Function at 0x4cd760
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x208
mov eax, dword [0x6c0558]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x6c2200], 0
push esi
mov esi, ecx
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x1f4], esi
je 0x4ce31d
cmp dword [esi + 0xbc8], 0
jne 0x4ce31d
cmp dword [0x6cfd40], 0
je 0x4ce31d
cmp dword [0x5c5160], 7
jne 0x4ce31d
push ebx
push 0x58
mov ecx, edi
call fcn.005240a0
mov ebx, 1
cmp eax, ebx
jne 0x4cd7dc
mov ecx, dword [0x6c29d8]
mov edx, dword [0x6cfd40]
mov eax, dword [ecx]
mov eax, dword [eax + 0x64]
push edx
push ebx
call eax
cmp dword [0x6bd550], 0
mov dword [ebp - 0x208], 0
je 0x4cd7fd
cmp dword [esi + 0xbc4], ebx
jne 0x4cd7fd
mov dword [ebp - 0x208], ebx
push 0x38
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4cd80f
mov ebx, 4
push 0x1d
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4cd822
and ebx, 0xfffffffe
or ebx, 2
push 0x2a
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4cd835
and ebx, 0xfffffffe
or ebx, 8
mov edx, dword [ebp - 0x1f4]
xor esi, esi
lea ecx, [ecx]
cmp dword [ebp - 0x208], 0
je 0x4cd860
mov ecx, dword [edx + 0xbc4]
imul ecx, ecx, 0x29
add ecx, esi
add ecx, ecx
cmp dword [edx + ecx*8 + 0x52c], 0
je 0x4cd8bb
mov eax, dword [edx + 0xbc4]
imul eax, eax, 0x29
add eax, esi
mov ecx, eax
add ecx, ecx
test dword [edx + ecx*8 + 0x524], ebx
je 0x4cd8bb
add eax, 0x53
add eax, eax
cmp dword [edx + eax*8], 0
je 0x4cd895
movzx edx, word [edx + ecx*8 + 0x528]
push edx
mov ecx, edi
call fcn.00524030
jmp 0x4cd8a5
movzx eax, word [edx + ecx*8 + 0x528]
push eax
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4cd8b5
mov ecx, dword [ebp - 0x1f4]
push esi
call fcn.004cbfe0
mov edx, dword [ebp - 0x1f4]
inc esi
cmp esi, 0x29
jl 0x4cd840
push 0x13
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4cd9ac
push 0x38
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4cd9ac
push 0
push 0x3880
mov ecx, 0x6f4258
call fcn.0054a530
test eax, eax
je 0x4cd923
push 0x5a590c
push 0x1d
push 0x6d1870
call fcn.004d3020
add esp, 0xc
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0057ad52
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x6c28d0]
cmp dword [ecx + 0x10], 0
jne 0x4cd95d
cmp dword [0x6bbab4], 0
je 0x4cd979
push 0x283
mov ecx, 0x6d1870
call fcn.004d1c70
push eax
push 0x1d
push 0x6d1870
call fcn.004d3020
mov ecx, dword [0x6c28d0]
add esp, 0xc
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 0
call eax
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0057ad52
mov esp, ebp
pop ebp
ret 4
mov edx, dword [0x6b21f0]
cmp byte [edx + 0x6cf970], 0
je 0x4cd9a3
push 0x59b638
push 1
push 0x3aba
push 0x6b1410
call fcn.004451b0
add esp, 0x10
jmp 0x4cd9ac
mov eax, dword [ecx]
mov edx, dword [eax + 8]
push 1
call edx
push 0xc7
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4cd9dd
mov ecx, dword [0x6c27f0]
test ecx, ecx
je 0x4ce31c
cmp dword [ecx + 0x10], 0
mov eax, dword [ecx]
mov edx, dword [eax + 8]
je 0x4cd9d9
push 0
jmp 0x4cd9db
push 1
call edx
push 0x14
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4cda38
push 0x38
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4cda38
mov esi, dword [0x6c2a24]
test esi, esi
je 0x4ce31c
cmp dword [esi + 0x10], 0
mov ecx, esi
je 0x4cda1f
push 1
call fcn.0044a1b0
mov ecx, esi
call fcn.0044a4a0
push 0
jmp 0x4cda2f
push 0
call fcn.0044a1b0
mov ecx, esi
call fcn.0044ab20
push 1
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
push 0x3f
mov ecx, edi
call fcn.00523ff0
push 0x41
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4cda72
push 0x8e6
mov ecx, 0x6d1870
call fcn.004d1c70
push eax
push 2
push 0x3ab5
push 0x6b1410
call fcn.004451b0
add esp, 0x10
push 0x57
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4cdabf
call fcn.0040d440
mov ecx, eax
call fcn.0051ec10
test eax, eax
jne 0x4cdaa8
call fcn.0040d440
mov ecx, eax
call fcn.0051ede0
mov ecx, dword [0x6c2a64]
call fcn.0051e840
jmp 0x4cdabf
call fcn.0040d440
mov ecx, eax
call fcn.0051ec20
mov ecx, dword [0x6c2a64]
call fcn.0051e810
push 0x10
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4cdb03
push 0x38
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4cdb03
mov eax, dword [0x6c1cc0]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4cdaf4
mov ecx, dword [0x6c1cc0]
push 0
push ecx
jmp 0x4cdafd
mov edx, dword [0x6c1cc0]
push 8
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
cmp dword [0x6b34bc], 0
je 0x4ce31c
push 0x22
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4cdb44
push 0x1d
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4cdb44
mov ecx, dword [0x6c29ac]
test ecx, ecx
je 0x4cdb44
mov eax, dword [ecx]
mov eax, dword [eax + 8]
xor edx, edx
cmp dword [ecx + 0x10], edx
sete dl
push edx
call eax
push 0x13
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4cdb78
push 0x1d
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4cdb78
mov ecx, dword [0x6c29b0]
test ecx, ecx
je 0x4cdb78
mov edx, dword [ecx]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [ecx + 0x10], eax
sete al
push eax
call edx
push 0x20
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4cdbab
push 0x1d
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4cdbab
mov ecx, dword [0x6c29e8]
cmp dword [ecx + 0x10], 1
mov eax, dword [ecx]
mov edx, dword [eax + 8]
jne 0x4cdba7
push 0
jmp 0x4cdba9
push 1
call edx
push 0x3b
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4cdbd5
push 0x38
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4cdbd5
xor eax, eax
cmp dword [0x6f248c], eax
sete al
mov dword [0x6f248c], eax
push 0xe
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4cdbf9
push 0x38
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4cdbf9
mov ecx, 0x6b1410
call fcn.00441a50
push 0x19
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4cdc31
push 0x38
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4cdc31
mov eax, dword [ebp - 0x1f4]
xor dword [eax + 0xbd0], 1
mov eax, dword [eax + 0xbd0]
push eax
mov ecx, 0x6b09b0
call fcn.00425030
push 0x2e
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4cdc64
push 0x38
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4cdc64
cmp dword [0x6f4628], 4
mov ecx, 0x6f4610
jne 0x4cdc5d
push 0
jmp 0x4cdc5f
push 4
call fcn.005539a0
push 0x1e
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4cdca6
push 0x38
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4cdca6
mov esi, dword [0x6c2990]
test esi, esi
je 0x4cdca6
mov edx, dword [esi]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [esi + 0x10], eax
mov ecx, esi
sete al
push eax
call edx
push 0x5a58f8
mov ecx, esi
call fcn.00480a00
push 0x1f
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4cdcda
push 0x38
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4cdcda
mov ecx, dword [0x6c2960]
test ecx, ecx
je 0x4cdcda
mov eax, dword [ecx]
mov eax, dword [eax + 8]
xor edx, edx
cmp dword [ecx + 0x10], edx
sete dl
push edx
call eax
push 0x26
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4cdf47
push 0x38
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4cdf47
mov esi, dword [0x6c2964]
test esi, esi
je 0x4cdf47
mov ecx, dword [0x5a58ec]
mov edx, dword [0x5a58f0]
movzx eax, word [0x5a58f4]
mov dword [ebp - 0x44], ecx
movzx ecx, byte [0x5a58f6]
mov dword [ebp - 0x40], edx
lea edx, [ebp - 0x1c8]
mov byte [ebp - 0x3a], cl
push edx
mov ecx, esi
mov word [ebp - 0x2f], 0x800
mov dword [ebp - 0x1c8], 2
mov word [ebp - 0x3c], ax
call fcn.0047f840
mov eax, dword [0x5a58e0]
mov ecx, dword [0x5a58e4]
movzx edx, word [0x5a58e8]
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x44], eax
movzx eax, byte [0x5a58ea]
lea ecx, [ebp - 0x1c8]
push ecx
mov ecx, esi
mov word [ebp - 0x2f], 0x2001
mov dword [ebp - 0x1c8], 4
mov word [ebp - 0x3c], dx
mov byte [ebp - 0x3a], al
call fcn.0047f840
mov edx, dword [0x5a58d4]
mov eax, dword [0x5a58d8]
movzx ecx, word [0x5a58dc]
mov dword [ebp - 0x44], edx
movzx edx, byte [0x5a58de]
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x1c8]
mov word [ebp - 0x3c], cx
mov ebx, 6
push eax
mov ecx, esi
mov word [ebp - 0x2f], 0x1002
mov dword [ebp - 0x1c8], ebx
mov byte [ebp - 0x3a], dl
call fcn.0047f840
mov ecx, dword [0x5a58c8]
mov edx, dword [0x5a58cc]
movzx eax, word [0x5a58d0]
mov dword [ebp - 0x44], ecx
movzx ecx, byte [0x5a58d2]
mov dword [ebp - 0x40], edx
lea edx, [ebp - 0x1c8]
mov byte [ebp - 0x3a], cl
push edx
mov ecx, esi
mov word [ebp - 0x2f], 0x2003
mov dword [ebp - 0x1c8], 8
mov word [ebp - 0x3c], ax
call fcn.0047f840
mov eax, dword [0x5a58bc]
mov ecx, dword [0x5a58c0]
movzx edx, word [0x5a58c4]
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x44], eax
movzx eax, byte [0x5a58c6]
lea ecx, [ebp - 0x1c8]
push ecx
mov ecx, esi
mov word [ebp - 0x2f], 0x2004
mov dword [ebp - 0x1c8], 0xa
mov word [ebp - 0x3c], dx
mov byte [ebp - 0x3a], al
call fcn.0047f840
mov edx, dword [0x5a58b0]
movzx ecx, word [0x5a58b8]
mov eax, dword [0x5a58b4]
mov dword [ebp - 0x44], edx
movzx edx, byte [0x5a58ba]
mov word [ebp - 0x2f], 0x405
mov dword [ebp - 0x1c8], 0xc
mov dword [ebp - 0x40], eax
mov word [ebp - 0x3c], cx
mov byte [ebp - 0x3a], dl
lea eax, [ebp - 0x1c8]
push eax
mov ecx, esi
call fcn.0047f840
mov ecx, dword [0x5a58a4]
mov edx, dword [0x5a58a8]
movzx eax, word [0x5a58ac]
mov dword [ebp - 0x44], ecx
movzx ecx, byte [0x5a58ae]
mov dword [ebp - 0x40], edx
lea edx, [ebp - 0x1c8]
mov byte [ebp - 0x3a], cl
push edx
mov ecx, esi
mov word [ebp - 0x2f], 0x1006
mov dword [ebp - 0x1c8], 0xe
mov word [ebp - 0x3c], ax
call fcn.0047f840
mov eax, dword [0x5a5898]
mov ecx, dword [0x5a589c]
movzx edx, word [0x5a58a0]
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x44], eax
movzx eax, byte [0x5a58a2]
lea ecx, [ebp - 0x1c8]
push ecx
mov ecx, esi
mov word [ebp - 0x2f], 0x2007
mov dword [ebp - 0x1c8], 0x10
mov word [ebp - 0x3c], dx
mov byte [ebp - 0x3a], al
call fcn.0047f840
mov edx, dword [esi]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [esi + 0x10], eax
mov ecx, esi
sete al
push eax
call edx
mov ecx, esi
call fcn.0047fd50
push 0x24
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4ce0fc
push 0x38
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4ce0fc
lea eax, [ebp - 0x1eb]
push 0x5a588c
push eax
mov byte [ebp - 0x1f0], 0
call fcn.0057acb0
lea ecx, [ebp - 0x1da]
push 0x5a5880
push ecx
call fcn.0057acb0
lea edx, [ebp - 0x27]
push 0x5a5878
push edx
mov byte [ebp - 0x2c], 1
call fcn.0057acb0
lea eax, [ebp - 0x16]
push 0x5a5870
push eax
call fcn.0057acb0
mov esi, dword [0x6c2968]
add esp, 0x20
test esi, esi
je 0x4ce0fc
lea ecx, [ebp - 0x1f0]
push ecx
mov ecx, esi
mov dword [esi + 0x23c], 1
call fcn.0047e710
lea edx, [ebp - 0x2c]
push edx
mov ecx, esi
call fcn.0047e710
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0047e710
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
call fcn.0047e710
lea edx, [ebp - 0x2c]
push edx
mov ecx, esi
call fcn.0047e710
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0047e710
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
call fcn.0047e710
lea edx, [ebp - 0x2c]
push edx
mov ecx, esi
call fcn.0047e710
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0047e710
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
call fcn.0047e710
lea edx, [ebp - 0x2c]
push edx
mov ecx, esi
call fcn.0047e710
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0047e710
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
call fcn.0047e710
lea edx, [ebp - 0x2c]
push edx
mov ecx, esi
call fcn.0047e710
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0047e710
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
call fcn.0047e710
lea edx, [ebp - 0x2c]
push edx
mov ecx, esi
call fcn.0047e710
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0047e710
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
call fcn.0047e710
lea edx, [ebp - 0x2c]
push edx
mov ecx, esi
call fcn.0047e710
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0047e710
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
call fcn.0047e710
lea edx, [ebp - 0x2c]
push edx
mov ecx, esi
call fcn.0047e710
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.0047e710
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
call fcn.0047e710
mov ecx, esi
call fcn.0047e820
mov edx, dword [esi]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [esi + 0x10], eax
mov ecx, esi
sete al
push eax
call edx
push 0x23
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4ce130
push 0x38
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4ce130
mov ecx, dword [0x6c296c]
test ecx, ecx
je 0x4ce130
mov eax, dword [ecx]
mov eax, dword [eax + 8]
xor edx, edx
cmp dword [ecx + 0x10], edx
sete dl
push edx
call eax
push 0x22
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4ce163
push 0x38
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4ce163
mov ecx, dword [0x6c27b0]
cmp dword [ecx + 0x10], 0
mov edx, dword [ecx]
mov eax, dword [edx + 8]
jne 0x4ce15f
push 1
jmp 0x4ce161
push 0
call eax
push 0x25
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4ce179
push 0x38
mov ecx, edi
call fcn.005240a0
push 0x20
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4ce1ac
push 0x38
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4ce1ac
mov ecx, dword [0x6c29e4]
cmp dword [ecx + 0x10], 0
mov edx, dword [ecx]
mov eax, dword [edx + 8]
jne 0x4ce1a8
push 1
jmp 0x4ce1aa
push 0
call eax
cmp dword [ebp - 0x208], 1
je 0x4ce31c
push 0x17
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4ce201
push 0x38
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4ce201
mov ecx, dword [0x6cfd4c]
mov word [ebp - 0x1ff], 0x7f05
mov edx, dword [ecx + 0x129]
push 9
lea eax, [ebp - 0x200]
push eax
mov ecx, 0x6bda68
mov dword [ebp - 0x1fd], edx
call fcn.00525240
push 0x31
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4ce235
push 0x1d
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4ce235
mov ecx, dword [0x6c2998]
test ecx, ecx
je 0x4ce235
mov edx, dword [ecx]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [ecx + 0x10], eax
sete al
push eax
call edx
push 0x15
mov ecx, edi
call fcn.00523ff0
mov bl, 0x3c
test eax, eax
je 0x4ce286
push 0x1d
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4ce286
mov eax, dword [0x6cfd40]
push 0xd
lea ecx, [ebp - 0x204]
push ecx
mov ecx, 0x6bda68
mov byte [ebp - 0x203], bl
mov byte [ebp - 0x202], 0x29
mov dword [ebp - 0x201], eax
mov dword [ebp - 0x1fb], 2
call fcn.00525240
push 0x10
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4ce2cc
push 0x1d
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4ce2cc
mov edx, dword [0x6cfd40]
push 9
lea eax, [ebp - 0x200]
push eax
mov ecx, 0x6bda68
mov byte [ebp - 0x1ff], bl
mov byte [ebp - 0x1fe], 1
mov dword [ebp - 0x1fd], edx
call fcn.00525240
push 0x1e
mov ecx, edi
call fcn.00523ff0
test eax, eax
je 0x4ce31c
push 0x1d
mov ecx, edi
call fcn.005240a0
test eax, eax
je 0x4ce31c
mov ecx, dword [0x6cfd40]
push 0xd
lea edx, [ebp - 0x204]
mov dword [ebp - 0x201], ecx
push edx
mov ecx, 0x6bda68
mov byte [ebp - 0x203], bl
mov byte [ebp - 0x202], 0x29
mov dword [ebp - 0x1fb], 1
call fcn.00525240
pop ebx
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.0057ad52
mov esp, ebp
pop ebp
ret 4