Function at 0x491400
Capabilities:
Create process on windows
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb08
mov eax, dword [0x4f6fc0]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0xb04], 0
mov eax, 4
imul eax, eax, 0
add eax, 0x5705a0
push eax
push str.acro_s.exe
lea ecx, [ebp - 0x104]
push ecx
call fcn.004b6e08
add esp, 0xc
lea edx, [ebp - 0x104]
push edx
mov eax, dword [ebp + 8]
push eax
push str._sdoc_acrowin_s
lea ecx, [ebp - 0xafc]
push ecx
call fcn.004b6e08
add esp, 0x10
lea edx, [ebp - 0xafc]
push edx
call fcn.004196c0
add esp, 4
mov dword [ebp - 0xb08], eax
cmp dword [ebp - 0xb08], 0
jne 0x491490
push str.acroENG.exe
lea eax, [ebp - 0x104]
push eax
call fcn.004b5e60
add esp, 8
movsx ecx, word [0x4ec6d4]
cmp ecx, 0x411
jne 0x4915e1
push 0x22
lea edx, [ebp - 0x104]
push edx
mov eax, dword [ebp + 8]
push eax
push 0x22
push 0x4f1868
mov ecx, 0xff
imul ecx, ecx, 0
lea edx, [ebp + ecx - 0x9fc]
push edx
call fcn.004b6e08
add esp, 0x18
push 0x22
lea eax, [ebp - 0x104]
push eax
push 0x526790
push 0x22
push 0x4f1880
mov ecx, 0xff
shl ecx, 0
lea edx, [ebp + ecx - 0x9fc]
push edx
call fcn.004b6e08
add esp, 0x18
push 0x22
mov eax, dword [ebp + 8]
push eax
push 0x22
push 0x4f1898
mov ecx, 0xff
shl ecx, 1
lea edx, [ebp + ecx - 0x9fc]
push edx
call fcn.004b6e08
add esp, 0x14
push 0x22
push 0x526790
push 0x22
push str._c_sdoc_acrowin_ar405jpn.exe_c
mov eax, 0xff
imul eax, eax, 3
lea ecx, [ebp + eax - 0x9fc]
push ecx
call fcn.004b6e08
add esp, 0x14
push 0x22
mov edx, dword [ebp + 8]
push edx
push 0x22
push 0x4f18d8
mov eax, 0xff
shl eax, 2
lea ecx, [ebp + eax - 0x9fc]
push ecx
call fcn.004b6e08
add esp, 0x14
push 0x22
push 0x526790
push 0x22
push str._c_sdoc_acrowin_ar40jpn.exe_c
mov edx, 0xff
imul edx, edx, 5
lea eax, [ebp + edx - 0x9fc]
push eax
call fcn.004b6e08
add esp, 0x14
push 0x22
mov ecx, dword [ebp + 8]
push ecx
push 0x22
push 0x4f1918
mov edx, 0xff
imul edx, edx, 6
lea eax, [ebp + edx - 0x9fc]
push eax
call fcn.004b6e08
add esp, 0x14
push 0x22
push 0x526790
push 0x22
push str._c_sdoc_acrowin_acrow32j.exe_c
mov ecx, 0xff
imul ecx, ecx, 7
lea edx, [ebp + ecx - 0x9fc]
push edx
call fcn.004b6e08
add esp, 0x14
jmp 0x49171a
push 0x22
lea eax, [ebp - 0x104]
push eax
mov ecx, dword [ebp + 8]
push ecx
push 0x22
push 0x4f1958
mov edx, 0xff
imul edx, edx, 0
lea eax, [ebp + edx - 0x9fc]
push eax
call fcn.004b6e08
add esp, 0x18
push 0x22
lea ecx, [ebp - 0x104]
push ecx
push 0x526790
push 0x22
push str._c_sdoc_acrowin_s_c
mov edx, 0xff
shl edx, 0
lea eax, [ebp + edx - 0x9fc]
push eax
call fcn.004b6e08
add esp, 0x18
push 0x22
mov ecx, dword [ebp + 8]
push ecx
push 0x22
push 0x4f1988
mov edx, 0xff
shl edx, 1
lea eax, [ebp + edx - 0x9fc]
push eax
call fcn.004b6e08
add esp, 0x14
push 0x22
push 0x526790
push 0x22
push str._c_sdoc_acrowin_ar405eng.exe_c
mov ecx, 0xff
imul ecx, ecx, 3
lea edx, [ebp + ecx - 0x9fc]
push edx
call fcn.004b6e08
add esp, 0x14
push 0x22
mov eax, dword [ebp + 8]
push eax
push 0x22
push 0x4f19c8
mov ecx, 0xff
shl ecx, 2
lea edx, [ebp + ecx - 0x9fc]
push edx
call fcn.004b6e08
add esp, 0x14
push 0x22
push 0x526790
push 0x22
push str._c_sdoc_acrowin_ar40eng.exe_c
mov eax, 0xff
imul eax, eax, 5
lea ecx, [ebp + eax - 0x9fc]
push ecx
call fcn.004b6e08
add esp, 0x14
push 0x22
mov edx, dword [ebp + 8]
push edx
push 0x22
push 0x4f1a08
mov eax, 0xff
imul eax, eax, 6
lea ecx, [ebp + eax - 0x9fc]
push ecx
call fcn.004b6e08
add esp, 0x14
push 0x22
push 0x526790
push 0x22
push str._c_sdoc_acrowin_acrow32.exe_c
mov edx, 0xff
imul edx, edx, 7
lea eax, [ebp + edx - 0x9fc]
push eax
call fcn.004b6e08
add esp, 0x14
mov dword [ebp - 0xb04], 1
mov dword [ebp - 0xb00], 0
jmp 0x49173f
mov ecx, dword [ebp - 0xb00]
add ecx, 1
mov dword [ebp - 0xb00], ecx
cmp dword [ebp - 0xb00], 8
jge 0x4917cf
cmp dword [ebp - 0xb00], 1
je 0x491770
cmp dword [ebp - 0xb00], 3
je 0x491770
cmp dword [ebp - 0xb00], 5
je 0x491770
cmp dword [ebp - 0xb00], 7
jne 0x491785
mov edx, 1
imul edx, edx, 0
movsx eax, byte [edx + 0x526790]
test eax, eax
jne 0x491785
jmp 0x491730
push 5
mov ecx, dword [ebp - 0xb00]
imul ecx, ecx, 0xff
lea edx, [ebp + ecx - 0x9fc]
push edx
call dword [sym.imp.KERNEL32.dll_WinExec]
mov dword [ebp - 0xb08], eax
cmp dword [ebp - 0xb08], 0x20
jl 0x4917ca
mov dword [ebp - 0xb04], 0
push 6
mov eax, dword [0x18a0254]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x4917cf
jmp 0x491730
mov dword [ebp - 0xb04], 0
cmp dword [ebp - 0xb04], 1
je 0x49171a
xor eax, eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004b6253
mov esp, ebp
pop ebp
ret