Function at 0x4d89e0
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
mov eax, dword [0x5b7de4]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, ecx
push esi
push edi
push dword [ebx + 4]
lea edi, [ebx + 4]
mov dword [ebp - 0x4c], ebx
call dword [sym.imp.USER32.dll_GetParent]
push eax
mov ecx, edi
call fcn.00411cd0
push 0x57a508
push dword [edi]
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0
push 0
push 0x31
push dword [edi]
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebx + 0x118], eax
lea esi, [ebx + 0x70]
mov eax, dword [edi]
mov dword [ebp - 0x48], eax
call fcn.00424860
cmp dword [eax + 0x30], 0
jne 0x4d8a4c
call fcn.00424860
mov dword [eax + 0x30], str.ToolbarWindow32
call fcn.00424860
lea ecx, [esi + 0x40]
push ecx
push eax
push 0x5c8998
push 0x5b7120
call fcn.00420c70
movzx eax, ax
mov dword [ebp - 0x44], eax
mov eax, dword [esi + 0x34]
test eax, eax
jne 0x4d8d00
call fcn.00503a66
mov dword [esi + 0x34], eax
test eax, eax
jne 0x4d8d00
push 0xe
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0
push dword [ebx + 0x74]
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x44c
push dword [edi]
xorps xmm0, xmm0
movups xmmword [ebp - 0x14], xmm0
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0
push 0
mov esi, eax
push 0xb
push esi
call dword [sym.imp.USER32.dll_SendMessageA]
lea eax, [ebp - 0x14]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowRect]
mov esi, dword [sym.imp.USER32.dll_ScreenToClient]
lea eax, [ebp - 0x14]
push eax
push dword [edi]
call esi
test eax, eax
je 0x4d8ae1
lea eax, [ebp - 0xc]
push eax
push dword [edi]
call esi
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x10]
sub eax, edx
mov ecx, dword [ebp - 0x14]
push 0
push dword [0x5c899c]
push 0x6c
push dword [edi]
push eax
mov eax, dword [ebp - 0xc]
sub eax, ecx
push eax
push edx
push ecx
push 0x56001005
push 0
push str.SysListView32
push 0x200
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0x21
push 0
push 0x1036
push eax
mov dword [ebx + 0x6c], eax
call esi
push 0
push 0
push 0x31
push dword [edi]
call esi
push 1
push eax
push 0x30
push dword [ebx + 0x6c]
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 0
push 0x101b
push dword [ebx + 0x6c]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x5729c4
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0x78
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 1
push 0x101b
push dword [ebx + 0x6c]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x57a518
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0x78
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push eax
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x576b44
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0x96
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
push 2
push 0x101b
push dword [ebx + 0x6c]
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 3
push 0x101b
push dword [ebx + 0x6c]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x57a490
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0x64
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0
push eax
push 4
push 0x101b
push dword [ebx + 0x6c]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
movlpd qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x20], xmm0
mov dword [ebp - 0x34], 0x575b88
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0x78
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x2c], 0
call esi
mov ecx, ebx
call fcn.004d7cc0
push 0x2000000
push 1
push 1
lea ecx, [ebx + 0x48]
call fcn.004d6d70
push 1
push 0
push dword [edi]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005189ad
mov esp, ebp
pop ebp
ret 0x10
push 0
push 0
push eax
call fcn.00503b65
cmp word [ebp - 0x44], 0
je 0x4d8a8e
lea ebx, [esi + 0x28]
test ebx, ebx
je 0x4d8d97
test esi, esi
je 0x4d8d97
mov dword [ebx], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x5b7124
mov dword [ebx + 4], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x5b713c]
mov dword [ebx + 8], eax
push 0x5b7124
mov dword [0x5b713c], ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [0x5b7150]
mov eax, dword [0x5b7158]
mov edx, dword [0x5b714c]
sub eax, ecx
push 0
push dword [0x5c899c]
push esi
push dword [ebp - 0x48]
push eax
mov eax, dword [0x5b7154]
sub eax, edx
push eax
mov eax, dword [ebp - 0x44]
push ecx
push edx
push 0x5600184c
push 0
movzx eax, ax
push eax
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov ebx, dword [ebp - 0x4c]
jmp 0x4d8a8e
push 1
push 0xc0000005
call fcn.0041a790
int3