Function at 0x4333b0
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
mov ecx, 8
push 0
push 0
dec ecx
jne 0x4333b8
push ecx
push ebx
xor eax, eax
push ebp
push 0x4336e3
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0040a054
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x20]
mov eax, 0x4336f8
call fcn.004172fc
mov ecx, dword [ebp - 0x20]
lea eax, [ebp - 0x1c]
mov edx, 0x433704
call fcn.004049a8
mov eax, dword [ebp - 0x1c]
push eax
call sub.kernel32.dll_GetCurrentProcessId
xor edx, edx
push edx
push eax
mov eax, dword [0x438008]
call fcn.00405708
pop edx
call fcn.00404d78
call fcn.004032e4
call fcn.0042ed08
test al, al
je 0x4336bb
mov al, 1
call fcn.004311dc
xor ebx, ebx
mov eax, 1
call fcn.0042edb0
mov edx, 1
mov eax, 0x28
call fcn.00422f74
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0x24]
mov eax, dword [0x438044]
mov eax, dword [eax]
call fcn.00427164
mov eax, dword [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
call fcn.0042dd78
mov edx, dword [ebp - 0x28]
mov cl, 1
pop eax
call fcn.004315b4
mov byte [ebp - 1], al
mov edx, 2
mov eax, 0x28
call fcn.00422f74
call fcn.0042b8b0
push edx
push eax
call fcn.0042d6e0
lea ecx, [ebp - 0x10]
lea edx, [ebp - 0x18]
mov al, byte [ebp - 1]
call fcn.0043311c
test al, al
je 0x43351d
call sub.kernel32.dll_GetCurrentProcessId
xor edx, edx
push edx
push eax
mov eax, dword [0x438008]
call fcn.00405708
mov edx, 0x433714
call fcn.00404d78
call fcn.004032e4
mov bl, 1
call fcn.0042b8b0
push edx
push eax
call fcn.0042d86c
call fcn.0042e768
call fcn.0042d9f0
call fcn.0042e9ec
test al, al
je 0x4334ed
call fcn.00431c54
jmp 0x4334fb
call fcn.00431fc4
test al, al
je 0x4334fb
call fcn.00432f5c
call sub.kernel32.dll_GetCurrentProcessId
xor edx, edx
push edx
push eax
mov eax, dword [0x438008]
call fcn.00405708
mov edx, 0x433738
call fcn.00404d78
call fcn.004032e4
mov eax, dword [0x43810c]
cmp dword [eax], 1
jne 0x4336bb
push 0
push 0x3e8
xor eax, eax
call fcn.0041673c
push 0
mov eax, dword [0x437fd4]
mov eax, dword [eax]
push eax
call sub.user32.dll_ShowWindow
test bl, bl
jne 0x4336bb
lea eax, [ebp - 0x14]
call fcn.0040469c
call sub.kernel32.dll_GetCurrentProcessId
xor edx, edx
push edx
push eax
mov eax, dword [0x438008]
call fcn.00405708
mov edx, 0x43375c
call fcn.00404d78
mov edx, dword [0x437ffc]
mov dl, byte [edx]
call fcn.00403234
mov edx, 0x433770
call fcn.00404d78
push eax
call fcn.004221ec
mov edx, eax
pop eax
call fcn.00403234
call fcn.004032e4
mov eax, dword [0x437ffc]
cmp byte [eax], 0
jne 0x43360e
lea eax, [ebp - 0x14]
call fcn.00422174
test al, al
jne 0x43360e
lea ecx, [ebp - 8]
xor edx, edx
mov eax, 0x43378c
call fcn.0042d5bc
cmp dword [ebp - 0x14], 0
je 0x4335e2
push dword [ebp - 8]
push 0x433798
push dword [ebp - 0x14]
lea eax, [ebp - 8]
mov edx, 3
call fcn.00404a1c
lea eax, [ebp - 0x2c]
call fcn.0042d220
mov eax, dword [ebp - 0x2c]
push eax
call fcn.0042d43c
push eax
lea eax, [ebp - 0x30]
call fcn.0042d2d0
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 8]
xor eax, eax
call fcn.00416b54
jmp 0x4336bb
mov eax, dword [0x437ffc]
cmp byte [eax], 0
jne 0x433647
cmp dword [ebp - 0xc], 0
je 0x433647
lea eax, [ebp - 0x34]
call fcn.0042d220
mov eax, dword [ebp - 0x34]
push eax
call fcn.0042d43c
push eax
lea eax, [ebp - 0x38]
call fcn.0042d2d0
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0xc]
xor eax, eax
call fcn.00416b54
jmp 0x4336bb
lea ecx, [ebp - 8]
xor edx, edx
mov eax, 0x4337a8
call fcn.0042d5bc
call fcn.004194bc
test al, al
je 0x43368f
push dword [ebp - 8]
push 0x4337b4
lea edx, [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
call fcn.004081ac
push dword [ebp - 0x3c]
push 0x4337c4
push dword [ebp - 0x10]
push 0x4337d0
lea eax, [ebp - 8]
mov edx, 6
call fcn.00404a1c
lea eax, [ebp - 0x40]
call fcn.0042d220
mov eax, dword [ebp - 0x40]
push eax
call fcn.0042d43c
push eax
push 0
lea eax, [ebp - 0x44]
call fcn.0042d3c0
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 8]
mov eax, 1
call fcn.00416be4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4336ea
lea eax, [ebp - 0x44]
mov edx, 0xb
call fcn.004046c0
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.004046c0
ret