Function at 0x47fe64
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb0
push ebx
push esi
push edi
mov esi, eax
mov eax, dword [ebp + 0xc]
mov dword [0x4c20b4], eax
mov eax, dword [ebp + 8]
mov dword [0x4c20b8], eax
mov dword [0x4c20bc], edx
mov dword [0x4c20c0], ecx
xor eax, eax
mov dword [0x4c20ac], eax
call fcn.0047da54
mov eax, dword [0x4bdbd8]
push eax
call sub.kernel32.dll_LoadLibraryA
mov ebx, eax
mov eax, dword [0x4bf704]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x28]
mov edx, 0x28
call fcn.004066e4
mov dword [ebp - 0x28], 0xb
push 0x7f00
push 0
call sub.user32.dll_LoadCursorA
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], esi
mov dword [ebp - 0xc], 0x10
mov dword [ebp - 0x24], 0x47dd0c
lea eax, [ebp - 0x28]
push eax
call sub.user32.dll_RegisterClassA
push ebx
call sub.kernel32.dll_FreeLibrary_1
push 0
mov eax, dword [0x4bf704]
push eax
push 0
mov eax, dword [0x4beb60]
mov eax, dword [eax]
push eax
mov eax, dword [0x4be784]
mov eax, dword [eax + 0x1710]
mov edi, dword [0x4be784]
mov edi, dword [edi + 0x1708]
sub eax, edi
push eax
mov eax, dword [0x4be784]
mov eax, dword [eax + 0x170c]
mov esi, dword [0x4be784]
mov esi, dword [esi + 0x1704]
sub eax, esi
push eax
mov eax, dword [0x4be784]
push edi
mov eax, dword [0x4be784]
push esi
push 0x80cf0000
mov ebx, dword [ebp - 4]
push ebx
push ebx
push 0x10000
call sub.user32.dll_CreateWindowExA
mov dword [0x4c20c4], eax
mov eax, dword [0x4bdbd8]
push eax
call sub.kernel32.dll_LoadLibraryA
mov ebx, eax
push 0x66
push ebx
call sub.user32.dll_LoadIconA
push eax
push 0xfffffffffffffff2
mov eax, dword [0x4c20c4]
push eax
call sub.user32.dll_SetClassLongA
push ebx
call sub.kernel32.dll_FreeLibrary_1
push 1
mov eax, dword [0x4c20c4]
push eax
call sub.user32.dll_ShowWindow
call fcn.0047fddc
lea eax, [ebp - 0x50]
push eax
mov eax, dword [0x4c20c4]
push eax
call sub.user32.dll_GetClientRect
push 0
mov eax, dword [0x4bf704]
push eax
push 0
mov eax, dword [0x4c20c4]
push eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x4c]
movsx edx, word [0x4c20c8]
sub eax, edx
push eax
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x50]
sar eax, 1
jns 0x47ffd6
adc eax, 0
sub eax, 2
push eax
push 0
push 0
push 0x50010037
push 0x480150
push 0x480164
push 0x200
call sub.user32.dll_CreateWindowExA
mov dword [0x4c1ed8], eax
push 0x47e7cc
push 0xfffffffffffffffc
mov eax, dword [0x4c1ed8]
push eax
call sub.user32.dll_SetWindowLongA
mov dword [0x4c1ed0], eax
push 5
mov eax, dword [0x4c1ed8]
push eax
call sub.user32.dll_ShowWindow
xor ecx, ecx
mov edx, dword [0x4c210c]
mov eax, dword [0x4c1ed8]
call fcn.004102a8
push 0
mov eax, dword [0x4bf704]
push eax
push 0
mov eax, dword [0x4c20c4]
push eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x4c]
movsx edx, word [0x4c20c8]
sub eax, edx
push eax
mov ebx, dword [ebp - 0x48]
sub ebx, dword [ebp - 0x50]
sar ebx, 1
jns 0x48005f
adc ebx, 0
mov eax, ebx
sub eax, 2
push eax
push 0
add ebx, 2
push ebx
push 0x5001040d
push 0
push 0x480174
push 0x200
call sub.user32.dll_CreateWindowExA
mov dword [0x4c1edc], eax
push 0x47e930
push 0xfffffffffffffffc
mov eax, dword [0x4c1edc]
push eax
call sub.user32.dll_SetWindowLongA
mov dword [0x4c1ed4], eax
push 5
mov eax, dword [0x4c1edc]
push eax
call sub.user32.dll_ShowWindow
lea eax, [ebp - 0x40]
mov edx, 0x18
call fcn.004066e4
mov dword [ebp - 0x40], 7
xor esi, esi
mov ebx, 0x4bdc20
mov dword [ebp - 0x38], 0x64
mov eax, ebx
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0x40]
mov edx, esi
mov eax, dword [0x4c1edc]
call fcn.00410120
inc esi
add ebx, 0x1f
cmp esi, 2
jne 0x4800c5
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x50]
sar eax, 1
jns 0x4800fb
adc eax, 0
sub eax, 6
sub eax, 0xc8
mov dword [ebp - 0x38], eax
mov eax, esi
shl eax, 5
sub eax, esi
add eax, 0x4bdc20
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0x40]
mov edx, 2
mov eax, dword [0x4c1edc]
call fcn.00410120
call fcn.0047d9dc
mov ecx, 1
mov edx, dword [0x4c20e8]
mov eax, dword [0x4c1edc]
call fcn.0040ffb8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8