Function at 0x43b910
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x440200
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push ebx
push esi
push edi
mov eax, dword [0x468040]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
mov dword [0x491640], 0x30
mov dword [0x491644], 0x40
mov dword [0x491648], 0x43be20
mov dword [0x49164c], 0
mov dword [0x491650], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xorps xmm0, xmm0
mov dword [0x491654], eax
push 0x491640
movups xmmword [0x491658], xmm0
mov dword [0x491668], 0x465420
mov dword [0x49166c], 0
call dword [sym.imp.USER32.dll_RegisterClassExA]
push 0
push dword [0x491654]
push 0
push 0
push 0x190
push 0x230
push dword [0x4915e8]
push dword [0x4915f4]
push 0x80000000
push str.Celestial
push str.Celestial
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 0xa
push eax
mov dword [0x491638], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x491638]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0x20
mov dword [ebp - 4], 0
call dword [sym.imp.d3d9.dll_Direct3DCreate9]
mov ecx, eax
mov dword [0x491634], ecx
test ecx, ecx
je 0x43ba99
push 0x49163c
push 0x491670
push 0x40
push dword [0x491638]
xorps xmm0, xmm0
mov dword [0x491684], 0
push 1
movlpd qword [0x491670], xmm0
movlpd qword [0x49167c], xmm0
mov dword [0x49168c], 0
movlpd qword [0x49169c], xmm0
mov dword [0x491690], 1
mov dword [0x491688], 1
mov dword [0x491678], 0
mov dword [0x491694], 1
mov dword [0x491698], 0x50
mov dword [0x4916a4], 1
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x40]
call fcn.0043c0d0
cmp byte [0x4680a4], 0
je 0x43bc72
nop dword [eax + eax]
call fcn.0043c540
call fcn.0043cef0
mov dword [ebp - 4], 1
call fcn.0040a9b0
mov ecx, dword [0x49163c]
push 0
push 7
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x49163c]
push 0
push 0x1b
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x49163c]
push 0
push 0xae
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x49163c]
push 0
push ecx
mov dword [esp], 0x3f800000
mov eax, dword [ecx]
push 0xff000000
push 3
push 0
push 0
push ecx
call dword [eax + 0xac]
mov eax, dword [0x49163c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
js 0x43bb67
call fcn.0040ada0
mov eax, dword [0x4915c4]
xor ecx, ecx
mov eax, dword [eax + 0x47bc]
mov eax, dword [eax]
add eax, 0x38
cmp byte [eax], cl
cmovne ecx, eax
call fcn.0042b390
mov eax, dword [0x49163c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov ecx, dword [0x49163c]
push 0
push 0
push 0
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x44]
cmp eax, 0x88760868
jne 0x43bb99
mov eax, dword [0x49163c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x88760869
jne 0x43bb99
call fcn.0043c000
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
call fcn.0043b810
mov esi, dword [ebp - 0x24]
cmp esi, 0x7fffffff
jg 0x43bbcb
mov ebx, dword [ebp - 0x28]
jl 0x43bbc0
cmp ebx, 0xff67697f
jae 0x43bbcb
add ebx, 0x989680
adc esi, 0
jmp 0x43bbd3
or ebx, 0xffffffff
mov esi, 0x7fffffff
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x10], ebx
nop dword [eax]
lea ecx, [ebp - 0x30]
call fcn.0043b810
mov ecx, dword [ebp - 0x2c]
cmp ecx, esi
jg 0x43bc65
mov eax, dword [ebp - 0x30]
jl 0x43bbf8
cmp eax, ebx
jae 0x43bc65
mov edi, ebx
sub edi, eax
mov eax, esi
sbb eax, ecx
mov dword [ebp - 0x1c], eax
cmp eax, 0x4e94
jl 0x43bc20
jg 0x43bc14
cmp edi, 0x914f0000
jb 0x43bc20
push 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x43bbe0
push 0
push 0xf4240
push eax
push edi
call fcn.0043f840
push 0
push 0xf4240
mov ebx, edx
mov esi, eax
push ebx
push esi
call fcn.0043f9d0
cmp edx, dword [ebp - 0x1c]
jg 0x43bc51
jl 0x43bc4b
cmp eax, edi
jae 0x43bc51
add esi, 1
adc ebx, 0
push esi
mov dword [ebp - 0x1c], ebx
call sub.KERNEL32.dll_Sleep
mov ebx, dword [ebp - 0x10]
mov esi, dword [ebp - 0x14]
jmp 0x43bbe0
cmp byte [0x4680a4], 0
jne 0x43bab0
mov dword [ebp - 4], 2
mov ecx, dword [0x4915c4]
test ecx, ecx
je 0x43bc88
mov edi, dword [ecx + 0x7c]
jmp 0x43bc8a
xor edi, edi
lea ebx, [ecx + 8]
test ecx, ecx
je 0x43bcf5
mov esi, dword [ecx + 0x7c]
test esi, esi
je 0x43bcf5
cmp dword [esi], 0
je 0x43bcf5
mov edx, dword [esi + 4]
test edx, edx
je 0x43bcb7
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x4915c4]
mov dword [esi + 4], 0
mov edx, dword [esi + 8]
test edx, edx
je 0x43bcd1
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x4915c4]
mov dword [esi + 8], 0
mov edx, dword [esi + 0xc]
test edx, edx
je 0x43bcf5
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x4915c4]
mov dword [esi + 0xc], 0
mov eax, dword [ecx + 0x48]
mov dword [eax + 4], 0
mov edx, dword [edi]
test edx, edx
je 0x43bd07
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x4915c4]
mov dword [ebx + 0x6c], 0
mov dword [ebx + 0x74], 0
test ecx, ecx
je 0x43bd1f
dec dword [ecx + 0xb4]
push edi
mov edi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call edi
mov eax, dword [0x4915c4]
add esp, 4
test eax, eax
je 0x43bd39
mov esi, dword [eax + 0x78]
jmp 0x43bd3b
xor esi, esi
mov ecx, dword [esi + 0x28]
lea ebx, [eax + 8]
test ecx, ecx
je 0x43bd51
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [0x4915c4]
mov dword [ebx + 0x68], 0
mov dword [ebx + 0x70], 0
test eax, eax
je 0x43bd69
dec dword [eax + 0xb4]
push esi
call edi
mov esi, dword [0x4915c4]
add esp, 4
mov dword [0x4915c4], esi
call fcn.00406f30
mov dword [0x4915c4], 0
test esi, esi
je 0x43bdaa
mov ecx, esi
call fcn.0041b5f0
mov eax, dword [0x4915c4]
test eax, eax
je 0x43bda4
dec dword [eax + 0xb4]
push esi
call edi
add esp, 4
mov dword [ebp - 4], 3
mov ecx, dword [0x49163c]
test ecx, ecx
je 0x43bdcb
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x49163c], 0
mov ecx, dword [0x491634]
test ecx, ecx
je 0x43bde5
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x491634], 0
push dword [0x491638]
call dword [sym.imp.USER32.dll_DestroyWindow]
push dword [0x491654]
push dword [0x491668]
call dword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10