Function at 0x4be3c0
Capabilities:
Hide graphical window

Disassembly:
sub esp, 0x214
mov eax, dword [0x6b8f0c]
xor eax, esp
mov dword [esp + 0x210], eax
cmp dword [0x6baa40], 0
push ebp
push edi
mov edi, dword [esp + 0x220]
mov ebp, ecx
je 0x4bf0cb
cmp dword [ebp + 0xb88], 0
jne 0x4bf0cb
cmp dword [0x6c9908], 0
je 0x4bf0cb
cmp dword [0x6bb388], 7
jne 0x4bf0cb
push ebx
push 0x58
mov ecx, edi
call fcn.00525e80
mov ebx, 1
cmp eax, ebx
jne 0x4be43b
mov ecx, dword [0x6bbca8]
mov edx, dword [0x6c9908]
mov eax, dword [ecx]
mov eax, dword [eax + 0x64]
push edx
push ebx
call eax
cmp dword [0x6dabb8], 0
mov dword [esp + 0xc], 0
je 0x4be458
cmp dword [ebp + 0xb84], ebx
jne 0x4be458
mov dword [esp + 0xc], ebx
push 0x38
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4be46a
mov ebx, 4
push 0x1d
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4be47d
and ebx, 0xfffffffe
or ebx, 2
push 0x2a
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4be490
and ebx, 0xfffffffe
or ebx, 8
push esi
xor esi, esi
cmp dword [esp + 0x10], 0
je 0x4be4b2
mov eax, dword [ebp + 0xb84]
lea ecx, [eax + eax*4]
lea edx, [esi + ecx*8]
add edx, edx
cmp dword [ebp + edx*8 + 0x50c], 0
je 0x4be505
mov eax, dword [ebp + 0xb84]
lea eax, [eax + eax*4]
lea eax, [esi + eax*8]
mov ecx, eax
add ecx, ecx
test dword [ebp + ecx*8 + 0x504], ebx
je 0x4be505
add eax, 0x51
add eax, eax
cmp dword [ebp + eax*8], 0
je 0x4be4e9
movzx edx, word [ebp + ecx*8 + 0x508]
push edx
mov ecx, edi
call fcn.00525e20
jmp 0x4be4f9
movzx eax, word [ebp + ecx*8 + 0x508]
push eax
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4be505
push esi
mov ecx, ebp
call fcn.004bcd10
inc esi
cmp esi, 0x28
jl 0x4be493
push 0x13
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4be5d6
push 0x38
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4be5d6
push 0
push 0x3880
mov ecx, 0x6f7b28
call fcn.0054fb60
test eax, eax
je 0x4be55b
push 0x5a7744
push 0x1d
push 0x6cb8c8
call fcn.004c35b0
add esp, 0xc
jmp 0x4bf0c9
mov ecx, dword [0x6bbba0]
cmp dword [ecx + 0x10], 0
jne 0x4be595
cmp dword [0x6d5834], 0
je 0x4be5a3
push 0x283
mov ecx, 0x6cb8c8
call fcn.004c2360
push eax
push 0x1d
push 0x6cb8c8
call fcn.004c35b0
mov ecx, dword [0x6bbba0]
add esp, 0xc
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 0
call eax
jmp 0x4bf0c9
mov edx, dword [0x6b37e4]
cmp byte [edx + 0x6c94f0], 0
je 0x4be5cd
push 0x59d380
push 1
push 0x3ab7
push 0x6c9010
call fcn.00439450
add esp, 0x10
jmp 0x4be5d6
mov eax, dword [ecx]
mov edx, dword [eax + 8]
push 1
call edx
push 0xc7
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4be607
mov ecx, dword [0x6bbac0]
test ecx, ecx
je 0x4bf0c9
cmp dword [ecx + 0x10], 0
mov eax, dword [ecx]
mov edx, dword [eax + 8]
je 0x4be603
push 0
jmp 0x4be605
push 1
call edx
push 0x14
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4be662
push 0x38
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4be662
mov esi, dword [0x6bbcf4]
test esi, esi
je 0x4bf0c9
cmp dword [esi + 0x10], 0
mov ecx, esi
je 0x4be649
push 1
call fcn.0043dc70
mov ecx, esi
call fcn.0043dbd0
push 0
jmp 0x4be659
push 0
call fcn.0043dc70
mov ecx, esi
call fcn.0043db60
push 1
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
push 0x3f
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4be6ca
cmp dword [0x6b37e4], 2
je 0x4bf0c9
call fcn.00503100
mov ecx, eax
call fcn.0050d3b0
test eax, eax
je 0x4be69f
call fcn.00503100
mov ecx, eax
call fcn.0050d3d0
push 0x8a3
jmp 0x4be6b0
call fcn.00503100
mov ecx, eax
call fcn.0050d240
push 0x8a2
mov ecx, 0x6cb8c8
call fcn.004c2360
push eax
push 0x1d
push 0x6cb8c8
call fcn.004c35b0
add esp, 0xc
push 0xf
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4be778
mov ecx, 0x6c9910
call fcn.00490fc0
mov esi, eax
test esi, esi
jne 0x4be70f
push 0x8b2
mov ecx, 0x6cb8c8
call fcn.004c2360
push eax
push 0x1d
push 0x6cb8c8
call fcn.004c35b0
add esp, 0xc
jmp 0x4bf0c9
cmp byte [esi + 0x128], 1
jne 0x4bf0c9
mov edx, dword [0x6db010]
mov ecx, dword [0x6bbd24]
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
push edx
mov edx, dword [0x6db00c]
push edx
call eax
mov ecx, dword [esi + 0x129]
push ecx
add esi, 0x131
push esi
lea edx, [esp + 0x1e8]
push str._s__d_
push edx
call fcn.0057dcef
mov ecx, dword [0x6bbd24]
add esp, 0x10
lea eax, [esp + 0x1e0]
push eax
call fcn.005001a0
mov ecx, dword [0x6bbd24]
call fcn.005001e0
push 0x41
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4be7a9
push 0x8e6
mov ecx, 0x6cb8c8
call fcn.004c2360
push eax
push 2
push 0x3ab4
push 0x6c9010
call fcn.00439450
add esp, 0x10
push 0x57
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4be7f6
call fcn.00403560
mov ecx, eax
call fcn.00520bd0
test eax, eax
jne 0x4be7df
call fcn.00403560
mov ecx, eax
call fcn.00520bf0
mov ecx, dword [0x6bbd34]
call fcn.00520ac0
jmp 0x4be7f6
call fcn.00403560
mov ecx, eax
call fcn.00520e80
mov ecx, dword [0x6bbd34]
call fcn.00520a70
push 0x10
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4be83a
push 0x38
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4be83a
mov ecx, dword [0x6ba500]
push ecx
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4be82c
mov edx, dword [0x6ba500]
push 0
push edx
jmp 0x4be834
mov eax, dword [0x6ba500]
push 8
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
cmp dword [0x6ca7cc], 0
je 0x4bf0c9
push 0x22
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4be87b
push 0x1d
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4be87b
mov ecx, dword [0x6bbc7c]
test ecx, ecx
je 0x4be87b
mov edx, dword [ecx]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [ecx + 0x10], eax
sete al
push eax
call edx
push 0x13
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4be8af
push 0x1d
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4be8af
mov ecx, dword [0x6bbc80]
test ecx, ecx
je 0x4be8af
mov eax, dword [ecx]
mov eax, dword [eax + 8]
xor edx, edx
cmp dword [ecx + 0x10], edx
sete dl
push edx
call eax
push 0x20
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4be8e2
push 0x1d
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4be8e2
mov ecx, dword [0x6bbcb8]
cmp dword [ecx + 0x10], 1
mov edx, dword [ecx]
mov eax, dword [edx + 8]
jne 0x4be8de
push 0
jmp 0x4be8e0
push 1
call eax
push 0x3b
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4be90d
push 0x38
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4be90d
xor ecx, ecx
cmp dword [0x6f5d2c], ecx
sete cl
mov dword [0x6f5d2c], ecx
push 0xe
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4be931
push 0x38
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4be931
mov ecx, 0x6c9010
call fcn.00436000
push 0x19
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4be963
push 0x38
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4be963
xor dword [ebp + 0xb90], 1
mov eax, dword [ebp + 0xb90]
push eax
mov ecx, 0x6bd240
call fcn.0041ad30
push 0x2e
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4be996
push 0x38
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4be996
cmp dword [0x6f7ed0], 4
mov ecx, 0x6f7eb8
jne 0x4be98f
push 0
jmp 0x4be991
push 4
call fcn.00552a90
push 0x1e
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4be9d8
push 0x38
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4be9d8
mov esi, dword [0x6bbc60]
test esi, esi
je 0x4be9d8
mov edx, dword [esi]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [esi + 0x10], eax
mov ecx, esi
sete al
push eax
call edx
push 0x5a7728
mov ecx, esi
call fcn.004722c0
push 0x1f
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4bea0c
push 0x38
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4bea0c
mov ecx, dword [0x6bbc30]
test ecx, ecx
je 0x4bea0c
mov eax, dword [ecx]
mov eax, dword [eax + 8]
xor edx, edx
cmp dword [ecx + 0x10], edx
sete dl
push edx
call eax
push 0x26
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4becf9
push 0x38
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4becf9
mov esi, dword [0x6bbc34]
test esi, esi
je 0x4becf9
mov ecx, dword [0x5a771c]
mov edx, dword [0x5a7720]
movzx eax, word [0x5a7724]
mov dword [esp + 0x1c8], ecx
movzx ecx, byte [0x5a7726]
mov dword [esp + 0x1cc], edx
lea edx, [esp + 0x44]
mov byte [esp + 0x1d2], cl
push edx
mov ecx, esi
mov word [esp + 0x1e1], 0x800
mov dword [esp + 0x48], 2
mov word [esp + 0x1d4], ax
call fcn.00471130
mov eax, dword [0x5a7710]
mov ecx, dword [0x5a7714]
movzx edx, word [0x5a7718]
mov dword [esp + 0x1cc], ecx
mov dword [esp + 0x1c8], eax
movzx eax, byte [0x5a771a]
lea ecx, [esp + 0x44]
push ecx
mov ecx, esi
mov word [esp + 0x1e1], 0x2001
mov dword [esp + 0x48], 4
mov word [esp + 0x1d4], dx
mov byte [esp + 0x1d6], al
call fcn.00471130
mov edx, dword [0x5a7704]
mov eax, dword [0x5a7708]
movzx ecx, word [0x5a770c]
mov dword [esp + 0x1c8], edx
movzx edx, byte [0x5a770e]
mov dword [esp + 0x1cc], eax
lea eax, [esp + 0x44]
mov word [esp + 0x1d0], cx
mov ebx, 6
push eax
mov ecx, esi
mov word [esp + 0x1e1], 0x1002
mov dword [esp + 0x48], ebx
mov byte [esp + 0x1d6], dl
call fcn.00471130
mov ecx, dword [0x5a76f8]
mov edx, dword [0x5a76fc]
movzx eax, word [0x5a7700]
mov dword [esp + 0x1c8], ecx
movzx ecx, byte [0x5a7702]
mov dword [esp + 0x1cc], edx
lea edx, [esp + 0x44]
mov byte [esp + 0x1d2], cl
push edx
mov ecx, esi
mov word [esp + 0x1e1], 0x2003
mov dword [esp + 0x48], 8
mov word [esp + 0x1d4], ax
call fcn.00471130
mov eax, dword [0x5a76ec]
mov ecx, dword [0x5a76f0]
movzx edx, word [0x5a76f4]
mov dword [esp + 0x1cc], ecx
mov dword [esp + 0x1c8], eax
movzx eax, byte [0x5a76f6]
lea ecx, [esp + 0x44]
push ecx
mov ecx, esi
mov word [esp + 0x1e1], 0x2004
mov dword [esp + 0x48], 0xa
mov word [esp + 0x1d4], dx
mov byte [esp + 0x1d6], al
call fcn.00471130
mov edx, dword [0x5a76e0]
movzx ecx, word [0x5a76e8]
mov eax, dword [0x5a76e4]
mov dword [esp + 0x1c8], edx
movzx edx, byte [0x5a76ea]
mov word [esp + 0x1dd], 0x405
mov dword [esp + 0x44], 0xc
mov dword [esp + 0x1cc], eax
mov word [esp + 0x1d0], cx
mov byte [esp + 0x1d2], dl
lea eax, [esp + 0x44]
push eax
mov ecx, esi
call fcn.00471130
mov ecx, dword [0x5a76d4]
mov edx, dword [0x5a76d8]
movzx eax, word [0x5a76dc]
mov dword [esp + 0x1c8], ecx
movzx ecx, byte [0x5a76de]
mov dword [esp + 0x1cc], edx
lea edx, [esp + 0x44]
mov byte [esp + 0x1d2], cl
push edx
mov ecx, esi
mov word [esp + 0x1e1], 0x1006
mov dword [esp + 0x48], 0xe
mov word [esp + 0x1d4], ax
call fcn.00471130
mov eax, dword [0x5a76c8]
mov ecx, dword [0x5a76cc]
movzx edx, word [0x5a76d0]
mov dword [esp + 0x1cc], ecx
mov dword [esp + 0x1c8], eax
movzx eax, byte [0x5a76d2]
lea ecx, [esp + 0x44]
push ecx
mov ecx, esi
mov word [esp + 0x1e1], 0x2007
mov dword [esp + 0x48], 0x10
mov word [esp + 0x1d4], dx
mov byte [esp + 0x1d6], al
call fcn.00471130
mov edx, dword [esi]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [esi + 0x10], eax
mov ecx, esi
sete al
push eax
call edx
mov ecx, esi
call fcn.00471660
push 0x24
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4beecd
push 0x38
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4beecd
lea eax, [esp + 0x1e5]
push 0x5a76bc
push eax
mov byte [esp + 0x1e8], 0
call fcn.0057dcef
lea ecx, [esp + 0x1fe]
push 0x5a76b0
push ecx
call fcn.0057dcef
lea edx, [esp + 0x31]
push 0x5a76a8
push edx
mov byte [esp + 0x34], 1
call fcn.0057dcef
lea eax, [esp + 0x4a]
push 0x5a76a0
push eax
call fcn.0057dcef
mov esi, dword [0x6bbc38]
add esp, 0x20
test esi, esi
je 0x4beecd
lea ecx, [esp + 0x1e0]
push ecx
mov ecx, esi
mov dword [esi + 0x23c], 1
call fcn.004700b0
lea edx, [esp + 0x1c]
push edx
mov ecx, esi
call fcn.004700b0
lea eax, [esp + 0x1c]
push eax
mov ecx, esi
call fcn.004700b0
lea ecx, [esp + 0x1c]
push ecx
mov ecx, esi
call fcn.004700b0
lea edx, [esp + 0x1c]
push edx
mov ecx, esi
call fcn.004700b0
lea eax, [esp + 0x1c]
push eax
mov ecx, esi
call fcn.004700b0
lea ecx, [esp + 0x1c]
push ecx
mov ecx, esi
call fcn.004700b0
lea edx, [esp + 0x1c]
push edx
mov ecx, esi
call fcn.004700b0
lea eax, [esp + 0x1c]
push eax
mov ecx, esi
call fcn.004700b0
lea ecx, [esp + 0x1c]
push ecx
mov ecx, esi
call fcn.004700b0
lea edx, [esp + 0x1c]
push edx
mov ecx, esi
call fcn.004700b0
lea eax, [esp + 0x1c]
push eax
mov ecx, esi
call fcn.004700b0
lea ecx, [esp + 0x1c]
push ecx
mov ecx, esi
call fcn.004700b0
lea edx, [esp + 0x1c]
push edx
mov ecx, esi
call fcn.004700b0
lea eax, [esp + 0x1c]
push eax
mov ecx, esi
call fcn.004700b0
lea ecx, [esp + 0x1c]
push ecx
mov ecx, esi
call fcn.004700b0
lea edx, [esp + 0x1c]
push edx
mov ecx, esi
call fcn.004700b0
lea eax, [esp + 0x1c]
push eax
mov ecx, esi
call fcn.004700b0
lea ecx, [esp + 0x1c]
push ecx
mov ecx, esi
call fcn.004700b0
lea edx, [esp + 0x1c]
push edx
mov ecx, esi
call fcn.004700b0
lea eax, [esp + 0x1c]
push eax
mov ecx, esi
call fcn.004700b0
lea ecx, [esp + 0x1c]
push ecx
mov ecx, esi
call fcn.004700b0
lea edx, [esp + 0x1c]
push edx
mov ecx, esi
call fcn.004700b0
lea eax, [esp + 0x1c]
push eax
mov ecx, esi
call fcn.004700b0
lea ecx, [esp + 0x1c]
push ecx
mov ecx, esi
call fcn.004700b0
mov ecx, esi
call fcn.004701c0
mov edx, dword [esi]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [esi + 0x10], eax
mov ecx, esi
sete al
push eax
call edx
push 0x23
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4bef01
push 0x38
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4bef01
mov ecx, dword [0x6bbc3c]
test ecx, ecx
je 0x4bef01
mov eax, dword [ecx]
mov eax, dword [eax + 8]
xor edx, edx
cmp dword [ecx + 0x10], edx
sete dl
push edx
call eax
push 0x22
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4bef34
push 0x38
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4bef34
mov ecx, dword [0x6bba80]
cmp dword [ecx + 0x10], 0
mov edx, dword [ecx]
mov eax, dword [edx + 8]
jne 0x4bef30
push 1
jmp 0x4bef32
push 0
call eax
push 0x25
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4bef4a
push 0x38
mov ecx, edi
call fcn.00525e80
push 0x20
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4bef7d
push 0x38
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4bef7d
mov ecx, dword [0x6bbcb4]
cmp dword [ecx + 0x10], 0
mov edx, dword [ecx]
mov eax, dword [edx + 8]
jne 0x4bef79
push 1
jmp 0x4bef7b
push 0
call eax
cmp dword [esp + 0x10], 1
je 0x4bf0c9
push 0x17
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4befca
push 0x38
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4befca
mov ecx, dword [0x6c9914]
mov word [esp + 0x11], 0x7f05
mov edx, dword [ecx + 0x129]
push 7
lea eax, [esp + 0x14]
push eax
mov ecx, 0x6db050
mov dword [esp + 0x1b], edx
call fcn.00526e20
push 0x31
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4beffe
push 0x1d
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4beffe
mov ecx, dword [0x6bbc68]
test ecx, ecx
je 0x4beffe
mov edx, dword [ecx]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [ecx + 0x10], eax
sete al
push eax
call edx
push 0x15
mov ecx, edi
call fcn.00525de0
mov bl, 0x3c
test eax, eax
je 0x4bf045
push 0x1d
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4bf045
mov eax, dword [0x6c9908]
push 0xb
lea ecx, [esp + 0x14]
push ecx
mov ecx, 0x6db050
mov byte [esp + 0x19], bl
mov byte [esp + 0x1a], 0x29
mov dword [esp + 0x1b], eax
mov dword [esp + 0x1f], 2
call fcn.00526e20
push 0x10
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4bf083
push 0x1d
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4bf083
mov edx, dword [0x6c9908]
push 7
lea eax, [esp + 0x14]
push eax
mov ecx, 0x6db050
mov byte [esp + 0x19], bl
mov byte [esp + 0x1a], 1
mov dword [esp + 0x1b], edx
call fcn.00526e20
push 0x1e
mov ecx, edi
call fcn.00525de0
test eax, eax
je 0x4bf0c9
push 0x1d
mov ecx, edi
call fcn.00525e80
test eax, eax
je 0x4bf0c9
mov ecx, dword [0x6c9908]
push 0xb
lea edx, [esp + 0x14]
mov dword [esp + 0x17], ecx
push edx
mov ecx, 0x6db050
mov byte [esp + 0x19], bl
mov byte [esp + 0x1a], 0x29
mov dword [esp + 0x1f], 1
call fcn.00526e20
pop esi
pop ebx
mov ecx, dword [esp + 0x218]
pop edi
pop ebp
xor ecx, esp
call fcn.0057d76e
add esp, 0x214
ret 4