Function at 0x476fe8
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe8
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x47764a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
jne 0x47703d
mov eax, dword [ebp - 4]
test byte [eax + 0x374], 4
je 0x47703d
lea edx, [ebp - 0x18]
mov eax, dword [0x503f10]
call fcn.00408d4c
mov ecx, dword [ebp - 0x18]
mov dl, 1
mov eax, dword [0x420a48]
call fcn.004116d4
call fcn.00404a74
mov eax, dword [0x50915c]
call fcn.0047cc08
mov eax, dword [ebp - 4]
or byte [eax + 0x374], 4
xor edx, edx
push ebp
push 0x47762d
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
jne 0x4775e7
mov eax, dword [ebp - 4]
cmp byte [eax + 0x1e2], 0
je 0x4774db
xor eax, eax
push ebp
push 0x4770a0
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov si, 0xffab
call fcn.004042a8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4770b7
mov eax, dword [ebp - 4]
cmp byte [eax + 0x288], 4
je 0x4770e3
mov eax, dword [ebp - 4]
cmp byte [eax + 0x288], 6
jne 0x4771c7
mov eax, dword [ebp - 4]
cmp byte [eax + 0x287], 1
jne 0x4771c7
mov eax, dword [ebp - 4]
cmp byte [eax + 0x287], 1
jne 0x477129
mov eax, dword [0x50915c]
mov eax, dword [eax + 0x40]
call fcn.0045a318
mov ebx, eax
mov eax, dword [ebp - 4]
sub ebx, dword [eax + 0x48]
sar ebx, 1
jns 0x47710b
adc ebx, 0
mov eax, dword [0x50915c]
mov eax, dword [eax + 0x40]
call fcn.0045a35c
mov esi, eax
mov eax, dword [ebp - 4]
sub esi, dword [eax + 0x4c]
sar esi, 1
jns 0x47715c
adc esi, 0
jmp 0x47715c
lea edx, [ebp - 0x14]
mov eax, dword [0x509160]
call fcn.0047a03c
mov ebx, dword [ebp - 0xc]
sub ebx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
sub ebx, dword [eax + 0x48]
sar ebx, 1
jns 0x477149
adc ebx, 0
mov esi, dword [ebp - 8]
sub esi, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
sub esi, dword [eax + 0x4c]
sar esi, 1
jns 0x47715c
adc esi, 0
mov eax, dword [0x509160]
call fcn.00478fc0
cmp ebx, eax
jge 0x477176
mov eax, dword [0x509160]
call fcn.00478fc0
mov ebx, eax
mov eax, dword [0x509160]
call fcn.00478fb4
cmp esi, eax
jge 0x477190
mov eax, dword [0x509160]
call fcn.00478fb4
mov esi, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
push eax
mov ecx, esi
mov edx, ebx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x88]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x57], 0
je 0x4773e7
mov eax, dword [ebp - 4]
call fcn.00474888
jmp 0x4773e7
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x288]
mov edx, eax
add dl, 0xfa
sub dl, 2
jae 0x4772ec
mov eax, dword [0x50915c]
mov esi, dword [eax + 0x40]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x288], 7
jne 0x47720e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
mov edx, dword [0x46ec10]
call fcn.00404238
test al, al
je 0x47720e
mov eax, dword [ebp - 4]
mov esi, dword [eax + 4]
test esi, esi
je 0x47724f
cmp esi, dword [ebp - 4]
je 0x47724f
mov eax, esi
call fcn.00472a1c
mov ebx, eax
mov eax, dword [esi + 0x48]
mov edx, dword [ebp - 4]
sub eax, dword [edx + 0x48]
sar eax, 1
jns 0x477230
adc eax, 0
add ebx, eax
mov eax, esi
call fcn.00472a3c
mov edx, dword [esi + 0x4c]
mov ecx, dword [ebp - 4]
sub edx, dword [ecx + 0x4c]
sar edx, 1
jns 0x477249
adc edx, 0
add eax, edx
mov esi, eax
jmp 0x477281
mov eax, dword [0x509160]
call fcn.00478fa8
mov ebx, eax
mov eax, dword [ebp - 4]
sub ebx, dword [eax + 0x48]
sar ebx, 1
jns 0x477268
adc ebx, 0
mov eax, dword [0x509160]
call fcn.00478f9c
mov esi, eax
mov eax, dword [ebp - 4]
sub esi, dword [eax + 0x4c]
sar esi, 1
jns 0x477281
adc esi, 0
mov eax, dword [0x509160]
call fcn.00478fc0
cmp ebx, eax
jge 0x47729b
mov eax, dword [0x509160]
call fcn.00478fc0
mov ebx, eax
mov eax, dword [0x509160]
call fcn.00478fb4
cmp esi, eax
jge 0x4772b5
mov eax, dword [0x509160]
call fcn.00478fb4
mov esi, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
push eax
mov ecx, esi
mov edx, ebx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x88]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x57], 0
je 0x4773e7
mov eax, dword [ebp - 4]
call fcn.00474888
jmp 0x4773e7
cmp al, 5
jne 0x4773e7
mov eax, dword [ebp - 4]
cmp byte [eax + 0x287], 1
jne 0x47733a
mov eax, dword [0x50915c]
mov eax, dword [eax + 0x40]
call fcn.0045a318
mov ebx, eax
mov eax, dword [ebp - 4]
sub ebx, dword [eax + 0x48]
sar ebx, 1
jns 0x47731c
adc ebx, 0
mov eax, dword [0x50915c]
mov eax, dword [eax + 0x40]
call fcn.0045a35c
mov esi, eax
mov eax, dword [ebp - 4]
sub esi, dword [eax + 0x4c]
sar esi, 1
jns 0x477396
adc esi, 0
jmp 0x477396
mov eax, dword [0x509160]
call fcn.00478fd8
mov ebx, eax
sar ebx, 1
jns 0x47734d
adc ebx, 0
mov eax, dword [0x509160]
call fcn.00478fc0
add ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
sar eax, 1
jns 0x477366
adc eax, 0
sub ebx, eax
mov eax, dword [0x509160]
call fcn.00478fcc
mov esi, eax
sar esi, 1
jns 0x47737b
adc esi, 0
mov eax, dword [0x509160]
call fcn.00478fb4
add esi, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
sar eax, 1
jns 0x477394
adc eax, 0
sub esi, eax
mov eax, dword [0x509160]
call fcn.00478fc0
cmp ebx, eax
jge 0x4773b0
mov eax, dword [0x509160]
call fcn.00478fc0
mov ebx, eax
mov eax, dword [0x509160]
call fcn.00478fb4
cmp esi, eax
jge 0x4773ca
mov eax, dword [0x509160]
call fcn.00478fb4
mov esi, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
push eax
mov ecx, esi
mov edx, ebx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x88]
mov eax, dword [ebp - 4]
mov byte [eax + 0x288], 0
mov eax, dword [ebp - 4]
cmp byte [eax + 0x287], 1
jne 0x4774b6
mov eax, dword [ebp - 4]
cmp byte [eax + 0x283], 2
jne 0x477443
push 0
mov eax, dword [ebp - 4]
call fcn.00463350
push eax
push 0x223
mov eax, dword [0x50915c]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x36c]
push eax
call sub.user32.dll_SendMessageW
push 3
mov eax, dword [ebp - 4]
call fcn.00463350
push eax
call sub.user32.dll_ShowWindow
jmp 0x477494
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x283]
mov eax, dword [eax*4 + 0x502c1c]
push eax
mov eax, dword [ebp - 4]
call fcn.00463350
push eax
call sub.user32.dll_ShowWindow
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x4c]
shl edx, 0x10
or eax, edx
push eax
push 0
push 5
mov eax, dword [ebp - 4]
call fcn.00463350
push eax
push 0x409b9c
call sub.user32.dll_CallWindowProcW
mov eax, dword [ebp - 4]
call fcn.0045acb0
push 0
push 0
push 0x234
mov eax, dword [0x50915c]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x36c]
push eax
call sub.user32.dll_SendMessageW
jmp 0x477615
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x283]
mov eax, dword [eax*4 + 0x502c1c]
push eax
mov eax, dword [ebp - 4]
call fcn.00463350
push eax
call sub.user32.dll_ShowWindow
jmp 0x477615
xor eax, eax
push ebp
push 0x4774ff
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov si, 0xffac
call fcn.004042a8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x477516
mov eax, dword [0x509160]
mov eax, dword [eax + 0x64]
cmp eax, dword [ebp - 4]
jne 0x47752d
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.00475d3c
mov eax, dword [ebp - 4]
cmp byte [eax + 0x287], 1
jne 0x477549
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0xb0]
jmp 0x477615
mov eax, dword [ebp - 4]
test byte [eax + 0x374], 8
je 0x477577
push 0x97
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.00463350
push eax
call sub.user32.dll_SetWindowPos
jmp 0x477615
xor ebx, ebx
mov eax, dword [ebp - 4]
call fcn.00463350
mov esi, eax
call sub.user32.dll_GetActiveWindow
cmp esi, eax
jne 0x4775ac
mov eax, dword [ebp - 4]
call fcn.00463350
call fcn.0047036c
test eax, eax
jne 0x4775ac
mov eax, dword [ebp - 4]
call fcn.00463350
call fcn.0047069c
mov ebx, eax
test ebx, ebx
je 0x4775d5
push 0x97
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.00463350
push eax
call sub.user32.dll_SetWindowPos
push ebx
call sub.user32.dll_SetActiveWindow
jmp 0x477615
push 0
mov eax, dword [ebp - 4]
call fcn.00463350
push eax
call sub.user32.dll_ShowWindow
jmp 0x477615
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
je 0x477615
mov eax, dword [ebp - 4]
cmp dword [eax + 0x30], 0
je 0x477615
mov eax, dword [ebp - 4]
cmp byte [eax + 0x1e2], 0
je 0x477615
push 1
mov eax, dword [ebp - 4]
call fcn.00463350
push eax
call sub.user32.dll_ShowWindow
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x477634
mov eax, dword [ebp - 4]
and byte [eax + 0x374], 0xfb
ret