Function at 0x4476b3
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
push esi
push edi
lea eax, [ebp - 0x1c]
mov edi, ecx
xor ebx, ebx
push eax
push dword [edi + 4]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], ebx
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [ebp - 0x14]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
lea ecx, [eax - 0x34]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x18]
lea edx, [ecx + 0x11]
push 0x10c
push dword [edi + 4]
add eax, 0xffffffd8
add ecx, 0x1d
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ecx
call esi
mov dword [ebp - 4], eax
push 4
lea eax, [ebp - 0x2c]
push eax
push ebx
lea ecx, [ebp - 4]
call fcn.00436611
mov eax, dword [ebp - 0x14]
lea ecx, [eax - 0x1e]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x18]
lea edx, [ecx + 0x11]
push 0x10b
push dword [edi + 4]
add eax, 0xffffffee
add ecx, 0x1d
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ecx
call esi
mov dword [ebp - 4], eax
push 4
lea eax, [ebp - 0x2c]
push eax
push ebx
lea ecx, [ebp - 4]
call fcn.00436611
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x1c]
lea ecx, [eax + 0x1da]
add eax, 0x1db
add ebx, 0x14
push 0x10a
push dword [edi + 4]
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], eax
mov dword [ebp - 0x28], eax
lea eax, [ebx + 0x3a]
add ecx, 0x10
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ecx
call esi
mov dword [ebp - 4], eax
push 4
lea eax, [ebp - 0x2c]
push eax
push 0
lea ecx, [ebp - 4]
call fcn.00436611
add ebx, 0x39
mov dword [ebp - 4], 2
call fcn.0040a6bc
test eax, eax
je 0x4477b3
xor eax, eax
jmp 0x4477b6
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
add eax, ecx
lea ecx, [eax - 0x21]
push 0x105
push dword [edi + 4]
mov dword [ebp - 0x2c], ebx
add eax, 0xffffffee
add ebx, 0x55
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], eax
call esi
mov dword [ebp - 4], eax
push 4
lea eax, [ebp - 0x2c]
push eax
push 0
lea ecx, [ebp - 4]
call fcn.00436611
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 0x159]
add eax, 0x1b6
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0xc]
push 0x10e
push dword [edi + 4]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 8]
add eax, 0x11
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x20], eax
call esi
mov dword [ebp - 0xc], eax
push 4
lea eax, [ebp - 0x2c]
push eax
push 0
lea ecx, [ebp - 0xc]
call fcn.00436611
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + 0x72]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x18]
mov ebx, 0x113
lea edx, [ecx + 0x90]
push ebx
push dword [edi + 4]
add eax, 0x15b
add ecx, 0xe2
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ecx
call esi
mov dword [ebp - 0xc], eax
push 4
lea eax, [ebp - 0x2c]
push eax
push 0
lea ecx, [ebp - 0xc]
call fcn.00436611
push ebx
push dword [edi + 4]
call esi
mov ebx, dword [sym.imp.USER32.dll_ShowWindow]
push 5
push eax
call ebx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x18]
lea edx, [ecx + 0x1cb]
push 0x122
push dword [edi + 4]
mov dword [ebp - 0x2c], eax
add eax, 0x1ca
add ecx, 0x1cc
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ecx
call esi
mov dword [ebp - 0xc], eax
push 4
lea eax, [ebp - 0x2c]
push eax
push 0
lea ecx, [ebp - 0xc]
call fcn.00436611
push 0x122
push dword [edi + 4]
call esi
push 5
push eax
call ebx
call fcn.004341a8
mov eax, dword [ebp - 0x1c]
sub eax, 0xffffff80
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 0x137]
push 0x10d
push dword [edi + 4]
add eax, 0x172
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], 0x14e
mov dword [ebp - 0x20], eax
call esi
mov dword [ebp - 0xc], eax
push 4
lea eax, [ebp - 0x2c]
push eax
push 0
lea ecx, [ebp - 0xc]
call fcn.00436611
push 0xdd
push dword [edi + 4]
call esi
push 0
push eax
call ebx
call fcn.00445dbc
mov ecx, eax
call fcn.00445ac3
push 0x10f
push dword [edi + 4]
test eax, eax
je 0x447aa1
mov dword [ebp - 0x2c], 0x14
mov dword [ebp - 0x28], 0x1ac
mov dword [ebp - 0x24], 0x23
mov dword [ebp - 0x20], 0x1bb
call esi
mov dword [ebp - 0xc], eax
push 4
lea eax, [ebp - 0x2c]
push eax
push 0
lea ecx, [ebp - 0xc]
call fcn.00436611
push 0xde
push dword [edi + 4]
mov dword [ebp - 0x2c], 0x51
mov dword [ebp - 0x28], 0x1ac
mov dword [ebp - 0x24], 0x1e1
mov dword [ebp - 0x20], 0x1bb
call esi
mov dword [ebp - 0xc], eax
push 4
lea eax, [ebp - 0x2c]
push eax
push 0
lea ecx, [ebp - 0xc]
call fcn.00436611
push 0xdf
push dword [edi + 4]
mov dword [ebp - 0x2c], 0x51
mov dword [ebp - 0x28], 0x1b3
mov dword [ebp - 0x24], 0x1e1
mov dword [ebp - 0x20], 0x1c2
call esi
mov dword [ebp - 0xc], eax
push 4
lea eax, [ebp - 0x2c]
push eax
push 0
lea ecx, [ebp - 0xc]
call fcn.00436611
push 0xe0
push dword [edi + 4]
mov dword [ebp - 0x2c], 0x1fd
mov dword [ebp - 0x28], 0x1ac
mov dword [ebp - 0x24], 0x243
mov dword [ebp - 0x20], 0x1bb
call esi
mov dword [ebp - 0xc], eax
push 4
lea eax, [ebp - 0x2c]
push eax
push 0
lea ecx, [ebp - 0xc]
call fcn.00436611
push 0xe1
push dword [edi + 4]
mov dword [ebp - 0x2c], 0x10a
mov dword [ebp - 0x28], 0x1ac
mov dword [ebp - 0x24], 0x161
mov dword [ebp - 0x20], 0x1bb
call esi
mov dword [ebp - 0xc], eax
push 4
lea eax, [ebp - 0x2c]
push eax
push 0
lea ecx, [ebp - 0xc]
call fcn.00436611
push 0x10f
push dword [edi + 4]
call esi
push 1
push eax
call ebx
push 0xde
push dword [edi + 4]
call esi
push 1
push eax
call ebx
push 0xdf
push dword [edi + 4]
call esi
push 1
push eax
call ebx
push 0xe0
push dword [edi + 4]
call esi
push 1
push eax
call ebx
push 0xe1
push dword [edi + 4]
call esi
push 1
jmp 0x447ae1
call esi
push 0
push eax
call ebx
push 0xde
push dword [edi + 4]
call esi
push 0
push eax
call ebx
push 0xdf
push dword [edi + 4]
call esi
push 0
push eax
call ebx
push 0xe0
push dword [edi + 4]
call esi
push 0
push eax
call ebx
push 0xe1
push dword [edi + 4]
call esi
push 0
push eax
call ebx
pop edi
pop esi
xor eax, eax
pop ebx
leave
ret