Function at 0x4c6b00
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x208
mov eax, dword [0x6a9068]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x6aad00], 0
push esi
mov esi, ecx
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x1f4], esi
je 0x4c76bd
cmp dword [esi + 0xbc8], 0
jne 0x4c76bd
cmp dword [0x6b9170], 0
je 0x4c76bd
cmp dword [0x6aad40], 7
jne 0x4c76bd
push ebx
push 0x58
mov ecx, edi
call fcn.005197a0
mov ebx, 1
cmp eax, ebx
jne 0x4c6b7c
mov ecx, dword [0x6ab500]
mov edx, dword [0x6b9170]
mov eax, dword [ecx]
mov eax, dword [eax + 0x64]
push edx
push ebx
call eax
cmp dword [0x6c9170], 0
mov dword [ebp - 0x208], 0
je 0x4c6b9d
cmp dword [esi + 0xbc4], ebx
jne 0x4c6b9d
mov dword [ebp - 0x208], ebx
push 0x38
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c6baf
mov ebx, 4
push 0x1d
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c6bc2
and ebx, 0xfffffffe
or ebx, 2
push 0x2a
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c6bd5
and ebx, 0xfffffffe
or ebx, 8
mov edx, dword [ebp - 0x1f4]
xor esi, esi
lea ecx, [ecx]
cmp dword [ebp - 0x208], 0
je 0x4c6c00
mov ecx, dword [edx + 0xbc4]
imul ecx, ecx, 0x29
add ecx, esi
add ecx, ecx
cmp dword [edx + ecx*8 + 0x52c], 0
je 0x4c6c5b
mov eax, dword [edx + 0xbc4]
imul eax, eax, 0x29
add eax, esi
mov ecx, eax
add ecx, ecx
test dword [edx + ecx*8 + 0x524], ebx
je 0x4c6c5b
add eax, 0x53
add eax, eax
cmp dword [edx + eax*8], 0
je 0x4c6c35
movzx edx, word [edx + ecx*8 + 0x528]
push edx
mov ecx, edi
call fcn.00519730
jmp 0x4c6c45
movzx eax, word [edx + ecx*8 + 0x528]
push eax
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c6c55
mov ecx, dword [ebp - 0x1f4]
push esi
call fcn.004c5380
mov edx, dword [ebp - 0x1f4]
inc esi
cmp esi, 0x29
jl 0x4c6be0
push 0x13
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c6d4c
push 0x38
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c6d4c
push 0
push 0x3880
mov ecx, 0x6e6108
call fcn.0053ed70
test eax, eax
je 0x4c6cc3
push 0x597974
push 0x1d
push 0x6bb178
call fcn.004cc0a0
add esp, 0xc
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0056d9d2
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x6ab3f8]
cmp dword [ecx + 0x10], 0
jne 0x4c6cfd
cmp dword [0x6c7024], 0
je 0x4c6d19
push 0x283
mov ecx, 0x6bb178
call fcn.004cae20
push eax
push 0x1d
push 0x6bb178
call fcn.004cc0a0
mov ecx, dword [0x6ab3f8]
add esp, 0xc
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push 0
call eax
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0056d9d2
mov esp, ebp
pop ebp
ret 4
mov edx, dword [0x6a390c]
cmp byte [edx + 0x6b8d58], 0
je 0x4c6d43
push 0x58d670
push 1
push 0x3aba
push 0x6b8870
call fcn.00443e30
add esp, 0x10
jmp 0x4c6d4c
mov eax, dword [ecx]
mov edx, dword [eax + 8]
push 1
call edx
push 0xc7
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c6d7d
mov ecx, dword [0x6ab318]
test ecx, ecx
je 0x4c76bc
cmp dword [ecx + 0x10], 0
mov eax, dword [ecx]
mov edx, dword [eax + 8]
je 0x4c6d79
push 0
jmp 0x4c6d7b
push 1
call edx
push 0x14
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c6dd8
push 0x38
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c6dd8
mov esi, dword [0x6ab54c]
test esi, esi
je 0x4c76bc
cmp dword [esi + 0x10], 0
mov ecx, esi
je 0x4c6dbf
push 1
call fcn.00447a30
mov ecx, esi
call fcn.00447d20
push 0
jmp 0x4c6dcf
push 0
call fcn.00447a30
mov ecx, esi
call fcn.00448380
push 1
mov eax, dword [esi]
mov edx, dword [eax + 8]
mov ecx, esi
call edx
push 0x3f
mov ecx, edi
call fcn.005196f0
push 0x41
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c6e12
push 0x8e6
mov ecx, 0x6bb178
call fcn.004cae20
push eax
push 2
push 0x3ab5
push 0x6b8870
call fcn.00443e30
add esp, 0x10
push 0x57
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c6e5f
call fcn.0040cdc0
mov ecx, eax
call fcn.00514770
test eax, eax
jne 0x4c6e48
call fcn.0040cdc0
mov ecx, eax
call fcn.00514940
mov ecx, dword [0x6ab58c]
call fcn.005143f0
jmp 0x4c6e5f
call fcn.0040cdc0
mov ecx, eax
call fcn.00514780
mov ecx, dword [0x6ab58c]
call fcn.005143c0
push 0x10
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c6ea3
push 0x38
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c6ea3
mov eax, dword [0x6aa7c0]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x4c6e94
mov ecx, dword [0x6aa7c0]
push 0
push ecx
jmp 0x4c6e9d
mov edx, dword [0x6aa7c0]
push 8
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
cmp dword [0x6ba03c], 0
je 0x4c76bc
push 0x22
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c6ee4
push 0x1d
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c6ee4
mov ecx, dword [0x6ab4d4]
test ecx, ecx
je 0x4c6ee4
mov eax, dword [ecx]
mov eax, dword [eax + 8]
xor edx, edx
cmp dword [ecx + 0x10], edx
sete dl
push edx
call eax
push 0x13
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c6f18
push 0x1d
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c6f18
mov ecx, dword [0x6ab4d8]
test ecx, ecx
je 0x4c6f18
mov edx, dword [ecx]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [ecx + 0x10], eax
sete al
push eax
call edx
push 0x20
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c6f4b
push 0x1d
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c6f4b
mov ecx, dword [0x6ab510]
cmp dword [ecx + 0x10], 1
mov eax, dword [ecx]
mov edx, dword [eax + 8]
jne 0x4c6f47
push 0
jmp 0x4c6f49
push 1
call edx
push 0x3b
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c6f75
push 0x38
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c6f75
xor eax, eax
cmp dword [0x6e42e4], eax
sete al
mov dword [0x6e42e4], eax
push 0xe
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c6f99
push 0x38
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c6f99
mov ecx, 0x6b8870
call fcn.00440910
push 0x19
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c6fd1
push 0x38
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c6fd1
mov eax, dword [ebp - 0x1f4]
xor dword [eax + 0xbd0], 1
mov eax, dword [eax + 0xbd0]
push eax
mov ecx, 0x6acaa0
call fcn.00424660
push 0x2e
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c7004
push 0x38
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c7004
cmp dword [0x6e64d8], 4
mov ecx, 0x6e64c0
jne 0x4c6ffd
push 0
jmp 0x4c6fff
push 4
call fcn.00547240
push 0x1e
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c7046
push 0x38
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c7046
mov esi, dword [0x6ab4b8]
test esi, esi
je 0x4c7046
mov edx, dword [esi]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [esi + 0x10], eax
mov ecx, esi
sete al
push eax
call edx
push 0x597960
mov ecx, esi
call fcn.0047bcc0
push 0x1f
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c707a
push 0x38
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c707a
mov ecx, dword [0x6ab488]
test ecx, ecx
je 0x4c707a
mov eax, dword [ecx]
mov eax, dword [eax + 8]
xor edx, edx
cmp dword [ecx + 0x10], edx
sete dl
push edx
call eax
push 0x26
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c72e7
push 0x38
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c72e7
mov esi, dword [0x6ab48c]
test esi, esi
je 0x4c72e7
mov ecx, dword [0x597954]
mov edx, dword [0x597958]
movzx eax, word [0x59795c]
mov dword [ebp - 0x44], ecx
movzx ecx, byte [0x59795e]
mov dword [ebp - 0x40], edx
lea edx, [ebp - 0x1c8]
mov byte [ebp - 0x3a], cl
push edx
mov ecx, esi
mov word [ebp - 0x2f], 0x800
mov dword [ebp - 0x1c8], 2
mov word [ebp - 0x3c], ax
call fcn.0047ab00
mov eax, dword [0x597948]
mov ecx, dword [0x59794c]
movzx edx, word [0x597950]
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x44], eax
movzx eax, byte [0x597952]
lea ecx, [ebp - 0x1c8]
push ecx
mov ecx, esi
mov word [ebp - 0x2f], 0x2001
mov dword [ebp - 0x1c8], 4
mov word [ebp - 0x3c], dx
mov byte [ebp - 0x3a], al
call fcn.0047ab00
mov edx, dword [0x59793c]
mov eax, dword [0x597940]
movzx ecx, word [0x597944]
mov dword [ebp - 0x44], edx
movzx edx, byte [0x597946]
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x1c8]
mov word [ebp - 0x3c], cx
mov ebx, 6
push eax
mov ecx, esi
mov word [ebp - 0x2f], 0x1002
mov dword [ebp - 0x1c8], ebx
mov byte [ebp - 0x3a], dl
call fcn.0047ab00
mov ecx, dword [0x597930]
mov edx, dword [0x597934]
movzx eax, word [0x597938]
mov dword [ebp - 0x44], ecx
movzx ecx, byte [0x59793a]
mov dword [ebp - 0x40], edx
lea edx, [ebp - 0x1c8]
mov byte [ebp - 0x3a], cl
push edx
mov ecx, esi
mov word [ebp - 0x2f], 0x2003
mov dword [ebp - 0x1c8], 8
mov word [ebp - 0x3c], ax
call fcn.0047ab00
mov eax, dword [0x597924]
mov ecx, dword [0x597928]
movzx edx, word [0x59792c]
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x44], eax
movzx eax, byte [0x59792e]
lea ecx, [ebp - 0x1c8]
push ecx
mov ecx, esi
mov word [ebp - 0x2f], 0x2004
mov dword [ebp - 0x1c8], 0xa
mov word [ebp - 0x3c], dx
mov byte [ebp - 0x3a], al
call fcn.0047ab00
mov edx, dword [0x597918]
movzx ecx, word [0x597920]
mov eax, dword [0x59791c]
mov dword [ebp - 0x44], edx
movzx edx, byte [0x597922]
mov word [ebp - 0x2f], 0x405
mov dword [ebp - 0x1c8], 0xc
mov dword [ebp - 0x40], eax
mov word [ebp - 0x3c], cx
mov byte [ebp - 0x3a], dl
lea eax, [ebp - 0x1c8]
push eax
mov ecx, esi
call fcn.0047ab00
mov ecx, dword [0x59790c]
mov edx, dword [0x597910]
movzx eax, word [0x597914]
mov dword [ebp - 0x44], ecx
movzx ecx, byte [0x597916]
mov dword [ebp - 0x40], edx
lea edx, [ebp - 0x1c8]
mov byte [ebp - 0x3a], cl
push edx
mov ecx, esi
mov word [ebp - 0x2f], 0x1006
mov dword [ebp - 0x1c8], 0xe
mov word [ebp - 0x3c], ax
call fcn.0047ab00
mov eax, dword [0x597900]
mov ecx, dword [0x597904]
movzx edx, word [0x597908]
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x44], eax
movzx eax, byte [0x59790a]
lea ecx, [ebp - 0x1c8]
push ecx
mov ecx, esi
mov word [ebp - 0x2f], 0x2007
mov dword [ebp - 0x1c8], 0x10
mov word [ebp - 0x3c], dx
mov byte [ebp - 0x3a], al
call fcn.0047ab00
mov edx, dword [esi]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [esi + 0x10], eax
mov ecx, esi
sete al
push eax
call edx
mov ecx, esi
call fcn.0047b010
push 0x24
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c749c
push 0x38
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c749c
lea eax, [ebp - 0x1eb]
push 0x5978f4
push eax
mov byte [ebp - 0x1f0], 0
call fcn.0056d930
lea ecx, [ebp - 0x1da]
push 0x5978e8
push ecx
call fcn.0056d930
lea edx, [ebp - 0x27]
push 0x5978e0
push edx
mov byte [ebp - 0x2c], 1
call fcn.0056d930
lea eax, [ebp - 0x16]
push 0x5978d8
push eax
call fcn.0056d930
mov esi, dword [0x6ab490]
add esp, 0x20
test esi, esi
je 0x4c749c
lea ecx, [ebp - 0x1f0]
push ecx
mov ecx, esi
mov dword [esi + 0x23c], 1
call fcn.00479a10
lea edx, [ebp - 0x2c]
push edx
mov ecx, esi
call fcn.00479a10
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.00479a10
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
call fcn.00479a10
lea edx, [ebp - 0x2c]
push edx
mov ecx, esi
call fcn.00479a10
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.00479a10
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
call fcn.00479a10
lea edx, [ebp - 0x2c]
push edx
mov ecx, esi
call fcn.00479a10
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.00479a10
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
call fcn.00479a10
lea edx, [ebp - 0x2c]
push edx
mov ecx, esi
call fcn.00479a10
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.00479a10
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
call fcn.00479a10
lea edx, [ebp - 0x2c]
push edx
mov ecx, esi
call fcn.00479a10
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.00479a10
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
call fcn.00479a10
lea edx, [ebp - 0x2c]
push edx
mov ecx, esi
call fcn.00479a10
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.00479a10
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
call fcn.00479a10
lea edx, [ebp - 0x2c]
push edx
mov ecx, esi
call fcn.00479a10
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.00479a10
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
call fcn.00479a10
lea edx, [ebp - 0x2c]
push edx
mov ecx, esi
call fcn.00479a10
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.00479a10
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, esi
call fcn.00479a10
mov ecx, esi
call fcn.00479b20
mov edx, dword [esi]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [esi + 0x10], eax
mov ecx, esi
sete al
push eax
call edx
push 0x23
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c74d0
push 0x38
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c74d0
mov ecx, dword [0x6ab494]
test ecx, ecx
je 0x4c74d0
mov eax, dword [ecx]
mov eax, dword [eax + 8]
xor edx, edx
cmp dword [ecx + 0x10], edx
sete dl
push edx
call eax
push 0x22
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c7503
push 0x38
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c7503
mov ecx, dword [0x6ab2d8]
cmp dword [ecx + 0x10], 0
mov edx, dword [ecx]
mov eax, dword [edx + 8]
jne 0x4c74ff
push 1
jmp 0x4c7501
push 0
call eax
push 0x25
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c7519
push 0x38
mov ecx, edi
call fcn.005197a0
push 0x20
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c754c
push 0x38
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c754c
mov ecx, dword [0x6ab50c]
cmp dword [ecx + 0x10], 0
mov edx, dword [ecx]
mov eax, dword [edx + 8]
jne 0x4c7548
push 1
jmp 0x4c754a
push 0
call eax
cmp dword [ebp - 0x208], 1
je 0x4c76bc
push 0x17
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c75a1
push 0x38
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c75a1
mov ecx, dword [0x6b917c]
mov word [ebp - 0x1ff], 0x7f05
mov edx, dword [ecx + 0x129]
push 9
lea eax, [ebp - 0x200]
push eax
mov ecx, 0x6c9608
mov dword [ebp - 0x1fd], edx
call fcn.0051a7c0
push 0x31
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c75d5
push 0x1d
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c75d5
mov ecx, dword [0x6ab4c0]
test ecx, ecx
je 0x4c75d5
mov edx, dword [ecx]
mov edx, dword [edx + 8]
xor eax, eax
cmp dword [ecx + 0x10], eax
sete al
push eax
call edx
push 0x15
mov ecx, edi
call fcn.005196f0
mov bl, 0x3c
test eax, eax
je 0x4c7626
push 0x1d
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c7626
mov eax, dword [0x6b9170]
push 0xd
lea ecx, [ebp - 0x204]
push ecx
mov ecx, 0x6c9608
mov byte [ebp - 0x203], bl
mov byte [ebp - 0x202], 0x29
mov dword [ebp - 0x201], eax
mov dword [ebp - 0x1fb], 2
call fcn.0051a7c0
push 0x10
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c766c
push 0x1d
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c766c
mov edx, dword [0x6b9170]
push 9
lea eax, [ebp - 0x200]
push eax
mov ecx, 0x6c9608
mov byte [ebp - 0x1ff], bl
mov byte [ebp - 0x1fe], 1
mov dword [ebp - 0x1fd], edx
call fcn.0051a7c0
push 0x1e
mov ecx, edi
call fcn.005196f0
test eax, eax
je 0x4c76bc
push 0x1d
mov ecx, edi
call fcn.005197a0
test eax, eax
je 0x4c76bc
mov ecx, dword [0x6b9170]
push 0xd
lea edx, [ebp - 0x204]
mov dword [ebp - 0x201], ecx
push edx
mov ecx, 0x6c9608
mov byte [ebp - 0x203], bl
mov byte [ebp - 0x202], 0x29
mov dword [ebp - 0x1fb], 1
call fcn.0051a7c0
pop ebx
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.0056d9d2
mov esp, ebp
pop ebp
ret 4