecx, [ebp - 0x458]
call fcn.0044f214
mov eax, dword [ebp - 0x230]
mov ecx, 0x48b1f8
mov dword [0x49a554], eax
call fcn.00440b9c
push dword [ebp + 0x10]
call fcn.00444cbe
test eax, eax
pop ecx
jne 0x4450a7
push ebx
mov ebx, 0x46b888
push edi
mov ecx, ebx
call fcn.004373cf
push 1
call fcn.00419a21
call fcn.00453e26
mov dword [0x49a564], eax
call fcn.00453e54
mov dword [0x49a568], eax
call fcn.00453e95
push 0x33
push 0x32
push dword [0x49a558]
mov dword [0x49a56c], eax
push 0x66
call fcn.0045706d
xor esi, esi
add esp, 0x14
cmp dword [0x49a140], esi
je 0x444eb6
call fcn.004570b1
cmp eax, esi
je 0x444eb6
push 0x49a34c
push 0x49a144
mov ecx, eax
call fcn.0045f439
push SysReAllocString
push 0x49a574
push 0x4111e4
push 0x40b278
call fcn.00452291
add esp, 0x10
xor eax, eax
cmp dword [0x49a574], esi
mov ecx, 0x46bb18
sete al
push eax
call fcn.0045449f
cmp dword [0x48b298], esi
je 0x444efa
mov dword [0x46bb60], 0x48aaf0
mov esi, 0x46bae8
mov ecx, esi
call fcn.0043f4f4
push dword [0x48b290]
mov dword [0x46bb14], esi
call fcn.004570e6
mov ecx, eax
call fcn.00466533
lea eax, [ebp - 0x458]
push eax
push 0xf
call fcn.00452730
pop ecx
mov esi, 0x46bb68
push eax
mov ecx, esi
call fcn.0042be34
mov edi, eax
push 5
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, esi
call fcn.004575c8
call fcn.00429a39
call fcn.00429d55
push 0x4111cc
push edi
mov ecx, ebx
call fcn.00437288
mov ecx, esi
call fcn.00431d9f
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push 0
push edi
mov dword [ebp + 8], eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov dword [ebp + 0x10], eax
mov edi, dword [sym.imp.USER32.dll_GetMessageW]
xor eax, eax
push eax
push eax
push eax
lea eax, [ebp - 0x1c]
push eax
call edi
test eax, eax
je 0x44505f
lea eax, [ebp - 0x1c]
mov ecx, esi
push eax
call fcn.00434712
test eax, eax
jne 0x445051
lea eax, [ebp - 0x1c]
mov ecx, 0x46baf0
push eax
push dword [0x46bb6c]
call fcn.0044ae09
test eax, eax
jne 0x445051
cmp dword [0x49a574], eax
je 0x444fe1
lea eax, [ebp - 0x1c]
mov ecx, 0x46bb18
push eax
call fcn.00454a7d
test eax, eax
jne 0x445051
cmp dword [ebp - 0x18], 0x200
jbe 0x444ffd
cmp dword [ebp - 0x18], 0x20d
ja 0x444ffd
lea eax, [ebp - 0x1c]
push eax
call fcn.00417e44
pop ecx
cmp dword [ebp - 0x18], 0x20a
jne 0x44501c
push dword [ebp + 0x10]
lea eax, [ebp - 0x1c]
push dword [ebp + 8]
push eax
call fcn.00466a61
add esp, 0xc
test eax, eax
jne 0x445051
cmp dword [0x49a574], 0
je 0x44503d
push dword [ebp - 0x10]
mov ecx, ebx
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
call fcn.00436b57
cmp eax, 1
je 0x445051
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
xor eax, eax
push eax
push eax
push eax
lea eax, [ebp - 0x1c]
push eax
jmp 0x444f8e
push 0
call fcn.00419a21
mov eax, dword [0x49a55c]
pop ecx
pop edi
pop ebx
test eax, eax
je 0x445079
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x46bb18
call fcn.004544d3
mov ecx, 0x46baf0
call fcn.0044b063
call fcn.004570a0
call fcn.00457064
mov eax, dword [0x49a560]
test eax, eax
je 0x4450a7
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
lea ecx, [ebp - 0x458]
call fcn.0044f577
xor eax, eax
pop esi
leave
ret 0x10