Function at 0x433b9c
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
mov ecx, 8
push 0
push 0
dec ecx
jne 0x433ba4
push ecx
push ebx
xor eax, eax
push ebp
push 0x433ecf
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0040a078
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x20]
mov eax, 0x433ee4
call fcn.00417650
mov ecx, dword [ebp - 0x20]
lea eax, [ebp - 0x1c]
mov edx, 0x433ef0
call fcn.004049cc
mov eax, dword [ebp - 0x1c]
push eax
call sub.kernel32.dll_GetCurrentProcessId
xor edx, edx
push edx
push eax
mov eax, dword [0x439028]
call fcn.0040572c
pop edx
call fcn.00404d9c
call fcn.004032e4
call fcn.0042f4ec
test al, al
je 0x433ea7
mov al, 1
call fcn.004319c0
xor ebx, ebx
mov eax, 1
call fcn.0042f594
mov edx, 1
mov eax, 0x28
call fcn.00423748
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0x24]
mov eax, dword [0x439064]
mov eax, dword [eax]
call fcn.00427938
mov eax, dword [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
call fcn.0042e55c
mov edx, dword [ebp - 0x28]
mov cl, 1
pop eax
call fcn.00431d9c
mov byte [ebp - 1], al
mov edx, 2
mov eax, 0x28
call fcn.00423748
call fcn.0042c094
push edx
push eax
call fcn.0042dec4
lea ecx, [ebp - 0x10]
lea edx, [ebp - 0x18]
mov al, byte [ebp - 1]
call fcn.00433908
test al, al
je 0x433d09
call sub.kernel32.dll_GetCurrentProcessId
xor edx, edx
push edx
push eax
mov eax, dword [0x439028]
call fcn.0040572c
mov edx, 0x433f00
call fcn.00404d9c
call fcn.004032e4
mov bl, 1
call fcn.0042c094
push edx
push eax
call fcn.0042e050
call fcn.0042ef4c
call fcn.0042e1d4
call fcn.0042f1d0
test al, al
je 0x433cd9
call fcn.00432440
jmp 0x433ce7
call fcn.004327b0
test al, al
je 0x433ce7
call fcn.00433748
call sub.kernel32.dll_GetCurrentProcessId
xor edx, edx
push edx
push eax
mov eax, dword [0x439028]
call fcn.0040572c
mov edx, 0x433f24
call fcn.00404d9c
call fcn.004032e4
mov eax, dword [0x43912c]
cmp dword [eax], 1
jne 0x433ea7
push 0
push 0x3e8
xor eax, eax
call fcn.004168f4
push 0
mov eax, dword [0x438ff4]
mov eax, dword [eax]
push eax
call sub.user32.dll_ShowWindow
test bl, bl
jne 0x433ea7
lea eax, [ebp - 0x14]
call fcn.004046c0
call sub.kernel32.dll_GetCurrentProcessId
xor edx, edx
push edx
push eax
mov eax, dword [0x439028]
call fcn.0040572c
mov edx, 0x433f48
call fcn.00404d9c
mov edx, dword [0x43901c]
mov dl, byte [edx]
call fcn.00403234
mov edx, 0x433f5c
call fcn.00404d9c
push eax
call fcn.004229c8
mov edx, eax
pop eax
call fcn.00403234
call fcn.004032e4
mov eax, dword [0x43901c]
cmp byte [eax], 0
jne 0x433dfa
lea eax, [ebp - 0x14]
call fcn.00422950
test al, al
jne 0x433dfa
lea ecx, [ebp - 8]
xor edx, edx
mov eax, 0x433f78
call fcn.0042dda0
cmp dword [ebp - 0x14], 0
je 0x433dce
push dword [ebp - 8]
push 0x433f84
push dword [ebp - 0x14]
lea eax, [ebp - 8]
mov edx, 3
call fcn.00404a40
lea eax, [ebp - 0x2c]
call fcn.0042da04
mov eax, dword [ebp - 0x2c]
push eax
call fcn.0042dc20
push eax
lea eax, [ebp - 0x30]
call fcn.0042dab4
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 8]
xor eax, eax
call fcn.00416d0c
jmp 0x433ea7
mov eax, dword [0x43901c]
cmp byte [eax], 0
jne 0x433e33
cmp dword [ebp - 0xc], 0
je 0x433e33
lea eax, [ebp - 0x34]
call fcn.0042da04
mov eax, dword [ebp - 0x34]
push eax
call fcn.0042dc20
push eax
lea eax, [ebp - 0x38]
call fcn.0042dab4
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0xc]
xor eax, eax
call fcn.00416d0c
jmp 0x433ea7
lea ecx, [ebp - 8]
xor edx, edx
mov eax, 0x433f94
call fcn.0042dda0
call fcn.00419898
test al, al
je 0x433e7b
push dword [ebp - 8]
push 0x433fa0
lea edx, [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
call fcn.004081d0
push dword [ebp - 0x3c]
push 0x433fb0
push dword [ebp - 0x10]
push 0x433fbc
lea eax, [ebp - 8]
mov edx, 6
call fcn.00404a40
lea eax, [ebp - 0x40]
call fcn.0042da04
mov eax, dword [ebp - 0x40]
push eax
call fcn.0042dc20
push eax
push 0
lea eax, [ebp - 0x44]
call fcn.0042dba4
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 8]
mov eax, 1
call fcn.00416d9c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x433ed6
lea eax, [ebp - 0x44]
mov edx, 0xb
call fcn.004046e4
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.004046e4
ret