Function at 0x4c6400
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x200
cmp dword [0x6c7d00], 0
push esi
mov esi, ecx
mov dword [ebp - 4], esi
je 0x4c6f4b
cmp dword [esi + 0xbc8], 0
jne 0x4c6f4b
cmp dword [0x6d6170], 0
je 0x4c6f4b
cmp dword [0x6c7d40], 7
jne 0x4c6f4b
push ebx
push edi
mov edi, dword [ebp + 8]
push 0x58
mov ecx, edi
call fcn.00519dd0
mov ebx, 1
cmp eax, ebx
jne 0x4c646f
mov ecx, dword [0x6c8500]
mov edx, dword [0x6d6170]
mov eax, dword [ecx]
mov eax, dword [eax + 0x64]
push edx
push ebx
call eax
cmp dword [0x6e6170], 0
mov dword [ebp + 8], 0
je 0x4c648a
cmp dword [esi + 0xbc4], ebx
jne 0x4c648a
mov dword [ebp + 8], ebx
push 0x38
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c649c
mov ebx, 4
push 0x1d
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c64af
and ebx, 0xfffffffe
or ebx, 2
push 0x2a
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c64c2
and ebx, 0xfffffffe
or ebx, 8
mov edx, dword [ebp - 4]
xor esi, esi
cmp dword [ebp + 8], 0
je 0x4c64e4
mov ecx, dword [edx + 0xbc4]
imul ecx, ecx, 0x29
add ecx, esi
add ecx, ecx
cmp dword [edx + ecx*8 + 0x52c], 0
je 0x4c6539
mov eax, dword [edx + 0xbc4]
imul eax, eax, 0x29
add eax, esi
mov ecx, eax
add ecx, ecx
test dword [edx + ecx*8 + 0x524], ebx
je 0x4c6539
add eax, 0x53
add eax, eax
cmp dword [edx + eax*8], 0
je 0x4c6519
movzx edx, word [edx + ecx*8 + 0x528]
push edx
mov ecx, edi
call fcn.00519d60
jmp 0x4c6529
movzx eax, word [edx + ecx*8 + 0x528]
push eax
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c6536
mov ecx, dword [ebp - 4]
push esi
call fcn.004c4f40
mov edx, dword [ebp - 4]
inc esi
cmp esi, 0x29
jl 0x4c64c7
push 0x13
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c6612
push 0x38
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c6612
push 0
push 0x3880
mov ecx, 0x703108
call fcn.0053fcd0
test eax, eax
je 0x4c6593
push 0x5a4f98
push 0x1d
push 0x6d8178
call fcn.004cb820
add esp, 0xc
pop edi
pop ebx
pop esi
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x6c83f8]
cmp dword [ecx + 0x10], 0
jne 0x4c65cd
cmp dword [0x6e4024], 0
je 0x4c65df
push 0x283
mov ecx, 0x6d8178
call fcn.004ca5b0
push eax
push 0x1d
push 0x6d8178
call fcn.004cb820
mov ecx, dword [0x6c83f8]
add esp, 0xc
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 0
call eax
pop edi
pop ebx
pop esi
mov esp, ebp
pop ebp
ret 4
mov edx, dword [0x6c090c]
cmp byte [edx + 0x6d5d58], 0
je 0x4c6609
push 0x5a4fc8
push 1
push 0x3aba
push 0x6d5870
call fcn.00442d20
add esp, 0x10
jmp 0x4c6612
mov eax, dword [ecx]
mov edx, dword [eax + 8]
push 1
call edx
push 0xc7
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c6643
mov ecx, dword [0x6c8318]
test ecx, ecx
je 0x4c6f49
cmp dword [ecx + 0x10], 0
mov eax, dword [ecx]
mov edx, dword [eax + 8]
je 0x4c663f
push 0
jmp 0x4c6641
push 1
call edx
push 0x14
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c669e
push 0x38
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c669e
mov esi, dword [0x6c854c]
test esi, esi
je 0x4c6f49
cmp dword [esi + 0x10], 0
mov ecx, esi
je 0x4c6685
push 1
call fcn.004469e0
mov ecx, esi
call fcn.00446cf0
push 0
jmp 0x4c6695
push 0
call fcn.004469e0
mov ecx, esi
call fcn.00447370
push 1
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
push 0x3f
mov ecx, edi
call fcn.00519d20
push 0x41
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c66d8
push 0x8e6
mov ecx, 0x6d8178
call fcn.004ca5b0
push eax
push 2
push 0x3ab5
push 0x6d5870
call fcn.00442d20
add esp, 0x10
push 0x57
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c6725
call fcn.0040cd90
mov ecx, eax
call fcn.00514e50
test eax, eax
jne 0x4c670e
call fcn.0040cd90
mov ecx, eax
call fcn.00515010
mov ecx, dword [0x6c858c]
call fcn.00514a90
jmp 0x4c6725
call fcn.0040cd90
mov ecx, eax
call fcn.00514e60
mov ecx, dword [0x6c858c]
call fcn.00514a60
push 0x10
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c6769
push 0x38
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c6769
mov eax, dword [0x6c77c0]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4c675a
mov ecx, dword [0x6c77c0]
push 0
push ecx
jmp 0x4c6763
mov edx, dword [0x6c77c0]
push 8
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
cmp dword [0x6d703c], 0
je 0x4c6f49
push 0x22
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c67aa
push 0x1d
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c67aa
mov ecx, dword [0x6c84d4]
test ecx, ecx
je 0x4c67aa
mov eax, dword [ecx]
mov eax, dword [eax + 8]
xor edx, edx
cmp dword [ecx + 0x10], edx
sete dl
push edx
call eax
push 0x13
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c67de
push 0x1d
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c67de
mov ecx, dword [0x6c84d8]
test ecx, ecx
je 0x4c67de
mov edx, dword [ecx]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [ecx + 0x10], eax
sete al
push eax
call edx
push 0x20
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c6811
push 0x1d
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c6811
mov ecx, dword [0x6c8510]
cmp dword [ecx + 0x10], 1
mov eax, dword [ecx]
mov edx, dword [eax + 8]
jne 0x4c680d
push 0
jmp 0x4c680f
push 1
call edx
push 0x3b
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c683b
push 0x38
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c683b
xor eax, eax
cmp dword [0x7012e4], eax
sete al
mov dword [0x7012e4], eax
push 0xe
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c685f
push 0x38
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c685f
mov ecx, 0x6d5870
call fcn.0043f7e0
push 0x19
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c6894
push 0x38
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c6894
mov eax, dword [ebp - 4]
xor dword [eax + 0xbd0], 1
mov eax, dword [eax + 0xbd0]
push eax
mov ecx, 0x6c9aa0
call fcn.00423b50
push 0x2e
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c68c7
push 0x38
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c68c7
cmp dword [0x7034d8], 4
mov ecx, 0x7034c0
jne 0x4c68c0
push 0
jmp 0x4c68c2
push 4
call fcn.005481b0
push 0x1e
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c6909
push 0x38
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c6909
mov esi, dword [0x6c84b8]
test esi, esi
je 0x4c6909
mov edx, dword [esi]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [esi + 0x10], eax
mov ecx, esi
sete al
push eax
call edx
push 0x5a4fb4
mov ecx, esi
call fcn.0047b820
push 0x1f
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c693d
push 0x38
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c693d
mov ecx, dword [0x6c8488]
test ecx, ecx
je 0x4c693d
mov eax, dword [ecx]
mov eax, dword [eax + 8]
xor edx, edx
cmp dword [ecx + 0x10], edx
sete dl
push edx
call eax
push 0x26
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c6baa
push 0x38
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c6baa
mov esi, dword [0x6c848c]
test esi, esi
je 0x4c6baa
mov ecx, dword [0x5a5014]
mov edx, dword [0x5a5018]
movzx eax, word [0x5a501c]
mov dword [ebp - 0x54], ecx
movzx ecx, byte [0x5a501e]
mov dword [ebp - 0x50], edx
lea edx, [ebp - 0x1d8]
mov byte [ebp - 0x4a], cl
push edx
mov ecx, esi
mov word [ebp - 0x3f], 0x800
mov dword [ebp - 0x1d8], 2
mov word [ebp - 0x4c], ax
call fcn.0047a6b0
mov eax, dword [0x5a5020]
mov ecx, dword [0x5a5024]
movzx edx, word [0x5a5028]
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x54], eax
movzx eax, byte [0x5a502a]
lea ecx, [ebp - 0x1d8]
push ecx
mov ecx, esi
mov word [ebp - 0x3f], 0x2001
mov dword [ebp - 0x1d8], 4
mov word [ebp - 0x4c], dx
mov byte [ebp - 0x4a], al
call fcn.0047a6b0
mov edx, dword [0x5a502c]
mov eax, dword [0x5a5030]
movzx ecx, word [0x5a5034]
mov dword [ebp - 0x54], edx
movzx edx, byte [0x5a5036]
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x1d8]
mov word [ebp - 0x4c], cx
mov ebx, 6
push eax
mov ecx, esi
mov word [ebp - 0x3f], 0x1002
mov dword [ebp - 0x1d8], ebx
mov byte [ebp - 0x4a], dl
call fcn.0047a6b0
mov ecx, dword [0x5a5038]
mov edx, dword [0x5a503c]
movzx eax, word [0x5a5040]
mov dword [ebp - 0x54], ecx
movzx ecx, byte [0x5a5042]
mov dword [ebp - 0x50], edx
lea edx, [ebp - 0x1d8]
mov byte [ebp - 0x4a], cl
push edx
mov ecx, esi
mov word [ebp - 0x3f], 0x2003
mov dword [ebp - 0x1d8], 8
mov word [ebp - 0x4c], ax
call fcn.0047a6b0
mov eax, dword [0x5a5044]
mov ecx, dword [0x5a5048]
movzx edx, word [0x5a504c]
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x54], eax
movzx eax, byte [0x5a504e]
lea ecx, [ebp - 0x1d8]
push ecx
mov ecx, esi
mov word [ebp - 0x3f], 0x2004
mov dword [ebp - 0x1d8], 0xa
mov word [ebp - 0x4c], dx
mov byte [ebp - 0x4a], al
call fcn.0047a6b0
mov edx, dword [0x5a5050]
movzx ecx, word [0x5a5058]
mov eax, dword [0x5a5054]
mov dword [ebp - 0x54], edx
movzx edx, byte [0x5a505a]
mov word [ebp - 0x3f], 0x405
mov dword [ebp - 0x1d8], 0xc
mov dword [ebp - 0x50], eax
mov word [ebp - 0x4c], cx
mov byte [ebp - 0x4a], dl
lea eax, [ebp - 0x1d8]
push eax
mov ecx, esi
call fcn.0047a6b0
mov ecx, dword [0x5a505c]
mov edx, dword [0x5a5060]
movzx eax, word [0x5a5064]
mov dword [ebp - 0x54], ecx
movzx ecx, byte [0x5a5066]
mov dword [ebp - 0x50], edx
lea edx, [ebp - 0x1d8]
mov byte [ebp - 0x4a], cl
push edx
mov ecx, esi
mov word [ebp - 0x3f], 0x1006
mov dword [ebp - 0x1d8], 0xe
mov word [ebp - 0x4c], ax
call fcn.0047a6b0
mov eax, dword [0x5a5068]
mov ecx, dword [0x5a506c]
movzx edx, word [0x5a5070]
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x54], eax
movzx eax, byte [0x5a5072]
lea ecx, [ebp - 0x1d8]
push ecx
mov ecx, esi
mov word [ebp - 0x3f], 0x2007
mov dword [ebp - 0x1d8], 0x10
mov word [ebp - 0x4c], dx
mov byte [ebp - 0x4a], al
call fcn.0047a6b0
mov edx, dword [esi]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [esi + 0x10], eax
mov ecx, esi
sete al
push eax
call edx
mov ecx, esi
call fcn.0047ac00
push 0x24
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c6d5f
push 0x38
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c6d5f
lea eax, [ebp - 0x1fb]
push 0x5a5074
push eax
mov byte [ebp - 0x200], 0
call fcn.0056ecd0
lea ecx, [ebp - 0x1ea]
push 0x5a5080
push ecx
call fcn.0056ecd0
lea edx, [ebp - 0x37]
push 0x5a508c
push edx
mov byte [ebp - 0x3c], 1
call fcn.0056ecd0
lea eax, [ebp - 0x26]
push 0x5a5094
push eax
call fcn.0056ecd0
mov esi, dword [0x6c8490]
add esp, 0x20
test esi, esi
je 0x4c6d5f
lea ecx, [ebp - 0x200]
push ecx
mov ecx, esi
mov dword [esi + 0x23c], 1
call fcn.00479560
lea edx, [ebp - 0x3c]
push edx
mov ecx, esi
call fcn.00479560
lea eax, [ebp - 0x3c]
push eax
mov ecx, esi
call fcn.00479560
lea ecx, [ebp - 0x3c]
push ecx
mov ecx, esi
call fcn.00479560
lea edx, [ebp - 0x3c]
push edx
mov ecx, esi
call fcn.00479560
lea eax, [ebp - 0x3c]
push eax
mov ecx, esi
call fcn.00479560
lea ecx, [ebp - 0x3c]
push ecx
mov ecx, esi
call fcn.00479560
lea edx, [ebp - 0x3c]
push edx
mov ecx, esi
call fcn.00479560
lea eax, [ebp - 0x3c]
push eax
mov ecx, esi
call fcn.00479560
lea ecx, [ebp - 0x3c]
push ecx
mov ecx, esi
call fcn.00479560
lea edx, [ebp - 0x3c]
push edx
mov ecx, esi
call fcn.00479560
lea eax, [ebp - 0x3c]
push eax
mov ecx, esi
call fcn.00479560
lea ecx, [ebp - 0x3c]
push ecx
mov ecx, esi
call fcn.00479560
lea edx, [ebp - 0x3c]
push edx
mov ecx, esi
call fcn.00479560
lea eax, [ebp - 0x3c]
push eax
mov ecx, esi
call fcn.00479560
lea ecx, [ebp - 0x3c]
push ecx
mov ecx, esi
call fcn.00479560
lea edx, [ebp - 0x3c]
push edx
mov ecx, esi
call fcn.00479560
lea eax, [ebp - 0x3c]
push eax
mov ecx, esi
call fcn.00479560
lea ecx, [ebp - 0x3c]
push ecx
mov ecx, esi
call fcn.00479560
lea edx, [ebp - 0x3c]
push edx
mov ecx, esi
call fcn.00479560
lea eax, [ebp - 0x3c]
push eax
mov ecx, esi
call fcn.00479560
lea ecx, [ebp - 0x3c]
push ecx
mov ecx, esi
call fcn.00479560
lea edx, [ebp - 0x3c]
push edx
mov ecx, esi
call fcn.00479560
lea eax, [ebp - 0x3c]
push eax
mov ecx, esi
call fcn.00479560
lea ecx, [ebp - 0x3c]
push ecx
mov ecx, esi
call fcn.00479560
mov ecx, esi
call fcn.00479670
mov edx, dword [esi]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [esi + 0x10], eax
mov ecx, esi
sete al
push eax
call edx
push 0x23
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c6d93
push 0x38
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c6d93
mov ecx, dword [0x6c8494]
test ecx, ecx
je 0x4c6d93
mov eax, dword [ecx]
mov eax, dword [eax + 8]
xor edx, edx
cmp dword [ecx + 0x10], edx
sete dl
push edx
call eax
push 0x22
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c6dc6
push 0x38
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c6dc6
mov ecx, dword [0x6c82d8]
cmp dword [ecx + 0x10], 0
mov edx, dword [ecx]
mov eax, dword [edx + 8]
jne 0x4c6dc2
push 1
jmp 0x4c6dc4
push 0
call eax
push 0x25
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c6ddc
push 0x38
mov ecx, edi
call fcn.00519dd0
push 0x20
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c6e0f
push 0x38
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c6e0f
mov ecx, dword [0x6c850c]
cmp dword [ecx + 0x10], 0
mov edx, dword [ecx]
mov eax, dword [edx + 8]
jne 0x4c6e0b
push 1
jmp 0x4c6e0d
push 0
call eax
cmp dword [ebp + 8], 1
je 0x4c6f49
push 0x17
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c6e58
push 0x38
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c6e58
mov ecx, dword [0x6d617c]
mov word [ebp - 0xf], 0x7f05
mov edx, dword [ecx + 0x129]
push 9
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x6e6608
mov dword [ebp - 0xd], edx
call fcn.0051ae10
push 0x31
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c6e8c
push 0x1d
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c6e8c
mov ecx, dword [0x6c84c0]
test ecx, ecx
je 0x4c6e8c
mov edx, dword [ecx]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [ecx + 0x10], eax
sete al
push eax
call edx
push 0x15
mov ecx, edi
call fcn.00519d20
mov bl, 0x3c
test eax, eax
je 0x4c6ece
push 0x1d
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c6ece
mov eax, dword [0x6d6170]
push 0xd
lea ecx, [ebp - 0x14]
push ecx
mov ecx, 0x6e6608
mov byte [ebp - 0x13], bl
mov byte [ebp - 0x12], 0x29
mov dword [ebp - 0x11], eax
mov dword [ebp - 0xb], 2
call fcn.0051ae10
push 0x10
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c6f08
push 0x1d
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c6f08
mov edx, dword [0x6d6170]
push 9
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x6e6608
mov byte [ebp - 0xf], bl
mov byte [ebp - 0xe], 1
mov dword [ebp - 0xd], edx
call fcn.0051ae10
push 0x1e
mov ecx, edi
call fcn.00519d20
test eax, eax
je 0x4c6f49
push 0x1d
mov ecx, edi
call fcn.00519dd0
test eax, eax
je 0x4c6f49
mov ecx, dword [0x6d6170]
push 0xd
lea edx, [ebp - 0x14]
mov dword [ebp - 0x11], ecx
push edx
mov ecx, 0x6e6608
mov byte [ebp - 0x13], bl
mov byte [ebp - 0x12], 0x29
mov dword [ebp - 0xb], 1
call fcn.0051ae10
pop edi
pop ebx
pop esi
mov esp, ebp
pop ebp
ret 4