Function at 0x4320f0
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
mov ecx, 8
push 0
push 0
dec ecx
jne 0x4320f8
push ecx
push ebx
xor eax, eax
push ebp
push 0x432423
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.0040a054
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0x20]
mov eax, 0x432438
call fcn.00413dec
mov ecx, dword [ebp - 0x20]
lea eax, [ebp - 0x1c]
mov edx, 0x432444
call fcn.004049a8
mov eax, dword [ebp - 0x1c]
push eax
call sub.kernel32.dll_GetCurrentProcessId
xor edx, edx
push edx
push eax
mov eax, dword [0x436f6c]
call fcn.00405708
pop edx
call fcn.00404d78
call fcn.004032e4
call fcn.0042da58
test al, al
je 0x4323fb
mov al, 1
call fcn.0042ff24
xor ebx, ebx
mov eax, 1
call fcn.0042db00
mov edx, 1
mov eax, 0x28
call fcn.00421ce8
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0x24]
mov eax, dword [0x436fa8]
mov eax, dword [eax]
call fcn.00425ed4
mov eax, dword [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
call fcn.0042cac8
mov edx, dword [ebp - 0x28]
mov cl, 1
pop eax
call fcn.004302fc
mov byte [ebp - 1], al
mov edx, 2
mov eax, 0x28
call fcn.00421ce8
call fcn.0042a600
push edx
push eax
call fcn.0042c430
lea ecx, [ebp - 0x10]
lea edx, [ebp - 0x18]
mov al, byte [ebp - 1]
call fcn.00431e5c
test al, al
je 0x43225d
call sub.kernel32.dll_GetCurrentProcessId
xor edx, edx
push edx
push eax
mov eax, dword [0x436f6c]
call fcn.00405708
mov edx, 0x432454
call fcn.00404d78
call fcn.004032e4
mov bl, 1
call fcn.0042a600
push edx
push eax
call fcn.0042c5bc
call fcn.0042d4b8
call fcn.0042c740
call fcn.0042d73c
test al, al
je 0x43222d
call fcn.0043099c
jmp 0x43223b
call fcn.00430d0c
test al, al
je 0x43223b
call fcn.00431c9c
call sub.kernel32.dll_GetCurrentProcessId
xor edx, edx
push edx
push eax
mov eax, dword [0x436f6c]
call fcn.00405708
mov edx, 0x432478
call fcn.00404d78
call fcn.004032e4
mov eax, dword [0x437070]
cmp dword [eax], 1
jne 0x4323fb
push 0
push 0x3e8
xor eax, eax
call fcn.00413234
push 0
mov eax, dword [0x436f38]
mov eax, dword [eax]
push eax
call sub.user32.dll_ShowWindow
test bl, bl
jne 0x4323fb
lea eax, [ebp - 0x14]
call fcn.0040469c
call sub.kernel32.dll_GetCurrentProcessId
xor edx, edx
push edx
push eax
mov eax, dword [0x436f6c]
call fcn.00405708
mov edx, 0x43249c
call fcn.00404d78
mov edx, dword [0x436f60]
mov dl, byte [edx]
call fcn.00403234
mov edx, 0x4324b0
call fcn.00404d78
push eax
call fcn.00420fb4
mov edx, eax
pop eax
call fcn.00403234
call fcn.004032e4
mov eax, dword [0x436f60]
cmp byte [eax], 0
jne 0x43234e
lea eax, [ebp - 0x14]
call fcn.00420f3c
test al, al
jne 0x43234e
lea ecx, [ebp - 8]
xor edx, edx
mov eax, 0x4324cc
call fcn.0042c30c
cmp dword [ebp - 0x14], 0
je 0x432322
push dword [ebp - 8]
push 0x4324d8
push dword [ebp - 0x14]
lea eax, [ebp - 8]
mov edx, 3
call fcn.00404a1c
lea eax, [ebp - 0x2c]
call fcn.0042bf70
mov eax, dword [ebp - 0x2c]
push eax
call fcn.0042c18c
push eax
lea eax, [ebp - 0x30]
call fcn.0042c020
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 8]
xor eax, eax
call fcn.00413644
jmp 0x4323fb
mov eax, dword [0x436f60]
cmp byte [eax], 0
jne 0x432387
cmp dword [ebp - 0xc], 0
je 0x432387
lea eax, [ebp - 0x34]
call fcn.0042bf70
mov eax, dword [ebp - 0x34]
push eax
call fcn.0042c18c
push eax
lea eax, [ebp - 0x38]
call fcn.0042c020
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0xc]
xor eax, eax
call fcn.00413644
jmp 0x4323fb
lea ecx, [ebp - 8]
xor edx, edx
mov eax, 0x4324e8
call fcn.0042c30c
call fcn.004151e4
test al, al
je 0x4323cf
push dword [ebp - 8]
push 0x4324f4
lea edx, [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
call fcn.004081ac
push dword [ebp - 0x3c]
push 0x432504
push dword [ebp - 0x10]
push 0x432510
lea eax, [ebp - 8]
mov edx, 6
call fcn.00404a1c
lea eax, [ebp - 0x40]
call fcn.0042bf70
mov eax, dword [ebp - 0x40]
push eax
call fcn.0042c18c
push eax
push 0
lea eax, [ebp - 0x44]
call fcn.0042c110
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 8]
mov eax, 1
call fcn.004136d4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x43242a
lea eax, [ebp - 0x44]
mov edx, 0xb
call fcn.004046c0
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.004046c0
ret