Function at 0x56cc94
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5e810f
mov eax, dword fs:[0]
push eax
sub esp, 0xc0
push ebx
push esi
push edi
mov eax, dword [0x70b744]
xor eax, esp
push eax
lea eax, [esp + 0xd0]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
mov eax, 0xc8
cmp ecx, eax
jg 0x56d2ba
je 0x56d27c
push 0x10
lea eax, [ecx - 0x64]
pop esi
cmp eax, esi
ja case.0x56ccea.100
jmp dword [eax*4 + 0x56d484]
mov al, 1
jmp 0x56d46b
cmp byte [ebx + 0x88], 0
jne case.0x56ccea.100
lea eax, [ebx + 0x70]
push eax
lea ecx, [esp + 0x20]
mov byte [ebx + 0x8b], 0
mov byte [ebx + 0x8a], 0
call fcn.00411742
xor eax, eax
mov dword [esp + 0xd8], eax
cmp dword [ebx + 0x68], eax
jne 0x56cde4
push eax
push eax
lea edi, [ebx + 0x58]
push edi
lea esi, [esp + 0x64]
call fcn.0044b496
sub esp, 0x1c
mov byte [esp + 0xfc], 1
mov eax, dword [eax]
mov ecx, esp
mov dword [esp + 0x50], esp
push ecx
mov ecx, eax
call fcn.005a806f
push edi
lea esi, [esp + 0xa8]
call fcn.0044b496
mov byte [esp + 0xfc], 2
mov eax, dword [eax]
push dword [eax + 4]
lea eax, [esp + 0xb8]
push eax
call fcn.0056b8a1
add esp, 0x2c
mov byte [esp + 0xd8], 3
mov ecx, dword [eax]
add eax, 4
mov dword [ebx + 0x68], ecx
push eax
lea ecx, [ebx + 0x6c]
call fcn.00411788
mov byte [esp + 0xd8], 2
mov ecx, dword [esp + 0x94]
test ecx, ecx
je 0x56cdb7
call fcn.004117b8
mov byte [esp + 0xd8], 1
mov ecx, dword [esp + 0x84]
test ecx, ecx
je 0x56cdcf
call fcn.004117b8
mov byte [esp + 0xd8], 0
mov ecx, dword [esp + 0x5c]
test ecx, ecx
je 0x56cde4
call fcn.004117b8
lea eax, [ebx + 0x58]
push eax
lea esi, [esp + 0x4c]
call fcn.0044b496
mov byte [esp + 0xd8], 4
mov eax, dword [eax]
push dword [eax + 4]
mov ecx, dword [ebx + 0x68]
push ecx
call fcn.00449f7e
mov byte [esp + 0xd8], 0
mov ecx, dword [esp + 0x4c]
test ecx, ecx
je 0x56ce1c
call fcn.004117b8
mov eax, dword [ebx + 0x68]
push 5
push dword [eax + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebx + 0x68]
call fcn.0056b14a
push dword [ebx + 0x68]
call fcn.0056bd94
or dword [esp + 0xd8], 0xffffffff
cmp byte [esp + 0x20], 0
je case.0x56ccea.107
mov ecx, dword [esp + 0x1c]
call fcn.0040df8b
jmp case.0x56ccea.107
cmp byte [ebx + 0x88], 0
sete al
jmp 0x56d46b
cmp byte [ebx + 0x88], 0
jne case.0x56ccea.100
mov eax, dword [ebx + 0x60]
lea esi, [esp + 0x88]
call fcn.00449db2
push eax
lea esi, [esp + 0x6c]
mov dword [esp + 0xdc], 5
call fcn.0044b496
cmp dword [eax], 0
mov ecx, dword [esp + 0x6c]
sete byte [esp + 0x13]
test ecx, ecx
je 0x56ceb0
call fcn.004117b8
or dword [esp + 0xd8], 0xffffffff
lea ecx, [esp + 0x8c]
call fcn.00412117
cmp byte [esp + 0x13], 0
jne case.0x56ccea.100
lea eax, [ebx + 0x70]
push eax
lea ecx, [esp + 0x18]
call fcn.00411742
mov dword [esp + 0xd8], 6
cmp dword [ebx + 0x68], 0
jne 0x56cf09
or dword [esp + 0xd8], 0xffffffff
cmp byte [esp + 0x18], 0
je case.0x56ccea.100
mov ecx, dword [esp + 0x14]
jmp 0x56d464
mov eax, dword [ebx + 0x60]
add eax, 0x718
push eax
lea ecx, [esp + 0x30]
call fcn.00411742
mov eax, dword [ebx + 0x60]
lea esi, [esp + 0x78]
call fcn.00449db2
push eax
lea esi, [esp + 0x20]
call fcn.0044b496
lea ecx, [esp + 0x7c]
mov byte [esp + 0xd8], 8
call fcn.00412117
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x56cf7e
mov ecx, dword [ebx + 0x68]
mov edx, dword [eax + 4]
mov dword [ecx + 0x7c], edx
mov ecx, dword [ebx + 0x68]
mov edx, dword [eax + 8]
mov esi, dword [eax + 0xc]
mov dword [ecx + 0xa0], edx
mov dword [ecx + 0xa4], esi
cmp byte [eax + 0x10], 0
je 0x56cf76
mov esi, dword [ebx + 0x68]
call fcn.00449de2
push dword [ebx + 0x68]
call fcn.0056bd94
mov byte [esp + 0xd8], 7
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x56cf93
call fcn.004117b8
mov byte [esp + 0xd8], 6
cmp byte [esp + 0x30], 0
je 0x56cfab
mov ecx, dword [esp + 0x2c]
call fcn.0040df8b
or dword [esp + 0xd8], 0xffffffff
cmp byte [esp + 0x18], 0
je case.0x56ccea.107
mov ecx, dword [esp + 0x14]
jmp 0x56ce51
cmp byte [ebx + 0x88], 0
jne case.0x56ccea.100
mov eax, dword [ebx + 0x60]
test eax, eax
je case.0x56ccea.100
lea esi, [esp + 0x60]
call fcn.00449dca
push eax
lea esi, [esp + 0x54]
mov dword [esp + 0xdc], 9
call fcn.0044b496
cmp dword [eax], 0
mov ecx, dword [esp + 0x54]
sete byte [esp + 0x13]
test ecx, ecx
je 0x56d012
call fcn.004117b8
or dword [esp + 0xd8], 0xffffffff
lea ecx, [esp + 0x64]
call fcn.00412117
cmp byte [esp + 0x13], 0
jne case.0x56ccea.100
lea eax, [ebx + 0x70]
push eax
lea ecx, [esp + 0x28]
call fcn.00411742
mov dword [esp + 0xd8], 0xa
cmp dword [ebx + 0x68], 0
je 0x56d19a
mov eax, dword [ebx + 0x60]
add eax, 0x764
push eax
lea ecx, [esp + 0x18]
call fcn.00411742
mov eax, dword [ebx + 0x60]
lea esi, [esp + 0x70]
call fcn.00449dca
push eax
lea esi, [esp + 0x20]
call fcn.0044b496
lea ecx, [esp + 0x74]
mov byte [esp + 0xd8], 0xc
call fcn.00412117
mov edi, dword [esp + 0x1c]
test edi, edi
je 0x56d16d
cmp dword [ebx + 0x68], 0
je 0x56d16d
lea eax, [edi + 0x4e4]
lea edx, [edi + 0x4c8]
push eax
lea ecx, [esp + 0xb4]
call fcn.0056f47f
sub esp, 0x18
mov byte [esp + 0xf4], 0xd
mov ecx, esp
mov dword [esp + 0x48], esp
push eax
call fcn.0041186e
push dword [ebx + 0x68]
call fcn.0056b2e9
push 0
push 1
lea ecx, [esp + 0xb8]
mov byte [esp + 0xe0], 0xc
call fcn.00410779
mov eax, dword [ebx + 0x68]
mov ecx, dword [edi]
mov dword [eax + 0x80], ecx
mov eax, dword [ebx + 0x68]
mov ecx, dword [edi + 0x20]
mov edx, dword [edi + 0x24]
mov dword [eax + 0x98], ecx
mov dword [eax + 0x9c], edx
mov esi, dword [ebx + 0x60]
call fcn.005c71b7
dec eax
dec eax
je 0x56d13b
dec eax
jne 0x56d165
mov ecx, dword [edi + 0x10]
mov edx, dword [edi + 0x14]
mov eax, dword [ebx + 0x68]
mov dword [eax + 0x88], ecx
mov dword [eax + 0x8c], edx
mov ecx, dword [edi + 8]
mov edi, dword [edi + 0xc]
jmp 0x56d156
mov ecx, dword [edi + 8]
mov edx, dword [edi + 0xc]
mov eax, dword [ebx + 0x68]
mov dword [eax + 0x88], ecx
mov dword [eax + 0x8c], edx
mov ecx, dword [edi + 0x10]
mov edi, dword [edi + 0x14]
mov eax, dword [ebx + 0x68]
mov dword [eax + 0x94], edi
mov dword [eax + 0x90], ecx
push dword [ebx + 0x68]
call fcn.0056bd94
mov byte [esp + 0xd8], 0xb
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x56d182
call fcn.004117b8
mov byte [esp + 0xd8], 0xa
cmp byte [esp + 0x18], 0
je 0x56d19a
mov ecx, dword [esp + 0x14]
call fcn.0040df8b
or dword [esp + 0xd8], 0xffffffff
cmp byte [esp + 0x28], 0
je case.0x56ccea.107
mov ecx, dword [esp + 0x24]
jmp 0x56ce51
lea eax, [ebx + 0x70]
push eax
lea ecx, [esp + 0x28]
call fcn.00411742
mov dword [esp + 0xd8], 0xe
mov eax, dword [ebx + 0x68]
test eax, eax
je 0x56d1f5
push eax
call fcn.0056bd94
mov eax, dword [ebx + 0x68]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x56d1f5
mov eax, dword [ebx + 0x68]
push 3
call fcn.0056b1cd
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x30]
jmp 0x56d19a
sub esp, 0x1c
mov eax, esp
mov dword [esp + 0x48], esp
push 0x271c
push eax
call fcn.004b9340
sub esp, 0x14
mov dword [esp + 0x110], esi
mov eax, esp
mov dword [esp + 0x4c], esp
push 0x2718
push eax
call fcn.004b9340
or dword [esp + 0x118], 0xffffffff
pop ecx
pop ecx
mov ecx, 0x7220d0
call fcn.004c4c6c
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x30]
jmp case.0x56ccea.107
sub esp, 0x1c
mov eax, esp
mov dword [esp + 0x30], esp
push 0x271c
push eax
call fcn.004b9340
sub esp, 0x14
mov dword [esp + 0x110], 0x11
mov eax, esp
mov dword [esp + 0x64], esp
push 0x29f4
jmp 0x56d227
lea eax, [ebx + 0x70]
push eax
lea ecx, [esp + 0x28]
call fcn.00411742
xor eax, eax
mov dword [esp + 0xd8], 0xf
cmp dword [ebx + 0x68], eax
je 0x56d19a
mov dword [ebx + 0x68], eax
mov ecx, dword [ebx + 0x6c]
cmp ecx, eax
mov dword [ebx + 0x6c], eax
je 0x56d19a
call fcn.004117b8
jmp 0x56d19a
cmp ecx, 0x157d
jne case.0x56ccea.100
lea eax, [ebx + 0x70]
push eax
lea ecx, [esp + 0x28]
call fcn.00411742
mov dword [esp + 0xd8], 0x12
cmp dword [ebx + 0x68], 0
je 0x56d451
push 0x1b0
call fcn.0051d97d
pop ecx
mov dword [esp + 0x14], eax
test eax, eax
mov byte [esp + 0xd8], 0x13
je 0x56d30b
push eax
call fcn.005436c9
jmp 0x56d30d
xor eax, eax
mov edi, eax
lea esi, [esp + 0x1c]
mov byte [esp + 0xd8], 0x12
call fcn.004040ed
sub esp, 0x1c
mov byte [esp + 0xf4], 0x14
mov eax, esp
mov dword [esp + 0x30], esp
push 0x27e2
push eax
call fcn.004b9340
mov esi, dword [esp + 0x40]
mov eax, dword [esi]
pop ecx
pop ecx
mov ecx, esi
call dword [eax + 8]
sub esp, 0x1c
mov eax, esp
mov dword [esp + 0x30], esp
push 0x2787
push eax
call fcn.004b9340
mov eax, dword [esi]
pop ecx
pop ecx
mov ecx, esi
call dword [eax + 4]
push 5
pop ecx
xor eax, eax
sub esp, 0x20
mov dword [esp + 0x34], esp
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov eax, esp
sub esp, 0x18
push 6
mov dword [esp + 0xd4], 0x447fc8
lea esi, [esp + 0x70]
lea edi, [esp + 0xd8]
mov dword [esp + 0x70], ebx
rep movsd dword es:[edi], dword [esi]
pop ecx
mov edi, esp
lea esi, [esp + 0xd0]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.0044a0a9
sub esp, 0x1c
mov byte [esp + 0x114], 0x15
mov eax, esp
mov dword [esp + 0x68], esp
push 0x27cf
push eax
call fcn.004b9340
mov esi, dword [esp + 0x60]
mov eax, dword [esi]
pop ecx
pop ecx
add eax, 0x10
mov ecx, esi
mov byte [esp + 0x114], 0x14
call dword [eax]
sub esp, 0x20
mov eax, esp
and dword [eax], 0
mov dword [esp + 0x34], esp
sub esp, 0x1c
mov byte [esp + 0x114], 0x16
mov eax, esp
mov dword [esp + 0x68], esp
push 0x2782
push eax
call fcn.004b9340
pop ecx
mov eax, dword [esi]
pop ecx
add eax, 0x14
mov ecx, esi
mov byte [esp + 0x114], 0x14
call dword [eax]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x28]
lea eax, [esp + 0x1c]
push eax
lea edi, [ebx + 0x90]
call fcn.0041e1bd
mov byte [esp + 0xd8], 0x12
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x56d451
call fcn.004117b8
or dword [esp + 0xd8], 0xffffffff
cmp byte [esp + 0x28], 0
je case.0x56ccea.100
mov ecx, dword [esp + 0x24]
call fcn.0040df8b
xor al, al
mov ecx, dword [esp + 0xd0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4