Function at 0x43bef0
Capabilities:
Hide graphical window
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52e724
mov eax, dword fs:[0]
push eax
sub esp, 0x840
mov eax, dword [0x5c6150]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
cmp dword [edi + 0x24], 0
lea ebx, [edi + 0x24]
je 0x43bf44
push 0x5c080c
lea eax, [ebp - 0x7a4]
mov dword [ebp - 0x7a4], 0x80800000
push eax
call fcn.004da58d
mov esi, dword [edi + 4]
mov dword [ebp - 0x7a4], esi
push 0x508
lea eax, [ebp - 0x78c]
mov dword [ebp - 4], 0
push 0
push eax
call fcn.004d9fe0
mov eax, dword [edi + 0x20]
mov dword [ebp - 0x7b0], eax
mov byte [ebp - 0x7a8], 0
mov dword [ebp - 0x7ac], 0
push 0
mov byte [ebp - 4], 1
call fcn.004e2e2c
add esp, 0x10
mov dword [ebp - 0x7b4], edx
mov ecx, 0x5d58dc
push eax
push 0x5d9dc0
call fcn.0047ab30
push 1
push 0x5d58dc
push dword [edi + 0x10]
lea eax, [ebp - 0x7ac]
push eax
call fcn.004cd840
mov ecx, eax
call fcn.004cde90
push dword [edi + 0x10]
lea ecx, [ebp - 0x7d4]
push 0x5d58dc
push dword [edi + 0x1c]
push ebx
push dword [edi + 0x18]
push dword [edi + 0x14]
call fcn.0042d1d0
mov byte [ebp - 4], 0xb
cmp dword [ebx], 0
je 0x43c003
mov dword [ebp - 0x794], 0x80800000
lea eax, [ebp - 0x794]
push 0x5c080c
push eax
call fcn.004da58d
push 0
push 3
lea eax, [ebp - 0x7ac]
push eax
lea ecx, [ebp - 0x7d4]
call fcn.00434f60
test al, al
jne 0x43c0ae
push 0x597414
lea eax, [ebp - 0x78c]
mov ecx, edi
push eax
call fcn.0043d650
mov eax, dword [edi + 4]
test eax, eax
je 0x43c059
push 0
push dword [eax + 0x94]
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [edi + 4]
push 1
push 0
push dword [eax + 0x5c]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [0x5d1f0c]
mov edi, dword [sym.imp.USER32.dll_PostMessageW]
test eax, eax
je 0x43c074
push 0
push 0
push 0x800d
push eax
call edi
lea ecx, [ebp - 0x7d4]
call fcn.0043ac90
lea ecx, [ebp - 0x7ac]
call fcn.00450c20
test esi, esi
je 0x43c58e
mov eax, dword [esi + 4]
test eax, eax
je 0x43c58e
push 0
push 2
push 0x501
push eax
call edi
jmp 0x43c58e
push 5
push 0x5dc670
mov ecx, 0x5d58dc
call fcn.0047ab30
push 1
push 0x5d58dc
push dword [edi + 0x10]
lea eax, [ebp - 0x7ac]
push eax
call fcn.004cd840
mov ecx, eax
call fcn.004cde90
cmp dword [ebx], 0
jne 0x43bfe8
push edi
push dword [edi + 0x1c]
lea ecx, [ebp - 0x84c]
push ebx
push dword [edi + 0x10]
push 0x5d58dc
push dword [ebp - 0x7cc]
push dword [edi + 0x18]
push dword [edi + 0x14]
call fcn.00424540
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x804]
mov byte [ebp - 0x78d], 1
call fcn.004397f0
lea eax, [ebp - 0x804]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x78d]
push eax
lea eax, [ebp - 0x7ac]
push eax
lea ecx, [ebp - 0x84c]
call fcn.004255f0
test al, al
jne 0x43c15f
push 0x597434
lea eax, [ebp - 0x78c]
mov ecx, edi
push eax
call fcn.0043d650
jmp 0x43c557
cmp dword [ebx], 0
jne 0x43bfe8
push ebx
lea eax, [ebp - 0x78c]
push eax
push dword [edi + 4]
lea ecx, [ebp - 0x160]
call fcn.00439760
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x160]
mov eax, dword [edi + 4]
mov dword [eax + 0x7c8], ecx
mov eax, dword [0x5c6ad0]
mov dword [ebp - 0x7a0], eax
mov eax, 0x593394
mov esi, eax
shr esi, 0x10
test si, si
jne 0x43c1bc
movzx eax, ax
lea ecx, [ebp - 0x7a0]
push eax
call fcn.00413df0
jmp 0x43c1fd
push 0x593394
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0x794], eax
test eax, eax
je 0x43c1fd
push eax
lea ecx, [ebp - 0x7a0]
call fcn.00413af0
test eax, eax
je 0x43c1fd
mov eax, dword [ebp - 0x794]
add eax, eax
push eax
push 0x593394
push dword [ebp - 0x7a0]
call fcn.004d9a60
add esp, 0xc
lea eax, [ebp - 0x7a0]
mov byte [ebp - 4], 0x18
mov ecx, dword [edi + 4]
push eax
call fcn.00417150
cmp byte [ebp - 0x78d], 0
je 0x43c541
push 0
push dword [ebp - 0x7fc]
push 0x8010
push dword [0x5d1f0c]
call dword [sym.imp.USER32.dll_PostMessageW]
lea eax, [ebp - 0x794]
push eax
lea ecx, [ebp - 0x84c]
call fcn.00424940
push 0x80
mov byte [ebp - 4], 0x19
push dword [ebp - 0x794]
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x794]
lea ecx, [ebp - 0x284]
call fcn.00451610
mov byte [ebp - 4], 0x1a
call fcn.00424a90
mov eax, dword [0x5c6ad0]
mov dword [ebp - 0x79c], eax
test si, si
jne 0x43c2a7
mov eax, 0x593394
lea ecx, [ebp - 0x79c]
movzx eax, ax
push eax
call fcn.00413df0
jmp 0x43c2e8
push 0x593394
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0x798], eax
test eax, eax
je 0x43c2e8
push eax
lea ecx, [ebp - 0x79c]
call fcn.00413af0
test eax, eax
je 0x43c2e8
mov eax, dword [ebp - 0x798]
add eax, eax
push eax
push 0x593394
push dword [ebp - 0x79c]
call fcn.004d9a60
add esp, 0xc
mov byte [ebp - 4], 0x1b
cmp byte [ebp - 0x804], 0
je 0x43c432
cmp dword [ebp - 0x7b0], 0
jne 0x43c432
cmp dword [ebx], 0
je 0x43c325
mov dword [ebp - 0x7b0], 0x80800000
lea eax, [ebp - 0x7b0]
push 0x5c080c
jmp 0x43bffd
mov eax, dword [0x5d1f0c]
test eax, eax
je 0x43c33e
push 0
push 0
push 0x800c
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov byte [ebp - 0x78d], 1
mov dword [ebp - 0x798], 0xffffffff
mov byte [ebp - 0x7b4], 0
mov dword [ebp - 0x7b8], 0
lea eax, [ebp - 0x798]
mov byte [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0x78d]
push eax
sub esp, 8
lea eax, [ebp - 0x284]
lea ecx, [ebp - 0x84c]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x7b8]
push eax
call fcn.00429cc0
test al, al
jne 0x43c420
cmp dword [ebp - 0x798], 0
je 0x43c40e
cmp dword [ebx], 0
jne 0x43c40e
push 0
lea ecx, [ebp - 0x284]
or esi, 0xffffffff
call fcn.00452290
lea ecx, [ebp - 0x79c]
call fcn.00415130
test al, al
je 0x43c3d9
mov ecx, dword [edi + 4]
lea eax, [ebp - 0x79c]
push eax
call fcn.00417150
push 0
sub esp, 8
lea eax, [ebp - 0x160]
mov ecx, edi
push eax
lea eax, [ebp - 0x84c]
push eax
call fcn.0043c5b0
test eax, eax
je 0x43c422
xor ecx, ecx
call fcn.004192d0
lea ecx, [ebp - 0x7b8]
call fcn.00450c20
jmp 0x43c4cf
lea ecx, [ebp - 0x7b8]
call fcn.00450c20
xor esi, esi
jmp 0x43c4cf
xor esi, esi
lea ecx, [ebp - 0x7b8]
call fcn.00450c20
jmp 0x43c4cf
mov eax, dword [0x5c6ad0]
mov dword [ebp - 0x798], eax
test si, si
jne 0x43c458
mov eax, 0x593394
lea ecx, [ebp - 0x798]
movzx eax, ax
push eax
call fcn.00413df0
jmp 0x43c490
push 0x593394
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, eax
test esi, esi
je 0x43c490
push esi
lea ecx, [ebp - 0x798]
call fcn.00413af0
test eax, eax
je 0x43c490
lea eax, [esi + esi]
push eax
push 0x593394
push dword [ebp - 0x798]
call fcn.004d9a60
add esp, 0xc
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x160]
push dword [ebp - 0x7ec]
mov ecx, edi
sub esp, 8
push eax
lea eax, [ebp - 0x84c]
push eax
call fcn.0043c5b0
lea ecx, [ebp - 0x798]
mov esi, eax
call fcn.00413c80
test esi, esi
je 0x43c4cf
cmp dword [ebx], 0
jne 0x43c4cf
xor ecx, ecx
call fcn.004192d0
lea ecx, [ebp - 0x79c]
call fcn.00413c80
lea ecx, [ebp - 0x284]
call fcn.00424a60
lea ecx, [ebp - 0x794]
call fcn.00413c80
lea ecx, [ebp - 0x7a0]
call fcn.00413c80
lea ecx, [ebp - 0x160]
call fcn.0043ad70
lea ecx, [ebp - 0x804]
call fcn.0043ad10
lea ecx, [ebp - 0x84c]
call fcn.00424740
lea ecx, [ebp - 0x7d4]
call fcn.0043ac90
lea ecx, [ebp - 0x7ac]
call fcn.00450c20
lea ecx, [ebp - 0x7a4]
call fcn.0043a7c0
mov eax, esi
jmp 0x43c591
lea ecx, [ebp - 0x7a0]
call fcn.00413c80
lea ecx, [ebp - 0x160]
call fcn.0043ad70
lea ecx, [ebp - 0x804]
call fcn.0043ad10
lea ecx, [ebp - 0x84c]
call fcn.00424740
lea ecx, [ebp - 0x7d4]
call fcn.0043ac90
lea ecx, [ebp - 0x7ac]
call fcn.00450c20
lea ecx, [ebp - 0x7a4]
call fcn.0043a7c0
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004d6cfd
mov esp, ebp
pop ebp
ret 8