Function at 0x506220
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x724927
mov eax, dword fs:[0]
push eax
push ebx
push esi
push edi
mov eax, dword [0x7db1e8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov ecx, dword [ebx + 0x3e8]
call fcn.0050ca20
test al, al
je 0x506320
cmp byte [ebp + 8], 0
jne 0x506320
call fcn.004d2dc0
mov ecx, eax
test ecx, ecx
je 0x50650b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 0x10], eax
mov dword [ebp - 4], 0
call fcn.004d2dc0
mov ecx, eax
test ecx, ecx
je 0x506515
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
push 0x8023
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 1
call fcn.004d4560
push 0x8024
lea ecx, [ebp + 8]
call fcn.004d4560
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0x10]
push 0x30
push esi
push edi
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_MessageBoxW]
lea edx, [esi - 0x10]
mov byte [ebp - 4], 0
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x5062ee
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], esi
dec esi
test esi, esi
jg 0x50630a
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [ebx + 0x3e8]
test ecx, ecx
je 0x5064f5
call fcn.0050d0c0
test al, al
je 0x5064e4
mov eax, dword [ebx + 0x3f0]
test eax, eax
je 0x5063f5
push dword [eax + 4]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x5063f5
mov eax, dword [ebx + 0x3f0]
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
push 5
mov esi, dword [eax + 4]
push esi
call edi
push esi
call dword [sym.imp.USER32.dll_BringWindowToTop]
cmp byte [ebp + 8], 0
mov ecx, dword [ebx + 0x3f0]
jne 0x50639a
call fcn.005126e0
test al, al
je 0x5063c7
push dword [ebp + 0xc]
mov ecx, dword [ebx + 0x3f0]
call fcn.00514680
jmp 0x5063bc
push dword [ebp + 0xc]
call fcn.00514680
mov ecx, dword [ebx + 0x3f0]
call fcn.005126e0
test al, al
jne 0x5063bc
mov ecx, dword [ebx + 0x3f0]
call fcn.005147d0
mov ecx, dword [ebx + 0x3f0]
call fcn.00512c10
mov ecx, dword [ebx + 0x3f0]
push 0
add ecx, 4
call fcn.004fd220
xor eax, eax
mov ecx, 5
cmp byte [ebp + 0x10], al
cmovne eax, ecx
push eax
mov eax, dword [ebx + 0x3f0]
push dword [eax + 4]
call edi
jmp 0x5064f5
mov ecx, dword [ebx + 0x3f0]
test ecx, ecx
je 0x506406
mov eax, dword [ecx]
push 1
call dword [eax + 4]
push 0x3c4
call fcn.006f4b6f
add esp, 4
mov dword [ebp + 8], eax
mov dword [ebp - 4], 2
test eax, eax
je 0x50642d
push 0
push ebx
mov ecx, eax
call fcn.00500ff0
jmp 0x50642f
xor eax, eax
push dword [ebp + 0xc]
mov ecx, eax
mov dword [ebp - 4], 0xffffffff
mov dword [ebx + 0x3f0], eax
call fcn.00514680
mov esi, dword [ebx + 0x3f0]
lea edi, [esi + 8]
test edi, edi
je 0x50651f
test esi, esi
je 0x50651f
mov dword [edi], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0x7d9a60
mov dword [edi + 4], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x7d9a78]
mov dword [edi + 8], eax
push 0x7d9a60
mov dword [0x7d9a78], edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0x4d8f40
push 0
push 0x8f
mov byte [esi + 0x20], 0
mov dword [esi + 0x24], 0
push dword [0x7f44f0]
call fcn.00506bb0
cmp dword [esi + 0x24], 0
jge 0x5064ce
test eax, eax
je 0x5064ce
push dword [esi + 4]
call dword [sym.imp.USER32.dll_DestroyWindow]
push dword [esi + 0x24]
call dword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
mov ecx, 5
cmp byte [ebp + 0x10], al
cmovne eax, ecx
push eax
mov eax, dword [ebx + 0x3f0]
jmp 0x5064ec
mov eax, dword [ebx + 0x3e8]
push 5
push dword [eax + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push 0x80004005
call fcn.004cf5d0
push 0x80004005
call fcn.004cf5d0
push 1
push 0xc0000005
call fcn.004d9b20
int3