Function at 0x467394
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 9
push 0
push 0
dec ecx
jne 0x46739d
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0xc]
call fcn.004053bc
mov eax, dword [ebp + 8]
call fcn.004053bc
xor eax, eax
push ebp
push 0x4677b6
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x41543c]
call fcn.004032e0
mov dword [ebp - 0x18], eax
mov dl, 1
mov eax, dword [0x41543c]
call fcn.004032e0
mov dword [ebp - 0x1c], eax
xor ebx, ebx
mov eax, dword [ebp - 0xc]
call fcn.00405198
test eax, eax
jl 0x46743c
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x10]
mov eax, dword [eax + edx*8]
mov edx, dword [ebp - 8]
mov edx, dword [edx*4 + 0x46e04c]
call fcn.004044f0
jne 0x467434
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x10]
mov edx, dword [eax + edx*8 + 4]
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0x10]
dec dword [ebp - 0x24]
jne 0x467408
mov eax, dword [ebp + 8]
call fcn.00405198
test eax, eax
jl 0x467487
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 0
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x10]
mov eax, dword [eax + edx*8]
mov edx, dword [ebp - 8]
mov edx, dword [edx*4 + 0x46e04c]
call fcn.004044f0
jne 0x46747f
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x10]
mov edx, dword [eax + edx*8 + 4]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0x10]
dec dword [ebp - 0x24]
jne 0x467453
lea eax, [ebp - 0x20]
call fcn.004040e4
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jne 0x4674a5
xor edx, edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x467727
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x46771b
inc eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x14], 0
lea ecx, [ebp - 0x2c]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x30]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x30]
pop eax
call fcn.004044f0
je 0x46771b
mov esi, 1
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, dword [ebp - 0x14]
jne 0x46770f
dec esi
jne 0x46770f
mov bl, 1
lea ecx, [ebp - 0x20]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax]
call dword [esi + 0xc]
mov ecx, dword [0x46c478]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x467934]
call fcn.0044e744
mov edi, eax
cmp dword [ebp - 8], 1
jne 0x467566
mov edx, 0x4677d0
mov eax, dword [edi + 0x31c]
call fcn.004369dc
cmp dword [ebp - 8], 2
jne 0x46757c
mov edx, 0x467804
mov eax, dword [edi + 0x31c]
call fcn.004369dc
mov eax, dword [ebp - 8]
mov edx, dword [eax*4 + 0x46e04c]
mov eax, dword [edi + 0x320]
call fcn.004369dc
lea edx, [ebp - 0x34]
mov eax, dword [edi + 0x320]
call fcn.004369ac
mov edx, dword [ebp - 0x34]
mov eax, dword [edi + 0x320]
add eax, 0x80
call fcn.00404138
xor edx, edx
mov eax, dword [edi + 0x324]
call fcn.004369dc
mov edx, dword [ebp - 0x20]
mov eax, dword [edi + 0x324]
call fcn.004369dc
lea edx, [ebp - 0x38]
mov eax, dword [edi + 0x324]
call fcn.004369ac
mov edx, dword [ebp - 0x38]
mov eax, dword [edi + 0x324]
add eax, 0x80
call fcn.00404138
xor edx, edx
mov eax, dword [edi + 0x328]
call fcn.004369dc
xor esi, esi
lea edx, [ebp - 0x40]
mov eax, dword [ebp - 8]
mov eax, dword [eax*4 + 0x46e04c]
call fcn.0040c8b0
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 0x20]
call fcn.004043ac
mov eax, dword [ebp - 0x40]
lea edx, [ebp - 0x3c]
call fcn.00466bd4
mov edx, dword [ebp - 0x3c]
mov eax, dword [edi + 0x328]
call fcn.004369dc
inc esi
cmp esi, 0x64
jne 0x467645
mov eax, dword [0x46c478]
mov eax, dword [eax]
call fcn.00455e88
cmp esi, 0x7d0
je 0x467661
lea edx, [ebp - 0x44]
mov eax, dword [edi + 0x328]
call fcn.004369ac
cmp dword [ebp - 0x44], 0
je 0x4675fd
lea edx, [ebp - 0x48]
mov eax, dword [edi + 0x328]
call fcn.004369ac
mov edx, dword [ebp - 0x48]
mov eax, dword [edi + 0x328]
add eax, 0x80
call fcn.00404138
mov eax, dword [0x46c478]
mov eax, dword [eax]
call fcn.00455054
mov eax, dword [0x46c478]
mov eax, dword [eax]
call fcn.00455b0c
mov eax, edi
mov edx, dword [eax]
call dword [edx + 0xec]
cmp eax, 7
jne 0x4676d0
lea edx, [ebp - 0x4c]
mov eax, dword [ebp - 8]
mov eax, dword [eax*4 + 0x46e04c]
call fcn.0040c8b0
lea eax, [ebp - 0x4c]
mov edx, dword [ebp - 0x20]
call fcn.004043ac
mov eax, dword [ebp - 0x4c]
call fcn.00408950
jmp 0x4676f6
mov eax, 0x46e05c
mov edx, dword [0x466284]
call fcn.00405358
mov eax, 0x46e05c
mov edx, dword [0x46e060]
mov ecx, dword [0x466284]
call fcn.00405394
mov eax, edi
call fcn.00403310
push 0
mov eax, dword [0x46c478]
mov eax, dword [eax]
mov eax, dword [eax + 0x30]
push eax
call sub.user32.dll_ShowWindow
inc dword [ebp - 0x14]
dec dword [ebp - 0x28]
jne 0x4674dd
inc dword [ebp - 0x10]
dec dword [ebp - 0x24]
jne 0x4674c1
test bl, bl
jne 0x467748
mov eax, 0x46e05c
mov edx, dword [0x466284]
call fcn.00405358
mov edx, 0x46e05c
mov eax, dword [ebp - 4]
call fcn.00466d3c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4677bd
lea eax, [ebp - 0x4c]
call fcn.004040e4
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.00404108
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.00404108
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.00404108
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.00404108
lea eax, [ebp - 0x20]
call fcn.004040e4
lea eax, [ebp - 0xc]
mov edx, dword [0x466284]
call fcn.00405358
lea eax, [ebp + 8]
mov edx, dword [0x466284]
call fcn.00405358
ret