Function at 0x4422d0
Capabilities:
Hide graphical window
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5f43db
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
push ebx
push esi
mov eax, dword [0x654c54]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
xor ebx, ebx
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 0xa8]
cmp byte [eax + 0x8c8], bl
jne 0x4423a2
xor ecx, ecx
push ebx
mov word [ebp - 0x48], cx
push 0x606ac4
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], ebx
call fcn.0040b3b0
push 0xd
push str.MarketingMode
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
call fcn.0040b080
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x68]
push ecx
mov ecx, dword [esi + 0xa8]
mov dword [ebp - 4], 1
mov dword [ebp - 0x14], 3
call fcn.004df6b0
mov edx, dword [eax + 0x14]
push 4
push str.ua30
push edx
push ebx
mov ecx, eax
mov dword [ebp - 4], 2
mov dword [ebp - 0x14], 7
call fcn.00403f30
mov byte [ebp - 0xd], 1
test eax, eax
je 0x4423a5
mov byte [ebp - 0xd], bl
test byte [ebp - 0x14], 4
je 0x4423d1
and dword [ebp - 0x14], 0xfffffffb
cmp dword [ebp - 0x50], 8
jb 0x4423c1
mov eax, dword [ebp - 0x64]
push eax
call fcn.005cb017
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x50], 7
mov dword [ebp - 0x54], ebx
mov word [ebp - 0x64], cx
test byte [ebp - 0x14], 2
je 0x4423fa
and dword [ebp - 0x14], 0xfffffffd
cmp dword [ebp - 0x18], 0x10
jb 0x4423ed
mov edx, dword [ebp - 0x2c]
push edx
call fcn.005cb017
add esp, 4
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
test byte [ebp - 0x14], 1
mov dword [ebp - 4], 0xffffffff
je 0x442429
cmp dword [ebp - 0x34], 8
jb 0x442419
mov eax, dword [ebp - 0x48]
push eax
call fcn.005cb017
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x38], ebx
mov word [ebp - 0x48], cx
cmp byte [ebp - 0xd], bl
je 0x442440
cmp byte [esi + 0xde], bl
je 0x442557
mov byte [esi + 0xde], bl
mov ecx, esi
call fcn.0043fc50
mov eax, dword [esi + 0xc8]
cmp eax, ebx
je 0x442472
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x10]
mov ecx, esi
call eax
mov ecx, dword [esi + 0xa8]
mov edx, dword [ecx]
mov eax, dword [esi + 0xc8]
mov edx, dword [edx + 0x88]
push eax
call edx
mov eax, dword [esi + 0xa8]
mov dword [esi + 0xc8], ebx
mov dword [esi + 0xd0], 0xffffffff
mov ecx, dword [eax + 0x838]
cmp ecx, ebx
je 0x442497
call fcn.00446550
mov ecx, esi
call fcn.004402d0
push str.mHasSeenAd_is_now_true._r_n
call dword [sym.imp.kernel32.dll_OutputDebugStringA]
mov ecx, dword [esi + 0xa8]
mov byte [ecx + 0x8c8], 1
mov edx, dword [esi]
mov eax, dword [edx + 0x7c]
push 1
mov ecx, esi
mov byte [esi + 0xd4], 1
mov dword [esi + 0xd8], ebx
mov byte [esi + 0xb2], 1
mov byte [esi + 0xdd], bl
mov dword [esi + 0xcc], ebx
mov byte [esi + 0xad], bl
mov byte [esi + 0xaf], bl
mov byte [esi + 0xae], bl
mov byte [esi + 0xb6], bl
mov byte [esi + 0xb4], bl
mov byte [esi + 0xb5], bl
call eax
mov ecx, dword [esi + 0x20]
mov edx, dword [ecx]
mov eax, dword [edx + 0x2c]
push esi
call eax
mov ecx, dword [esi + 0x20]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
push esi
call eax
mov eax, dword [esi + 0xa8]
mov ecx, dword [eax + 0xc0]
push ebx
push ebx
push ebx
push ebx
neg ecx
push ecx
mov ecx, dword [eax + 0x830]
push esi
call fcn.0043d720
mov ecx, dword [esi + 0xa8]
push ebx
call fcn.004cd360
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [esi + 0xa8]
mov eax, dword [edx + 0x374]
push 6
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 0xa8]
mov ecx, dword [ecx + 0x860]
push str.ExpireScreen
call fcn.0043ed90
mov ecx, dword [esi + 0x20]
mov byte [esi + 0xde], 1
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
push esi
call eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret