Function at 0x4efa40
Capabilities:
Hide graphical window

Disassembly:
push ebp
lea ebp, [esp - 0x560]
sub esp, 0x560
push 0xffffffffffffffff
push 0x54374f
mov eax, dword fs:[0]
push eax
sub esp, 0x54
mov eax, dword [0x585184]
xor eax, ebp
mov dword [ebp + 0x55c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp + 0x56c]
lea ecx, [ebp + 0x2dc]
mov esi, dword [ebp + 0x568]
push eax
call fcn.004f4d80
mov dword [ebp - 4], 0
lea ecx, [ebp + 0x2dc]
push esi
call fcn.004f6550
mov dword [ebp - 0x58], 0x54890c
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov byte [ebp - 4], 1
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0
mov byte [ebp - 4], 3
call fcn.004f0ca0
mov ebx, dword [0x588ea0]
mov esi, eax
add ebx, 0x10
mov byte [ebp - 0x10], 0
mov dword [ebp - 0x14], ebx
mov byte [ebp - 4], 5
push ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [ebp - 0x10], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov esi, dword [esi + 0x34]
mov edi, eax
push 4
mov dword [ebp - 0x5c], esi
mov ecx, dword [esi + 8]
inc ecx
push ecx
push dword [esi]
call fcn.0050911b
add esp, 0xc
test eax, eax
je 0x4efb7e
mov dword [esi], eax
mov eax, dword [esi + 8]
push 4
inc eax
push eax
push dword [esi + 4]
call fcn.0050911b
add esp, 0xc
test eax, eax
je 0x4efb7e
mov dword [esi + 4], eax
mov eax, dword [esi + 8]
mov dword [ebp - 0x60], eax
lea ecx, [eax*4]
mov eax, dword [esi]
add eax, ecx
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 7
je 0x4efb60
mov dword [eax], edi
mov byte [ebp - 4], 5
mov eax, dword [esi + 4]
add eax, ecx
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 8
je 0x4efb77
lea ecx, [ebp - 0x58]
mov dword [eax], ecx
mov byte [ebp - 4], 5
inc dword [esi + 8]
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov byte [ebp - 0x10], 0
mov byte [ebp - 4], 3
lea eax, [ebp + 0x2fc]
push dword [ebp - 0x1c]
push eax
push 0x585010
push 0x585ac0
push 0x587f00
call fcn.004eccd0
add esp, 0x14
movzx eax, ax
lea ecx, [ebp + 0x2dc]
push 0
push eax
push 0
push 0
push 0x80000000
push 0
push 0
push 0
call fcn.004ef230
push 5
push dword [ebp + 0x2e0]
call dword [sym.imp.USER32.dll_ShowWindow]
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov ebx, 1
xor esi, esi
nop dword [eax]
test ebx, ebx
je 0x4efc17
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x3c]
push eax
call edi
test eax, eax
jne 0x4efc17
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x58]
push esi
call dword [eax + 4]
inc esi
test eax, eax
jne 0x4efbf4
xor ebx, ebx
push 0
push 0
push 0
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
cmp eax, 0xffffffff
je 0x4efbf0
test eax, eax
je 0x4efc98
lea eax, [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x58]
call dword [eax]
test eax, eax
jne 0x4efc54
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
mov eax, dword [ebp - 0x38]
cmp eax, 0x118
ja 0x4efc6c
je 0x4efc88
cmp eax, 0xf
je 0x4efc88
cmp eax, 0xa0
jmp 0x4efc71
cmp eax, 0x200
je 0x4efc88
mov ecx, 1
xor eax, eax
test ecx, ecx
mov ebx, ecx
cmove eax, esi
mov esi, eax
jmp 0x4efbf0
xor ecx, ecx
xor eax, eax
test ecx, ecx
cmove eax, esi
mov esi, eax
jmp 0x4efbf0
call fcn.004f0ca0
mov ecx, eax
call fcn.004f28e0
lea ecx, [ebp + 0x2dc]
call fcn.004f57b0
test al, al
je 0x4efcba
xor bl, bl
jmp 0x4f00c6
lea ecx, [ebp + 0x2dc]
call fcn.004f56d0
push eax
lea ecx, [ebp + 0x4b4]
call fcn.00405950
mov byte [ebp - 4], 0xa
cmp dword [ebp + 0x4c4], 0
jne 0x4efd10
push 2
lea ecx, [ebp]
call fcn.004f7aa0
mov byte [ebp - 4], 0xb
push 0
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp]
call fcn.004ef4b0
mov byte [ebp - 4], 0xa
lea ecx, [ebp]
call fcn.004f7b30
xor bl, bl
jmp 0x4f00b7
lea ecx, [ebp + 0x170]
call fcn.004f80c0
mov byte [ebp - 4], 0xc
push 0
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp + 0x170]
call fcn.004ef4b0
cmp eax, 1
jne 0x4f0014
mov esi, dword [ebp - 0x20]
mov ecx, esi
call fcn.004f0dd0
test al, al
je 0x4eff5b
push 0x11
xor eax, eax
mov dword [ebp + 0x53c], 0
mov dword [ebp + 0x540], 0
lea ecx, [ebp + 0x52c]
push str.2345PicViewer.exe
mov dword [ebp + 0x53c], 0
mov dword [ebp + 0x540], 7
mov word [ebp + 0x52c], ax
call fcn.00404420
mov byte [ebp - 4], 0xd
lea eax, [ebp + 0x52c]
push 0
push 1
push eax
call fcn.004fde40
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x52c]
call fcn.00404370
push 0xb
xor eax, eax
mov dword [ebp + 0x524], 0
mov dword [ebp + 0x528], 0
lea ecx, [ebp + 0x514]
push str.2345Pic.exe
mov dword [ebp + 0x524], 0
mov dword [ebp + 0x528], 7
mov word [ebp + 0x514], ax
call fcn.00404420
mov byte [ebp - 4], 0xe
lea eax, [ebp + 0x514]
push 0
push 1
push eax
call fcn.004fde40
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x514]
call fcn.00404370
push 0xf
xor eax, eax
mov dword [ebp + 0x50c], 0
mov dword [ebp + 0x510], 0
lea ecx, [ebp + 0x4fc]
push str.2345PicEdit.exe
mov dword [ebp + 0x50c], 0
mov dword [ebp + 0x510], 7
mov word [ebp + 0x4fc], ax
call fcn.00404420
mov byte [ebp - 4], 0xf
lea eax, [ebp + 0x4fc]
push 0
push 1
push eax
call fcn.004fde40
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x4fc]
call fcn.00404370
push 0x11
xor eax, eax
mov dword [ebp + 0x4f4], 0
mov dword [ebp + 0x4f8], 0
lea ecx, [ebp + 0x4e4]
push str.2345PdfReader.exe
mov dword [ebp + 0x4f4], 0
mov dword [ebp + 0x4f8], 7
mov word [ebp + 0x4e4], ax
call fcn.00404420
mov byte [ebp - 4], 0x10
lea eax, [ebp + 0x4e4]
push 0
push 1
push eax
call fcn.004fde40
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x4e4]
call fcn.00404370
push 0x11
xor eax, eax
mov dword [ebp + 0x4dc], 0
mov dword [ebp + 0x4e0], 0
lea ecx, [ebp + 0x4cc]
push 0x548b70
mov dword [ebp + 0x4dc], 0
mov dword [ebp + 0x4e0], 7
mov word [ebp + 0x4cc], ax
call fcn.00404420
mov byte [ebp - 4], 0x11
lea eax, [ebp + 0x4cc]
push 0
push 1
push eax
call fcn.004fde40
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x4cc]
call fcn.00404370
push 0
lea ecx, [ebp + 0x494]
call fcn.004fb390
mov byte [ebp - 4], 0x12
xor eax, eax
mov dword [ebp + 0x554], 0
mov dword [ebp + 0x558], 0
mov dword [ebp + 0x554], 0
mov dword [ebp + 0x558], 7
mov word [ebp + 0x544], ax
mov byte [ebp - 4], 0x13
lea eax, [ebp + 0x544]
push eax
lea eax, [ebp + 0x4b4]
push eax
lea ecx, [ebp + 0x494]
call fcn.004fcb30
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
mov byte [ebp - 4], 0x14
lea eax, [ebp + 0x544]
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x18]
call fcn.0040c9a0
push 0
lea eax, [ebp - 0x18]
mov ecx, esi
push eax
call fcn.004f3930
mov bl, al
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x18]
call fcn.0040c590
mov byte [ebp - 4], 0x12
lea ecx, [ebp + 0x544]
call fcn.00404370
jmp 0x4f0099
push 0
lea ecx, [ebp + 0x494]
call fcn.004fb390
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
mov byte [ebp - 4], 0x16
lea eax, [ebp + 0x4b4]
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x18]
call fcn.0040c9a0
push 0x55a4d4
lea ecx, [ebp + 0x544]
call fcn.00404380
mov byte [ebp - 4], 0x17
lea eax, [ebp + 0x544]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
lea ecx, [ebp + 0x494]
call fcn.004fbfd0
mov bl, al
mov byte [ebp - 4], 0x16
lea ecx, [ebp + 0x544]
call fcn.00404370
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x18]
call fcn.0040c590
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x494]
call fcn.004fb4f0
mov byte [ebp - 4], 0xa
lea ecx, [ebp + 0x170]
call fcn.004f8140
mov byte [ebp - 4], 3
lea ecx, [ebp + 0x4b4]
call fcn.00404370
mov byte [ebp - 4], 0x18
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x4f00e1
push eax
call fcn.005067a9
add esp, 4
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x4f010a
push eax
call fcn.005067a9
add esp, 4
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x2dc]
call fcn.004f52b0
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x55c]
xor ecx, ebp
call fcn.00502346
lea esp, [ebp + 0x560]
pop ebp
ret 8