Function at 0x4be950
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e8286
mov eax, dword fs:[0]
push eax
sub esp, 0x44
mov eax, dword [0x50b06c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
push 0x20
push str.L2dldGluZm8ucGhwP2NsaXBwZXI9Y29u
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00401320
sub esp, 0x18
mov dword [ebp - 4], 0
mov ecx, esp
mov dword [ebp - 0x48], esp
push 3
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x4f9224
mov byte [ecx], 0
call fcn.00401320
sub esp, 0x18
mov byte [ebp - 4], 1
mov ecx, esp
mov dword [ebp - 0x4c], esp
push 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x4f8a17
mov byte [ecx], 0
call fcn.00401320
sub esp, 0x18
mov byte [ebp - 4], 2
lea edx, [ebp - 0x28]
mov dword [ebp - 0x50], esp
mov ecx, esp
call fcn.00402300
sub esp, 0x18
mov byte [ebp - 4], 3
mov ecx, esp
push 0x50f3b8
call fcn.00403d00
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0
call fcn.00402a20
add esp, 0x60
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x4bea7b
mov eax, dword [ebp - 0x28]
inc ecx
xor dl, dl
jne 0x4beb40
cmp ecx, 0x1000
jb 0x4bea72
test al, 0x1f
jne 0x4beb40
mov ecx, dword [eax - 4]
cmp ecx, eax
jae 0x4beb40
sub eax, ecx
cmp eax, 4
jb 0x4beb40
cmp eax, 0x23
ja 0x4beb40
mov eax, ecx
push eax
call fcn.00487cad
add esp, 4
cmp dword [ebp - 0x2c], 0x10
lea ecx, [ebp - 0x40]
mov edx, dword [ebp - 0x30]
cmovae ecx, dword [ebp - 0x40]
push 7
push str.enabled
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00405710
push 8
mov bl, al
call fcn.00487a02
add esp, 0xc
mov dword [ebp - 0x44], eax
push 0x4c0860
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.004044f0
mov byte [ebp - 4], 5
test bl, bl
je 0x4beb28
push 8
call fcn.00487a02
add esp, 4
mov dword [ebp - 0x44], eax
push 0x4bf050
mov ecx, eax
mov byte [ebp - 4], 7
call fcn.004044f0
mov edi, eax
mov byte [ebp - 4], 5
cmp dword [edi + 4], 0
jne 0x4beb01
push 1
call fcn.004858ef
add esp, 4
push dword [edi + 4]
push dword [edi]
call fcn.004863f1
add esp, 8
test eax, eax
je 0x4beb1b
push eax
call fcn.004858c2
add esp, 4
mov dword [edi], 0
mov dword [edi + 4], 0
mov eax, dword [esi + 0x1a4]
mov eax, dword [eax + 4]
cmp dword [eax + 0x10], 0
je 0x4beb45
cmp dword [eax], 0
je 0x4beb45
mov al, 1
jmp 0x4beb47
call fcn.004a30af
xor al, al
test al, al
jne 0x4beb55
mov esi, 2
jmp 0x4bec78
push ecx
push 1
lea ecx, [esi + 0xc]
call fcn.00477050
add esp, 4
lea ecx, [esi + 0x94]
push 2
call fcn.00477050
add esp, 4
lea ecx, [esi + 0x11c]
push 0xf
call fcn.00477050
mov eax, dword [esi + 0x1a4]
add esp, 8
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x10]
cmp byte [eax + 0x10], 0
je 0x4bebbf
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
test eax, eax
je 0x4bebaa
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x4bebbf
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
push eax
call dword [0x4eb070]
call dword [sym.imp.KERNEL32.dll_FreeConsole]
invalid
mov eax, dword [esi + 0x1a4]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x10]
mov al, byte [eax + 0x6c]
mov byte [0x50bac8], al
test al, al
je 0x4bebe7
call fcn.004da7c0
test eax, eax
je 0x4bebe7
or dword [0x50f234], 1
mov ecx, dword [esi + 0x1a4]
call fcn.004cfd30
mov ecx, dword [esi + 0x1a4]
mov eax, dword [ecx + 4]
mov eax, dword [eax + 0x10]
cmp byte [eax + 0x12], 0
je 0x4bec08
xor esi, esi
jmp 0x4bec78
call fcn.004d9560
mov eax, dword [esi + 0x1a4]
mov eax, dword [eax + 4]
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ecx, dword [0x50f3f8]
test ecx, ecx
jne 0x4bec46
call fcn.00477be0
test eax, eax
je 0x4bec37
xor ecx, ecx
jmp 0x4bec46
mov dword [0x50f3f8], 0x50f400
mov ecx, 0x50f400
call fcn.004782a0
mov ecx, dword [0x50f3f8]
mov esi, eax
test ecx, ecx
jne 0x4bec73
call fcn.00477be0
test eax, eax
je 0x4bec64
xor ecx, ecx
jmp 0x4bec73
mov dword [0x50f3f8], 0x50f400
mov ecx, 0x50f400
call fcn.00476760
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x4becc8
xor dl, dl
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x40]
jne 0x4beb40
cmp ecx, 0x1000
jb 0x4becbf
test al, 0x1f
jne 0x4beb40
mov ecx, dword [eax - 4]
cmp ecx, eax
jae 0x4beb40
sub eax, ecx
cmp eax, 4
jb 0x4beb40
cmp eax, 0x23
ja 0x4beb40
mov eax, ecx
push eax
call fcn.00487cad
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004879f1
mov esp, ebp
pop ebp
ret